Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7e2a04e-9f6b-375d-8210-f680f0a98ae8.roa
File:                     b7e2a04e-9f6b-375d-8210-f680f0a98ae8.roa (raw, json)
Hash identifier:          HQHW3mnNlnzBdJ8HPy656bWUXHf3RXED+Bcs/dp05Vo=
Subject key identifier:   BF:A2:52:33:36:3A:30:29:BD:06:23:9B:EA:04:0E:19:7D:8B:A8:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FF6945E4A4A18933C9C080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7e2a04e-9f6b-375d-8210-f680f0a98ae8.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        2603:3005:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:69:45:e4:a4:a1:89:33:c9:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=445b45a8-2a06-4365-a744-3f2c1b700e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:12:46:84:78:e8:79:f2:0e:3b:61:73:d9:2f:
                    0d:02:4e:47:2b:59:1d:8a:22:1e:79:fc:45:8e:14:
                    40:a8:f9:d0:b6:52:3e:7a:88:9c:12:f7:f9:0d:4d:
                    f8:d1:60:3b:de:3d:f5:b1:ce:f2:8d:cd:9d:9c:97:
                    6b:ec:38:07:f4:a4:7c:5d:88:67:b4:2b:a7:36:5b:
                    67:9a:d0:70:38:66:77:6b:41:00:f0:7a:98:51:df:
                    0a:48:87:ed:96:59:a2:20:17:58:db:ed:68:16:63:
                    72:69:b4:7e:05:e6:40:51:e8:07:a3:3c:1b:09:5e:
                    4f:fb:8f:f8:1d:da:f8:d0:c3:7d:cd:21:1b:a7:ff:
                    36:b6:16:26:96:58:58:14:e6:62:a2:97:94:84:f5:
                    2b:38:75:82:f4:24:15:fd:6b:24:ce:2f:f2:f7:e1:
                    16:b9:64:0f:ee:b0:d4:42:35:1b:48:c3:b5:3a:63:
                    3d:4b:a9:d6:ca:ac:8a:60:15:d2:d5:1c:ed:59:1f:
                    2f:6a:26:cf:63:d6:94:fd:fc:43:05:09:5f:8d:24:
                    29:51:5b:1f:f3:87:c1:7c:7c:64:e0:5d:54:67:ea:
                    ac:3a:ff:22:90:0d:f6:84:9e:55:c7:5a:1c:1c:9d:
                    33:77:1a:19:19:c8:bd:02:6e:b8:c4:8a:0b:4c:4d:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A2:52:33:36:3A:30:29:BD:06:23:9B:EA:04:0E:19:7D:8B:A8:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7e2a04e-9f6b-375d-8210-f680f0a98ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:1400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:fa:45:47:d1:ab:cc:8d:f6:0b:ef:a9:a3:59:7a:c4:b3:47:
         5d:7b:b7:be:9d:77:d8:9a:4c:a4:d7:c3:7d:97:64:39:70:2f:
         ff:f3:37:6c:0a:c3:38:da:d8:b8:5c:ea:a2:c8:f8:c2:7e:da:
         53:4c:fd:57:d6:4e:2d:6b:2d:1e:97:2a:89:60:33:f6:a5:ec:
         79:24:2f:3a:1c:52:88:53:24:82:63:a5:bd:1d:19:34:23:a5:
         b2:67:78:a7:b7:2c:85:52:74:56:aa:46:11:a5:d4:07:3d:99:
         14:c5:ee:e9:f1:b5:ec:20:c6:d4:15:14:01:43:a2:8e:7a:50:
         e1:46:98:ae:e6:54:c5:14:c7:fa:91:c1:29:5a:a1:96:fe:3e:
         83:ad:50:cd:96:a0:d7:e8:cd:b2:d9:8f:1d:3e:84:3e:e6:52:
         38:1c:c7:d1:3e:03:58:b0:2f:02:31:22:16:8f:e2:de:18:f6:
         a8:29:3d:d2:bd:f0:af:8e:d3:bb:f2:b1:ca:55:88:95:7d:4f:
         e0:0f:ba:10:d8:a2:53:9e:85:76:df:4a:cd:22:1e:f1:7c:7e:
         0f:29:99:fe:3e:23:e0:a0:47:06:2b:54:5f:10:ae:da:ed:a5:
         64:d0:14:20:15:10:de:fd:b1:df:fe:c2:f9:7f:6f:e1:d8:e0:
         eb:98:85:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:49 2026 by rpki-client