Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47ad2e33-b63c-37e5-b366-6e8c9035e783.roa
File:                     47ad2e33-b63c-37e5-b366-6e8c9035e783.roa (raw, json)
Hash identifier:          FTt3yrNW+AKBpRxJ10mYYJclbGUzo6nBXk1+Bj34GOM=
Subject key identifier:   CF:D9:33:56:F7:40:26:C8:63:F8:85:A8:68:8B:E8:7F:C9:96:E3:62
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D524362AF9BDD16690CB5A580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47ad2e33-b63c-37e5-b366-6e8c9035e783.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     7016
IP address blocks:        2601:986::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:62:af:9b:dd:16:69:0c:b5:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=c723a36b-3941-4a89-9b93-4663f6c0b16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:c2:dc:06:2f:bd:06:29:24:3a:ce:ae:18:
                    02:cd:88:38:56:8f:7d:0f:09:a9:0f:16:7b:71:e9:
                    bb:ef:e7:27:1a:e6:2b:29:f3:55:fd:1b:32:2f:74:
                    3e:26:c8:45:96:7e:c6:19:6b:ee:bb:3c:96:4e:1c:
                    df:bf:1b:31:0c:49:0a:b3:3b:99:f4:97:8f:35:94:
                    d9:44:95:10:fa:aa:31:29:bd:4a:44:79:50:bb:8b:
                    8a:1d:e8:06:4d:a6:dc:d3:7a:0f:4a:b5:76:93:3a:
                    ef:45:de:6c:42:62:e5:d2:57:ee:eb:13:c6:70:a1:
                    04:b6:a1:c0:78:2c:6f:11:50:34:33:69:05:07:d7:
                    aa:d4:39:8c:71:50:3e:57:cd:91:09:55:41:aa:b6:
                    8d:bf:ed:61:73:2a:d4:7a:22:79:17:ba:79:e0:03:
                    f8:31:36:40:51:10:b5:fe:62:47:f9:95:50:39:78:
                    0b:cf:70:8a:e2:68:3e:3c:b8:04:20:bd:c8:92:00:
                    a5:73:cc:38:29:d9:83:92:a4:eb:2c:b7:1e:70:7d:
                    58:68:6b:54:da:32:0f:77:1f:74:9f:f4:e2:e8:cd:
                    0c:37:04:d1:89:0d:f6:6e:5c:e2:87:8a:c6:4d:c4:
                    01:20:6e:d2:65:5a:c5:e4:07:6d:c6:e2:44:9c:f2:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:33:56:F7:40:26:C8:63:F8:85:A8:68:8B:E8:7F:C9:96:E3:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47ad2e33-b63c-37e5-b366-6e8c9035e783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:986::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:95:bd:e2:29:20:2b:2c:1c:6c:05:44:7f:aa:23:46:81:0a:
         86:1b:48:3c:e4:53:85:5d:2b:3a:63:02:b1:e5:f9:03:f5:01:
         e0:8c:91:2f:9e:6d:0f:4f:9e:c5:af:b2:9e:ee:79:f9:a7:b3:
         ed:63:fa:85:9a:0a:a8:53:74:f8:ee:d4:d4:05:b0:71:99:1a:
         e1:1c:a0:93:76:34:0b:7d:03:75:b9:75:97:fa:ef:cb:39:05:
         59:8c:ed:5e:97:09:97:64:6e:a8:4f:60:43:05:70:ff:b9:c2:
         1c:08:c1:60:77:39:98:9a:f7:3d:21:ce:a5:a4:07:95:d4:91:
         f2:a2:6e:8a:71:a7:c2:9f:fe:c6:4f:45:59:99:77:f4:02:56:
         17:05:fd:f7:84:7c:62:8b:49:12:3d:26:e6:42:de:e5:36:62:
         fd:64:47:39:b3:f0:88:3e:4f:69:3e:8f:f5:f3:dd:d7:0e:d8:
         84:8b:94:52:92:54:ed:da:6c:34:b3:bd:30:ff:37:64:2c:85:
         a1:56:08:8f:86:fc:8b:c6:69:e7:ab:73:10:ca:dd:10:27:97:
         55:f0:99:b4:b8:df:66:2f:68:92:5f:20:aa:3b:2c:1f:3c:67:
         9d:b2:33:c8:69:bb:1b:84:00:2a:0b:fc:f9:6e:7b:34:4e:3c:
         fd:79:4b:cc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1SQ2Kvm90WaQy1pYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
YzcyM2EzNmItMzk0MS00YTg5LTliOTMtNDY2M2Y2YzBiMTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzLC3AYvvQYpJDrOrhgCzYg4Vo99DwmpDxZ7
cem77+cnGuYrKfNV/RsyL3Q+JshFln7GGWvuuzyWThzfvxsxDEkKszuZ9JePNZTZ
RJUQ+qoxKb1KRHlQu4uKHegGTabc03oPSrV2kzrvRd5sQmLl0lfu6xPGcKEEtqHA
eCxvEVA0M2kFB9eq1DmMcVA+V82RCVVBqraNv+1hcyrUeiJ5F7p54AP4MTZAURC1
/mJH+ZVQOXgLz3CK4mg+PLgEIL3IkgClc8w4KdmDkqTrLLcecH1YaGtU2jIPdx90
n/Ti6M0MNwTRiQ32blzih4rGTcQBIG7SZVrF5AdtxuJEnPKwgQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM/ZM1b3QCbIY/iFqGiL6H/JluNiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDdhZDJlMzMtYjYzYy0z
N2U1LWIzNjYtNmU4YzkwMzVlNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEJhgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAc5W94ikgKywcbAVEf6ojRoEKhhtIPORThV0rOmMCseX5A/UB4IyR
L55tD0+exa+ynu55+aez7WP6hZoKqFN0+O7U1AWwcZka4Rygk3Y0C30Ddbl1l/rv
yzkFWYztXpcJl2RuqE9gQwVw/7nCHAjBYHc5mJr3PSHOpaQHldSR8qJuinGnwp/+
xk9FWZl39AJWFwX994R8YotJEj0m5kLe5TZi/WRHObPwiD5PaT6P9fPd1w7YhIuU
UpJU7dpsNLO9MP83ZCyFoVYIj4b8i8Zp56tzEMrdECeXVfCZtLjfZi9okl8gqjss
HzxnnbIzyGm7G4QAKgv8+W57NE48/XlLzA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:53 2026 by rpki-client