Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caa3a776-374b-3441-a72a-b4b784cfff55.roa
File:                     caa3a776-374b-3441-a72a-b4b784cfff55.roa (raw, json)
Hash identifier:          3IAbXIfzVarQwUYYPd8OK3a0M9OmZNFHf+ycyc0dXBo=
Subject key identifier:   E9:A7:A9:08:5B:87:3F:25:EE:D5:D5:CC:B9:84:B8:AE:E4:72:99:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D6830515218C83FF60D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caa3a776-374b-3441-a72a-b4b784cfff55.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33659
IP address blocks:        2601:82:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:68:30:51:52:18:c8:3f:f6:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=5e6b0dd4-6b12-40da-8b46-e7a85129cc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0a:69:64:a7:76:f9:41:5e:ff:35:16:ab:89:
                    0a:9a:0e:8f:57:8a:9b:fd:b5:bc:2d:06:2a:0c:86:
                    0f:ff:e7:6c:56:cc:51:45:4c:67:bb:5a:ae:8c:5a:
                    3f:53:cf:8e:c8:fe:73:47:65:95:5f:d5:a7:6c:ee:
                    c3:b1:ee:69:36:5b:b0:b1:cd:88:4b:6f:96:a5:14:
                    ca:77:66:f2:49:fd:37:ab:b2:6d:81:73:5d:35:58:
                    1c:a8:0b:51:11:2a:8b:53:82:7a:82:c9:ff:49:e5:
                    17:1f:df:2a:10:8b:a2:c1:ad:a1:dd:d4:74:21:eb:
                    39:75:e9:d1:42:a9:63:ca:56:26:18:d3:44:d2:32:
                    b0:cb:ad:0d:1d:32:bd:c7:e5:ec:32:6e:4f:fa:a1:
                    50:35:67:4f:68:ea:68:db:23:fe:ab:9e:c3:e5:fa:
                    37:b2:4a:b6:4e:83:c8:1c:9c:e7:15:dd:66:15:ea:
                    56:52:7a:1e:14:1e:9a:d9:68:69:ba:86:fb:fe:9a:
                    90:cd:98:4a:91:c9:82:1e:fe:fd:1b:36:92:d8:7f:
                    84:40:bd:b8:dc:42:53:ad:8c:1e:23:30:3a:ba:31:
                    60:e7:32:fe:0c:de:56:85:90:17:3b:73:8d:16:8e:
                    1f:86:f3:94:8a:46:15:de:9f:fa:e3:86:ce:a0:84:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A7:A9:08:5B:87:3F:25:EE:D5:D5:CC:B9:84:B8:AE:E4:72:99:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caa3a776-374b-3441-a72a-b4b784cfff55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:82:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:02:2e:15:60:99:8e:d4:4c:52:70:ea:ad:44:2d:3d:24:
         72:74:09:e6:bc:43:9c:76:8b:ee:ae:57:2d:f0:93:e6:74:b7:
         58:11:3a:c6:c5:a1:80:aa:29:96:4f:85:c1:ed:4b:8a:38:53:
         d9:98:86:bb:49:b1:40:93:08:c1:a4:30:d8:4d:c1:fc:99:ff:
         d5:1a:1a:73:b3:d0:d8:f3:f2:78:4d:58:e8:4e:aa:30:61:e5:
         b0:93:cc:30:5b:f3:46:5f:01:6d:e4:7a:c5:cf:52:bd:58:0c:
         0c:d7:0a:5b:ae:46:cd:f9:b3:1b:e2:5a:24:e3:d0:cb:98:0b:
         e0:2b:2c:fd:80:ae:e7:24:16:97:66:9a:23:14:f8:fa:cf:7c:
         0c:1a:7a:1d:49:1f:38:d3:36:ad:d1:f6:a2:1c:9a:4d:ae:06:
         9b:e6:45:7e:c9:ab:b2:7f:5a:a7:c5:97:4c:39:b1:e5:20:be:
         11:54:37:23:0c:36:33:f8:b4:87:95:cf:a0:57:88:2f:da:60:
         74:98:65:4f:80:94:56:4c:3b:c3:1a:3a:86:a3:6c:c5:98:a1:
         13:89:ea:1b:ca:64:dc:19:4c:f3:3e:b7:5a:33:6c:f5:88:f0:
         fc:af:28:06:1a:79:87:e1:ce:20:15:4b:4b:50:c8:ea:26:4c:
         a3:39:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:55:25 2026 by rpki-client