Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2329f4f2-0579-3807-99f4-bf0f5c4d943e.roa
File:                     2329f4f2-0579-3807-99f4-bf0f5c4d943e.roa (raw, json)
Hash identifier:          us+1NmhuABiTQ3YBol8afRS3M3s0gW0F7w7j3YKYWpI=
Subject key identifier:   64:DC:DF:18:84:30:B4:31:BF:07:1F:41:9D:B3:67:51:3E:AC:8B:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F7783000658CD4499C0A9B000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2329f4f2-0579-3807-99f4-bf0f5c4d943e.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     7016
IP address blocks:        2603:3007:3500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:00:06:58:cd:44:99:c0:a9:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=5d27d13a-0983-4ef4-be05-3deba1c7dd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:9e:6b:f7:96:5b:e4:88:56:69:e0:b0:d1:
                    87:07:c4:ae:78:98:46:4f:c3:b2:17:97:9d:d1:7e:
                    33:3c:3f:b5:40:3c:7c:42:7b:d7:ad:25:f7:9b:a4:
                    cb:86:ec:91:ee:2b:30:a7:db:78:57:6b:60:e9:f2:
                    9c:c2:c5:b5:5c:e4:40:ee:a7:ef:5e:2c:cf:39:74:
                    6c:3d:1b:54:bd:86:90:40:ce:ae:35:3a:78:88:ca:
                    d0:67:a9:58:1c:b6:29:ea:e5:db:27:17:81:e0:83:
                    62:d0:ed:b3:b9:66:f1:06:de:3e:01:d5:b0:c3:47:
                    f8:81:3e:2f:50:89:f5:10:9f:bc:af:54:d5:0b:82:
                    39:0e:86:5b:60:e6:ae:4a:8a:2f:76:e9:ed:4d:6c:
                    c5:1c:a9:61:98:79:0f:4d:da:a1:9b:bc:28:d0:1d:
                    b7:76:7f:e0:44:eb:42:1c:ea:ab:91:96:d4:3b:5a:
                    06:14:d6:fd:71:66:01:16:22:72:21:76:8e:30:a2:
                    f6:aa:4d:c1:60:74:dd:f7:4d:ab:e0:38:b2:85:6e:
                    a6:71:ae:60:44:6f:a4:e4:de:8e:df:5b:a5:7e:0e:
                    ed:ed:7d:0a:5b:7b:ec:bc:4c:29:1d:b5:a8:82:46:
                    dd:ed:44:6a:8c:2d:ff:7f:54:38:0f:80:1f:ff:6d:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DC:DF:18:84:30:B4:31:BF:07:1F:41:9D:B3:67:51:3E:AC:8B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2329f4f2-0579-3807-99f4-bf0f5c4d943e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3007:3500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:29:54:30:e9:83:0a:f3:d5:ce:db:8d:61:90:18:92:76:
         44:0c:cb:2a:78:bd:cc:c6:34:89:60:52:e8:c6:b3:c9:5e:41:
         44:26:f0:07:a3:d2:02:e5:62:6a:c1:63:b2:74:15:61:63:eb:
         a5:85:39:01:af:9a:4b:07:b3:3c:b5:49:0b:3c:c0:48:6d:4e:
         92:b4:49:4f:85:f7:31:69:57:2a:96:71:31:e8:a4:b7:13:e4:
         23:d8:73:f7:4e:ea:4e:8d:dd:9e:79:9c:fb:b6:fa:87:7f:9c:
         19:f3:1f:9d:e6:c5:92:44:59:f1:ca:eb:e1:dc:b3:a7:da:d1:
         89:5b:1d:dd:6b:4b:48:e0:fb:ee:32:8e:b1:87:68:c8:ef:c2:
         14:a6:ab:84:e8:7d:db:cb:62:f3:47:35:55:50:00:03:6c:31:
         ed:4a:24:7a:2b:25:ae:16:27:63:34:b9:d4:f9:6b:7f:35:d2:
         e5:67:8a:01:5d:83:90:ff:6f:d7:f3:6b:e8:4b:a2:97:8f:4b:
         21:06:d5:ac:18:fa:c1:6c:60:8d:d5:ed:95:4a:0a:2a:76:0e:
         3a:17:09:de:2a:30:31:50:89:ea:01:e2:82:b5:e1:56:c4:93:
         11:4a:6c:ec:90:db:ca:91:d9:84:b5:fc:73:a6:24:db:7d:b0:
         57:5f:bd:e1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE93gwAGWM1EmcCpsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk
NWQyN2QxM2EtMDk4My00ZWY0LWJlMDUtM2RlYmExYzdkZDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneOea/eWW+SIVmngsNGHB8SueJhGT8OyF5ed
0X4zPD+1QDx8QnvXrSX3m6TLhuyR7iswp9t4V2tg6fKcwsW1XORA7qfvXizPOXRs
PRtUvYaQQM6uNTp4iMrQZ6lYHLYp6uXbJxeB4INi0O2zuWbxBt4+AdWww0f4gT4v
UIn1EJ+8r1TVC4I5DoZbYOauSoovduntTWzFHKlhmHkPTdqhm7wo0B23dn/gROtC
HOqrkZbUO1oGFNb9cWYBFiJyIXaOMKL2qk3BYHTd902r4DiyhW6mca5gRG+k5N6O
31ulfg7t7X0KW3vsvEwpHbWogkbd7URqjC3/f1Q4D4Af/21inwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGTc3xiEMLQxvwcfQZ2zZ1E+rIvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjMyOWY0ZjItMDU3OS0z
ODA3LTk5ZjQtYmYwZjVjNGQ5NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBzUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABM0pVDDpgwrz1c7bjWGQGJJ2RAzLKni9zMY0iWBS6MazyV5BRCbw
B6PSAuViasFjsnQVYWPrpYU5Aa+aSwezPLVJCzzASG1OkrRJT4X3MWlXKpZxMeik
txPkI9hz907qTo3dnnmc+7b6h3+cGfMfnebFkkRZ8crr4dyzp9rRiVsd3WtLSOD7
7jKOsYdoyO/CFKarhOh928ti80c1VVAAA2wx7UokeislrhYnYzS51PlrfzXS5WeK
AV2DkP9v1/Nr6Euil49LIQbVrBj6wWxgjdXtlUoKKnYOOhcJ3iowMVCJ6gHigrXh
VsSTEUps7JDbypHZhLX8c6Yk232wV1+94Q==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:42:56 2026 by rpki-client