Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bde8e5c3-8d3c-3943-a7fc-58b00b9660ad.roa
File:                     bde8e5c3-8d3c-3943-a7fc-58b00b9660ad.roa (raw, json)
Hash identifier:          pHfTWBBPsC6b27ZcSSDqGDcrMtnfIYE7h68zG+B5Q4k=
Subject key identifier:   9D:3E:A3:FC:E4:28:1F:E4:28:3B:E1:B6:45:66:33:41:35:5C:7A:51
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D55BBC993E1BCE8DC88D92200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bde8e5c3-8d3c-3943-a7fc-58b00b9660ad.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     7015
IP address blocks:        2603:3005:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:bb:c9:93:e1:bc:e8:dc:88:d9:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=c7347b97-c3cd-4790-adca-2a289a4d0ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:8c:4e:3f:a4:82:b9:db:17:2c:80:d2:f1:
                    45:55:66:4c:cb:c6:9b:23:ae:3c:a4:5a:07:04:06:
                    10:12:a2:79:17:1e:99:e7:d7:22:95:d7:a2:df:22:
                    e1:de:3e:ff:af:7f:6b:a9:50:b8:8f:2f:53:9f:0b:
                    30:02:ff:1b:cf:e2:df:cd:ff:e9:3f:db:56:6a:4e:
                    05:4a:60:2f:a0:88:49:f7:b6:08:a1:93:4d:18:1b:
                    74:44:53:e7:29:e8:e1:57:3c:70:65:ed:6c:41:09:
                    cb:d4:4d:46:78:95:62:6e:2f:0f:32:42:32:b6:75:
                    72:71:d0:43:f1:e4:d1:30:e1:23:60:56:05:91:6c:
                    21:85:d5:30:36:9c:1b:bf:45:14:e0:f5:a6:9d:59:
                    7f:f8:48:35:bc:a6:ff:02:98:5d:66:3a:ab:74:9f:
                    94:01:05:80:6e:79:06:4e:76:b4:8e:6d:2b:f2:c4:
                    5f:be:1e:96:59:a6:f7:00:f6:eb:db:c1:2d:e9:8a:
                    1f:cb:cb:fb:ab:58:34:74:3d:b7:ac:36:f4:25:4e:
                    1d:07:6e:c7:5c:a7:c0:00:1c:05:2e:60:2d:8e:80:
                    a3:cd:fc:06:e7:d2:bb:d4:db:e0:42:35:0c:93:75:
                    5d:a1:1a:f0:a3:d8:e9:04:ab:f3:9c:fc:1d:b0:f5:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3E:A3:FC:E4:28:1F:E4:28:3B:E1:B6:45:66:33:41:35:5C:7A:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bde8e5c3-8d3c-3943-a7fc-58b00b9660ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:54:c5:ac:ba:00:9a:41:35:cc:7c:26:24:e0:6b:5b:ce:bb:
         35:7c:59:da:cd:d4:20:96:22:35:ff:c1:6b:5c:50:1a:8e:ad:
         7d:0d:f1:9a:24:c3:c6:0f:76:d8:e7:64:83:cf:8c:a5:19:eb:
         06:09:b6:8f:f1:e9:1a:55:48:8a:24:40:8e:f5:a6:d4:f4:f2:
         63:ed:7c:93:af:e7:d2:26:b3:e4:2b:f5:fa:36:32:00:b6:ca:
         93:03:92:7e:85:eb:ed:55:e8:74:ea:1a:50:62:d3:7d:38:fc:
         ad:1b:ea:10:e1:53:38:c6:85:41:1a:9b:0f:63:e6:bd:90:48:
         4d:49:6d:11:26:28:06:69:3e:c6:5f:8f:a2:64:87:9a:ce:ca:
         50:92:c0:bd:3b:12:be:c8:55:79:26:66:00:3f:35:a2:05:ca:
         a9:d2:d5:8b:05:2a:95:21:22:a5:23:0b:6f:7e:26:4c:de:3b:
         f0:82:1c:fc:59:7e:38:1c:4f:5c:53:43:5e:1c:53:2c:ef:db:
         ae:7b:cd:4a:a0:a6:e8:8d:d8:87:4c:a4:9d:4c:4e:19:01:4b:
         14:ca:fb:a1:72:c3:39:5c:d6:f2:99:4d:3a:a9:cb:5c:90:82:
         92:42:93:fd:70:2a:65:a5:d4:2c:24:09:1a:78:7a:59:d8:50:
         ca:b3:77:e2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1Vu8mT4bzo3IjZIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
YzczNDdiOTctYzNjZC00NzkwLWFkY2EtMmEyODlhNGQwYWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirKMTj+kgrnbFyyA0vFFVWZMy8abI648pFoH
BAYQEqJ5Fx6Z59cildei3yLh3j7/r39rqVC4jy9TnwswAv8bz+Lfzf/pP9tWak4F
SmAvoIhJ97YIoZNNGBt0RFPnKejhVzxwZe1sQQnL1E1GeJVibi8PMkIytnVycdBD
8eTRMOEjYFYFkWwhhdUwNpwbv0UU4PWmnVl/+Eg1vKb/AphdZjqrdJ+UAQWAbnkG
Tna0jm0r8sRfvh6WWab3APbr28Et6Yofy8v7q1g0dD23rDb0JU4dB27HXKfAABwF
LmAtjoCjzfwG59K71NvgQjUMk3VdoRrwo9jpBKvznPwdsPXNQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJ0+o/zkKB/kKDvhtkVmM0E1XHpRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmRlOGU1YzMtOGQzYy0z
OTQzLWE3ZmMtNThiMDBiOTY2MGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBRAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA0lTFrLoAmkE1zHwmJOBrW867NXxZ2s3UIJYiNf/Ba1xQGo6tfQ3x
miTDxg922Odkg8+MpRnrBgm2j/HpGlVIiiRAjvWm1PTyY+18k6/n0iaz5Cv1+jYy
ALbKkwOSfoXr7VXodOoaUGLTfTj8rRvqEOFTOMaFQRqbD2PmvZBITUltESYoBmk+
xl+PomSHms7KUJLAvTsSvshVeSZmAD81ogXKqdLViwUqlSEipSMLb34mTN478IIc
/Fl+OBxPXFNDXhxTLO/brnvNSqCm6I3Yh0yknUxOGQFLFMr7oXLDOVzW8plNOqnL
XJCCkkKT/XAqZaXULCQJGnh6WdhQyrN34g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:38 2026 by rpki-client