Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5e9f365-4a4e-3e66-a11d-1a8c7d0d4674.roa
File:                     b5e9f365-4a4e-3e66-a11d-1a8c7d0d4674.roa (raw, json)
Hash identifier:          t6t+h9uuiILup6ixTrYv0SwGkaUXQ4Q9KaSvl1ow0Qg=
Subject key identifier:   1A:9E:DF:28:BD:38:55:3A:E1:BA:D5:A9:37:6E:4C:D5:34:DA:E1:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81000EF5F517351000682080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5e9f365-4a4e-3e66-a11d-1a8c7d0d4674.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        2603:20cf::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:0e:f5:f5:17:35:10:00:68:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=2303daf6-cbf8-49bc-9174-40533be18342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f2:7c:71:d5:8e:d9:eb:fa:b5:d0:34:78:78:
                    0b:ae:11:0d:e1:ed:11:f6:34:b8:b1:e3:df:e2:62:
                    24:40:9c:5b:79:49:f5:4e:20:8d:6d:41:8e:2f:a7:
                    b9:f8:0c:44:f7:24:e5:dc:72:5d:da:6a:66:9f:9e:
                    c0:80:7e:e5:58:60:2d:9d:f6:70:85:f9:d7:b8:9c:
                    c7:c3:11:06:75:05:39:ef:dc:be:e9:22:30:20:cd:
                    c7:5c:2f:b6:6e:95:ec:e5:b7:30:e2:d7:97:80:a8:
                    7d:c7:94:34:b4:8a:ac:ef:99:a9:d6:bb:ce:d1:23:
                    02:46:2e:60:4a:44:57:ee:69:8c:c7:32:2b:85:85:
                    2d:55:ba:29:80:8a:b6:49:06:d1:16:ba:bb:65:99:
                    f5:60:13:e2:c9:c4:87:08:ad:eb:f6:79:fc:77:47:
                    fb:a7:e0:79:e0:f0:ff:2b:f9:09:85:5d:90:7a:4b:
                    8c:58:d5:6c:d1:b4:e5:22:f3:ae:7f:ae:8d:f4:7d:
                    40:76:c0:af:0b:06:4a:0d:8e:06:32:e3:9a:65:66:
                    bb:be:00:2c:0e:e6:21:2b:e5:0e:41:88:e5:ad:ca:
                    9d:f5:be:98:4c:f4:ed:0a:11:d1:b2:bc:b9:77:de:
                    19:ca:61:05:30:83:51:88:fb:7c:76:1e:4e:b9:ad:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9E:DF:28:BD:38:55:3A:E1:BA:D5:A9:37:6E:4C:D5:34:DA:E1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5e9f365-4a4e-3e66-a11d-1a8c7d0d4674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20cf::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:de:67:af:15:f8:5e:b3:5e:89:84:2a:4d:8b:d9:4a:3d:45:
         b3:8f:85:68:2a:a8:7f:fb:49:10:59:ca:a0:10:34:c6:1b:0d:
         11:9f:58:b9:7b:bb:a8:a8:2c:ce:55:0a:b8:bf:97:c3:fa:f1:
         4f:b3:83:f4:09:e6:8f:9b:32:01:ed:4e:83:0c:8a:a0:ad:24:
         38:11:ea:af:46:a7:e3:25:16:75:70:b7:2c:98:e4:e2:ba:f5:
         09:44:1e:b5:26:20:06:f2:27:eb:d9:f2:e6:1f:97:87:df:71:
         6c:88:75:80:f2:5d:a8:ff:74:41:ad:f6:35:17:36:a5:ef:62:
         78:7c:67:11:e7:0d:68:76:1b:c6:e2:5c:92:37:cb:88:86:64:
         ab:f2:17:5c:dc:bc:8a:fe:70:8c:80:76:84:c0:08:b5:76:b1:
         22:cd:e3:54:b5:3f:43:4a:22:59:1a:7f:bf:f0:1d:d4:e1:1d:
         49:3e:44:77:44:a1:33:a0:39:2f:6c:a0:c0:64:41:21:6b:f7:
         d3:aa:17:b0:cb:f7:d2:0d:bb:33:ae:21:96:40:37:dc:90:bb:
         44:51:fa:67:f9:f5:15:a3:6a:a5:7e:3d:7b:03:31:e4:f5:33:
         9c:d0:13:d6:86:48:a7:bb:64:f8:2b:39:2e:8b:3f:af:59:46:
         1b:b8:8b:1b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2BAA719Rc1EABoIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
MjMwM2RhZjYtY2JmOC00OWJjLTkxNzQtNDA1MzNiZTE4MzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifJ8cdWO2ev6tdA0eHgLrhEN4e0R9jS4sePf
4mIkQJxbeUn1TiCNbUGOL6e5+AxE9yTl3HJd2mpmn57AgH7lWGAtnfZwhfnXuJzH
wxEGdQU579y+6SIwIM3HXC+2bpXs5bcw4teXgKh9x5Q0tIqs75mp1rvO0SMCRi5g
SkRX7mmMxzIrhYUtVbopgIq2SQbRFrq7ZZn1YBPiycSHCK3r9nn8d0f7p+B54PD/
K/kJhV2QekuMWNVs0bTlIvOuf66N9H1AdsCvCwZKDY4GMuOaZWa7vgAsDuYhK+UO
QYjlrcqd9b6YTPTtChHRsry5d94ZymEFMINRiPt8dh5Oua3viQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBqe3yi9OFU64brVqTduTNU02uF7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjVlOWYzNjUtNGE0ZS0z
ZTY2LWExMWQtMWE4YzdkMGQ0Njc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgzwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGN5nrxX4XrNeiYQqTYvZSj1Fs4+FaCqof/tJEFnKoBA0xhsNEZ9Y
uXu7qKgszlUKuL+Xw/rxT7OD9Anmj5syAe1OgwyKoK0kOBHqr0an4yUWdXC3LJjk
4rr1CUQetSYgBvIn69ny5h+Xh99xbIh1gPJdqP90Qa32NRc2pe9ieHxnEecNaHYb
xuJckjfLiIZkq/IXXNy8iv5wjIB2hMAItXaxIs3jVLU/Q0oiWRp/v/Ad1OEdST5E
d0ShM6A5L2ygwGRBIWv306oXsMv30g27M64hlkA33JC7RFH6Z/n1FaNqpX49ewMx
5PUznNAT1oZIp7tk+Cs5Los/r1lGG7iLGw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:03 2026 by rpki-client