Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa
File:                     063be228-15cd-3792-9587-8ed8a9cb0646.roa (raw, json)
Hash identifier:          5Vxw1ax3qt978AcNdb5PvFfcinW6a+kAKU+bK17mAeY=
Subject key identifier:   E4:9D:CD:96:5D:59:BC:9B:A9:9E:A6:AB:D3:C2:AB:AF:BD:6D:CE:57
Certificate issuer:       /CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177
Certificate serial:       010D0C9F4328584EA797F5EEC14A71F521A20180
Authority key identifier: EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21922
IP address blocks:        2604:c040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:f5:ee:c1:4a:71:f5:21:a2:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a49a3-f083-4bc1-b402-c5d2d237b177
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=04cfb166-28d7-48bf-b2a9-dac46737e4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:25:f9:e1:3e:bf:cc:0a:88:54:6f:d9:a4:
                    e1:fa:e6:ee:ea:71:44:aa:99:51:2f:06:e7:fc:05:
                    c0:31:5d:89:6a:a6:20:22:57:e4:75:c0:b6:3f:a4:
                    c0:f7:e0:28:a0:4d:7f:21:fd:06:76:57:c8:e9:da:
                    56:42:02:c0:ba:ed:6c:01:e9:76:57:55:4d:60:7b:
                    4d:f4:25:bc:0e:d6:b4:7a:cb:8c:a6:09:2e:c6:7d:
                    02:23:6e:25:95:6d:6c:1b:38:ef:16:16:90:79:69:
                    36:9e:84:5c:79:d5:4e:e8:06:7d:c3:af:04:82:2d:
                    d5:74:68:31:f2:c1:34:e9:75:8c:7a:af:ef:b0:fd:
                    4d:6a:cb:51:dd:15:56:28:53:30:48:b8:45:26:a5:
                    b7:25:6d:72:f9:44:87:86:11:61:68:20:09:16:d0:
                    ec:2f:cc:bd:d5:5d:80:1a:7f:50:44:a9:eb:e4:c0:
                    66:c6:52:43:17:d3:e2:da:2d:c5:d3:34:d9:e8:6b:
                    6c:7d:b3:e3:60:98:90:fb:23:7f:68:8c:7a:bb:67:
                    37:f8:11:32:6d:54:b9:cb:46:72:d2:b6:82:52:fd:
                    d3:4e:db:09:49:96:0e:46:da:fa:53:4e:c8:ca:46:
                    0f:75:ca:4d:24:44:f5:a5:34:c0:c1:f9:05:98:3f:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:CD:96:5D:59:BC:9B:A9:9E:A6:AB:D3:C2:AB:AF:BD:6D:CE:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/063be228-15cd-3792-9587-8ed8a9cb0646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177/4c2a49a3-f083-4bc1-b402-c5d2d237b177.crl

            X509v3 Authority Key Identifier:
                keyid:EB:54:33:39:59:31:88:1C:FD:96:35:A9:82:F7:FF:F4:31:CB:C9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4c2a49a3-f083-4bc1-b402-c5d2d237b177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:66:ea:b9:84:27:56:d8:32:ec:7d:4d:8e:2d:f1:c8:eb:6a:
         88:74:09:e5:62:20:a5:2f:65:91:ef:39:bb:d3:e6:bb:c3:92:
         3b:66:1a:d8:c6:a0:e8:78:b4:e4:31:1d:46:b8:c2:61:52:f8:
         26:c6:f6:45:8a:bc:b3:fb:2d:a7:31:a7:69:f2:4d:8f:56:c0:
         82:97:88:86:74:7c:e0:60:9b:7c:da:39:4a:a2:36:ac:8c:50:
         28:b3:cb:32:b3:5d:5b:cc:97:8f:d7:c9:20:36:a0:47:7a:ca:
         1b:2b:89:4e:1f:7f:97:55:ab:f8:b8:d9:64:f0:71:f0:a1:e9:
         10:ca:3d:a4:45:04:66:c5:05:be:34:0e:6b:1c:54:69:1f:17:
         4f:79:fd:99:4c:ae:af:61:78:e3:d1:ba:4d:ff:b0:04:9d:bf:
         05:2c:5e:6a:55:fa:0a:14:52:d1:60:58:bd:ff:40:5e:d6:6f:
         84:a5:e1:67:3c:81:b4:1c:41:1b:f5:52:36:ba:31:15:39:7c:
         8d:74:3c:31:d2:f6:ab:bc:dd:f4:84:45:d5:fd:54:58:fb:ac:
         19:60:d5:f1:91:f2:94:64:3e:70:c2:95:3f:a2:1a:7b:0f:1b:
         88:42:1f:c0:01:c7:c7:4f:57:72:b2:58:0b:58:e7:08:75:42:
         bc:be:d7:7d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nl/XuwUpx9SGiAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMyYTQ5YTMtZjA4My00YmMxLWI0MDItYzVkMmQyMzdi
MTc3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDRjZmIxNjYtMjhkNy00OGJmLWIyYTktZGFjNDY3MzdlNGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosAl+eE+v8wKiFRv2aTh+ubu6nFEqplRLwbn
/AXAMV2JaqYgIlfkdcC2P6TA9+AooE1/If0GdlfI6dpWQgLAuu1sAel2V1VNYHtN
9CW8Dta0esuMpgkuxn0CI24llW1sGzjvFhaQeWk2noRcedVO6AZ9w68Egi3VdGgx
8sE06XWMeq/vsP1NastR3RVWKFMwSLhFJqW3JW1y+USHhhFhaCAJFtDsL8y91V2A
Gn9QRKnr5MBmxlJDF9Pi2i3F0zTZ6GtsfbPjYJiQ+yN/aIx6u2c3+BEybVS5y0Zy
0raCUv3TTtsJSZYORtr6U07IykYPdcpNJET1pTTAwfkFmD8TlwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOSdzZZdWbybqZ6mq9PCq6+9bc5XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YzJh
NDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQyZDIzN2IxNzcvMDYzYmUyMjgtMTVjZC0z
NzkyLTk1ODctOGVkOGE5Y2IwNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGMyYTQ5YTMtZjA4My00YmMxLWI0
MDItYzVkMmQyMzdiMTc3LzRjMmE0OWEzLWYwODMtNGJjMS1iNDAyLWM1ZDJkMjM3
YjE3Ny5jcmwwHwYDVR0jBBgwFoAU61QzOVkxiBz9ljWpgvf/9DHLyeowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80YzJhNDlhMy1mMDgzLTRiYzEtYjQwMi1jNWQy
ZDIzN2IxNzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTAQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAvZuq5hCdW2DLsfU2OLfHI62qIdAnlYiClL2WR7zm70+a7w5I7ZhrY
xqDoeLTkMR1GuMJhUvgmxvZFiryz+y2nMadp8k2PVsCCl4iGdHzgYJt82jlKojas
jFAos8sys11bzJeP18kgNqBHesobK4lOH3+XVav4uNlk8HHwoekQyj2kRQRmxQW+
NA5rHFRpHxdPef2ZTK6vYXjj0bpN/7AEnb8FLF5qVfoKFFLRYFi9/0Be1m+EpeFn
PIG0HEEb9VI2ujEVOXyNdDwx0varvN30hEXV/VRY+6wZYNXxkfKUZD5wwpU/ohp7
DxuIQh/AAcfHT1dyslgLWOcIdUK8vtd9
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:16 2026 by rpki-client