Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb7f170-27f3-30f3-98a7-78eb31f8bab6.roa
File:                     4fb7f170-27f3-30f3-98a7-78eb31f8bab6.roa (raw, json)
Hash identifier:          9Gtynj2QhK1vtiCNH+Nra6KaPTJ3fTidN26Kp2W8L6U=
Subject key identifier:   07:F0:CF:A7:FD:90:06:EA:66:6D:E4:FC:C7:A8:87:B5:10:A8:46:50
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3C1E657E40953CC5F36580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb7f170-27f3-30f3-98a7-78eb31f8bab6.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        2603:2800:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:1e:65:7e:40:95:3c:c5:f3:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=36407420-128f-4021-9e50-57d9b4dbe049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:c0:6f:eb:ed:e9:02:33:25:0b:30:1e:c2:
                    d7:3e:b2:2b:3f:79:1f:2b:a7:48:8e:57:2a:4c:1b:
                    b3:e0:0e:69:68:16:18:46:a9:94:4c:66:ed:18:2b:
                    0a:65:11:85:0d:99:77:39:62:1e:aa:91:3a:4e:43:
                    54:c3:c9:2f:e0:8b:1c:10:f8:eb:39:98:1a:21:c7:
                    11:14:ba:fc:11:85:36:2b:c6:f1:a0:8f:b1:7a:a4:
                    01:a8:36:ed:b9:35:63:b4:05:08:51:52:f8:6b:c9:
                    fd:21:35:9c:2b:08:09:2f:6f:29:d3:2b:d3:d7:c6:
                    8d:de:89:1c:bd:14:a1:0d:40:3f:78:39:c1:36:e1:
                    b6:28:c0:cd:e4:a6:f6:8e:c6:42:f3:84:2d:9e:7c:
                    58:b8:9a:28:98:5f:7a:db:3d:90:ba:2f:4b:49:31:
                    03:32:80:c6:9a:7c:85:e3:04:03:2a:93:20:78:56:
                    d2:77:d0:e1:b0:6c:a5:c4:1f:be:c8:8b:05:52:fb:
                    3d:8a:93:eb:b4:14:e6:06:64:d6:34:46:cf:13:a5:
                    65:2d:75:9e:ea:f1:03:dc:94:b5:ba:96:32:1d:3e:
                    be:be:a9:e2:22:89:84:2a:21:b2:ff:09:ea:83:6a:
                    1a:89:f2:82:3c:e8:ef:fd:a5:0a:05:85:a7:c5:77:
                    96:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F0:CF:A7:FD:90:06:EA:66:6D:E4:FC:C7:A8:87:B5:10:A8:46:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4fb7f170-27f3-30f3-98a7-78eb31f8bab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2800:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:f3:a0:76:30:4e:e6:e3:43:e6:c2:52:4d:57:6b:79:ac:
         dd:99:97:c5:2b:3f:24:06:3f:30:d4:83:9a:b1:d6:be:9a:ce:
         a3:7c:92:c5:4c:dd:8c:03:db:c7:18:54:e9:d9:26:ef:d8:07:
         21:33:5f:83:ee:59:92:59:b9:16:a6:e1:2d:24:3a:d6:f1:56:
         43:68:e5:5a:1c:bf:b6:90:dd:61:1b:e7:e7:20:b7:55:0d:83:
         c7:ee:04:3c:f5:f6:31:52:b6:f8:64:25:f2:58:12:de:bb:55:
         60:5d:66:d2:1b:75:09:77:7d:fa:98:f3:c1:91:48:60:e2:e1:
         18:ff:82:f2:19:e2:39:6b:c7:d2:eb:7c:95:7c:31:ba:5e:81:
         68:0a:43:9d:7f:04:0f:d7:c6:82:1f:4a:d5:a0:6b:93:88:60:
         f3:05:93:e7:8a:e9:1e:d2:aa:e4:ae:fe:15:fd:f6:61:a1:58:
         a4:b9:be:99:40:96:f9:87:db:9b:2f:58:b2:a2:2c:f6:19:38:
         2f:52:ea:bc:1c:ef:77:8d:00:9e:84:1f:5b:4d:53:75:d0:d8:
         46:1d:40:bd:8d:2d:16:a4:a6:ce:1d:38:3e:ba:e3:e9:54:f5:
         7d:3e:2d:ab:6e:1c:c4:34:f3:a6:34:c4:05:8a:29:49:2b:6a:
         1f:1e:40:45
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5vPB5lfkCVPMXzZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
MzY0MDc0MjAtMTI4Zi00MDIxLTllNTAtNTdkOWI0ZGJlMDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU/Ab+vt6QIzJQswHsLXPrIrP3kfK6dIjlcq
TBuz4A5paBYYRqmUTGbtGCsKZRGFDZl3OWIeqpE6TkNUw8kv4IscEPjrOZgaIccR
FLr8EYU2K8bxoI+xeqQBqDbtuTVjtAUIUVL4a8n9ITWcKwgJL28p0yvT18aN3okc
vRShDUA/eDnBNuG2KMDN5Kb2jsZC84QtnnxYuJoomF962z2Qui9LSTEDMoDGmnyF
4wQDKpMgeFbSd9DhsGylxB++yIsFUvs9ipPrtBTmBmTWNEbPE6VlLXWe6vED3JS1
upYyHT6+vqniIomEKiGy/wnqg2oaifKCPOjv/aUKBYWnxXeW7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAfwz6f9kAbqZm3k/Meoh7UQqEZQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGZiN2YxNzAtMjdmMy0z
MGYzLTk4YTctNzhlYjMxZjhiYWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMoAIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALvTzoHYwTubjQ+bCUk1Xa3ms3ZmXxSs/JAY/MNSDmrHWvprOo3yS
xUzdjAPbxxhU6dkm79gHITNfg+5Zklm5FqbhLSQ61vFWQ2jlWhy/tpDdYRvn5yC3
VQ2Dx+4EPPX2MVK2+GQl8lgS3rtVYF1m0ht1CXd9+pjzwZFIYOLhGP+C8hniOWvH
0ut8lXwxul6BaApDnX8ED9fGgh9K1aBrk4hg8wWT54rpHtKq5K7+Ff32YaFYpLm+
mUCW+Yfbmy9YsqIs9hk4L1LqvBzvd40AnoQfW01TddDYRh1AvY0tFqSmzh04Prrj
6VT1fT4tq24cxDTzpjTEBYopSStqHx5ARQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:15:55 2026 by rpki-client