Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4fde5f5-8360-3109-bfc2-45f5a0412b22.roa
File:                     a4fde5f5-8360-3109-bfc2-45f5a0412b22.roa (raw, json)
Hash identifier:          nM6yf3eh+j1nbdym1inkt+guspxwyfYYrHLHmfeNDO0=
Subject key identifier:   47:8A:8F:B5:64:26:A7:BC:5F:06:CC:91:6B:E2:00:58:DE:F2:EC:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BB41FE3A1D28A070441DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4fde5f5-8360-3109-bfc2-45f5a0412b22.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     33662
IP address blocks:        2601:2c0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:41:fe:3a:1d:28:a0:70:44:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=42811c01-7f5d-47bd-928a-3e3ae082eb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:dd:00:87:51:ef:7a:3b:d4:62:9c:30:ff:
                    ac:c7:b5:72:ed:9c:c6:2d:25:e2:ee:56:49:07:45:
                    96:99:75:93:b4:4f:d3:91:fc:b2:56:41:07:09:8f:
                    5d:da:5b:2b:5f:f0:3f:08:35:2d:73:a2:ff:a8:63:
                    4a:2f:42:aa:01:8d:83:71:e1:98:42:e1:c8:03:47:
                    9b:63:20:98:0c:cf:36:58:dc:cd:5e:45:1e:e8:50:
                    4b:82:fe:29:59:3f:c4:72:76:82:13:ee:3c:c5:d9:
                    53:30:f0:0d:0a:9a:ab:21:47:a8:68:b4:de:2b:eb:
                    db:38:6d:0f:6a:87:de:92:20:97:30:79:52:07:39:
                    49:e5:16:04:ac:50:6e:d2:09:d0:9f:15:28:b1:90:
                    d3:bf:dd:f3:16:2b:76:85:1c:26:7d:30:9b:f4:ff:
                    cb:a8:23:8c:ce:44:80:cf:db:c7:7a:31:ae:4e:72:
                    ce:ac:b0:03:5b:73:94:fc:70:1c:f0:7c:3c:c9:d7:
                    a6:a4:68:ed:c5:cc:aa:b0:6b:d4:01:0d:36:58:37:
                    4f:d9:5a:c7:9f:07:14:f1:30:9f:17:f9:f8:ad:7d:
                    f7:4e:7d:5f:1f:c5:46:56:dd:56:15:c2:4b:1a:45:
                    a3:41:39:43:a1:02:11:c8:41:f3:62:d6:6e:b5:04:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:8F:B5:64:26:A7:BC:5F:06:CC:91:6B:E2:00:58:DE:F2:EC:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4fde5f5-8360-3109-bfc2-45f5a0412b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2c0:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:6b:4d:bd:06:69:2b:3e:3b:6a:31:ac:8a:95:f7:4d:34:8a:
         7e:70:12:1a:aa:6b:4f:e1:fb:5d:b2:97:cd:16:f6:20:d2:f3:
         2c:0f:a3:89:b8:dd:3d:dd:77:97:8e:19:ca:0e:d2:ef:49:93:
         5c:9b:0e:d7:80:97:c5:5e:51:c5:fd:69:40:35:2d:ce:a9:56:
         52:3f:f2:e7:fb:7e:c8:cf:49:5b:42:21:b8:36:97:0a:ef:cc:
         d0:31:cc:9f:06:55:03:15:df:7f:73:1f:c7:9d:ee:ed:37:e6:
         19:b3:c5:fd:f5:59:1b:09:33:aa:d1:2b:eb:5a:64:df:53:66:
         3c:08:92:27:5a:cb:df:21:49:6e:bb:09:91:4d:15:05:c6:f6:
         43:dc:d8:0c:ea:27:81:d8:3e:69:15:55:cf:06:19:fa:4d:b0:
         2d:69:7a:79:2e:74:52:b6:77:b3:1e:ac:81:e0:fe:41:56:d1:
         dd:31:33:a3:22:58:77:de:dc:97:94:2e:26:11:fa:08:91:62:
         8a:4d:65:7c:2c:40:20:f1:8b:76:c3:28:72:ca:c9:34:36:9b:
         31:8c:e6:8c:e5:eb:d7:2d:f6:8d:d3:13:dd:b4:ba:39:df:d6:
         de:85:47:42:b8:01:2d:e6:94:b7:c4:e9:02:cf:51:9d:36:37:
         20:e1:b0:03
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1Vu0H+Oh0ooHBEHcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
NDI4MTFjMDEtN2Y1ZC00N2JkLTkyOGEtM2UzYWUwODJlYjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKPdAIdR73o71GKcMP+sx7Vy7ZzGLSXi7lZJ
B0WWmXWTtE/TkfyyVkEHCY9d2lsrX/A/CDUtc6L/qGNKL0KqAY2DceGYQuHIA0eb
YyCYDM82WNzNXkUe6FBLgv4pWT/EcnaCE+48xdlTMPANCpqrIUeoaLTeK+vbOG0P
aofekiCXMHlSBzlJ5RYErFBu0gnQnxUosZDTv93zFit2hRwmfTCb9P/LqCOMzkSA
z9vHejGuTnLOrLADW3OU/HAc8Hw8ydempGjtxcyqsGvUAQ02WDdP2VrHnwcU8TCf
F/n4rX33Tn1fH8VGVt1WFcJLGkWjQTlDoQIRyEHzYtZutQTMWQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEeKj7VkJqe8XwbMkWviAFje8uw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTRmZGU1ZjUtODM2MC0z
MTA5LWJmYzItNDVmNWEwNDEyYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgECwIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAzmtNvQZpKz47ajGsipX3TTSKfnASGqprT+H7XbKXzRb2INLzLA+j
ibjdPd13l44Zyg7S70mTXJsO14CXxV5Rxf1pQDUtzqlWUj/y5/t+yM9JW0IhuDaX
Cu/M0DHMnwZVAxXff3Mfx53u7TfmGbPF/fVZGwkzqtEr61pk31NmPAiSJ1rL3yFJ
brsJkU0VBcb2Q9zYDOongdg+aRVVzwYZ+k2wLWl6eS50UrZ3sx6sgeD+QVbR3TEz
oyJYd97cl5QuJhH6CJFiik1lfCxAIPGLdsMocsrJNDabMYzmjOXr1y32jdMT3bS6
Od/W3oVHQrgBLeaUt8TpAs9RnTY3IOGwAw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:32:55 2026 by rpki-client