Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51bb2483-4aa1-34ae-ba3a-4a6bdcaeda74.roa
File:                     51bb2483-4aa1-34ae-ba3a-4a6bdcaeda74.roa (raw, json)
Hash identifier:          fNeE0LQ29kv+DosVM/0hEyk87W9SivO0zMu/xuXjXXY=
Subject key identifier:   6C:58:77:88:A3:3C:C5:DF:71:EC:93:D9:DD:F4:84:64:C6:DE:C2:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF61516D5495F6A94C16980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51bb2483-4aa1-34ae-ba3a-4a6bdcaeda74.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        2603:300f:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f6:15:16:d5:49:5f:6a:94:c1:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=9dece9c1-29c6-4b77-86ad-99c328812a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:54:09:ed:4f:7f:9c:bf:1c:55:e7:c9:eb:
                    fa:4e:88:80:8c:12:12:53:d6:1f:89:e5:e7:6d:dc:
                    86:9f:71:03:41:1e:dd:d2:56:2e:b5:d4:81:f9:6e:
                    67:e8:ce:db:1f:3f:24:fb:bf:44:ee:d9:32:21:8b:
                    5d:50:b5:b0:da:d3:d2:ec:e1:11:3e:b3:1f:0d:7a:
                    1a:21:da:ce:7a:f3:40:ee:e1:41:ea:6f:fd:7f:95:
                    09:57:59:4d:17:66:24:ac:2f:06:11:53:e0:7c:bc:
                    b3:58:4f:fc:38:73:ed:ec:89:be:dc:89:85:7f:5f:
                    c5:8e:7b:13:64:47:48:b4:da:09:1d:a0:f0:ba:80:
                    9d:05:40:83:c8:6d:cf:4e:ef:b7:9d:47:2b:b0:c8:
                    f3:ab:66:ff:54:c6:ee:9a:78:f8:b2:d4:d6:84:6f:
                    2e:1f:0e:4e:21:3c:77:f3:a2:0d:e0:4a:7f:c3:27:
                    cc:70:76:12:fb:28:4e:97:e0:30:be:b3:08:9a:f8:
                    e3:10:c0:27:0b:25:97:d5:ec:af:34:10:a1:6c:ba:
                    e2:61:6f:36:bb:c7:03:2a:e4:de:66:38:cf:dd:03:
                    11:77:a7:9b:07:8a:31:08:83:2b:cd:7a:cc:7e:5a:
                    9f:93:8b:ff:b3:1e:06:f9:9a:98:89:48:83:17:b6:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:58:77:88:A3:3C:C5:DF:71:EC:93:D9:DD:F4:84:64:C6:DE:C2:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51bb2483-4aa1-34ae-ba3a-4a6bdcaeda74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300f:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:8a:a7:b7:30:27:2e:62:13:6d:77:53:65:01:9b:00:a4:ab:
         9b:03:cf:49:b9:24:e9:e8:8b:a9:f8:5f:c3:62:e2:06:87:65:
         0f:23:32:84:a8:f0:49:7c:b5:d1:62:45:36:3c:28:d7:ed:67:
         d6:b7:a4:29:45:8b:38:98:7f:32:3a:69:9b:90:7c:d4:9a:b3:
         d4:01:69:4b:3b:a8:08:b6:6e:c1:8d:da:93:b3:ae:d9:f4:d6:
         e1:3c:b7:85:43:5a:5c:c0:8d:c0:bc:db:bc:a2:7e:ae:24:3c:
         c4:45:7c:d4:9a:24:58:f6:42:21:cd:0b:e6:70:76:d2:52:4e:
         f0:63:03:7b:37:05:59:10:b8:4b:02:fc:50:4e:52:b1:72:67:
         1e:64:50:96:51:14:ee:3f:b0:67:be:2f:fe:c0:33:68:19:50:
         7d:8f:3a:cd:0e:49:dd:d8:ce:6e:d3:87:41:37:8e:a3:e1:49:
         49:25:a0:1a:aa:0d:35:14:e7:ec:04:94:d7:93:bf:a2:be:4e:
         51:05:27:85:a7:48:a7:d4:ca:59:26:e0:7e:e3:21:2d:06:8d:
         90:7b:0a:24:02:40:ac:c6:13:0d:1d:6f:42:c0:b6:37:3b:0e:
         ec:cf:a6:90:28:d6:76:bc:f3:c3:d4:d4:86:73:af:4f:14:ce:
         08:12:d7:37
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O9hUW1UlfapTBaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
OWRlY2U5YzEtMjljNi00Yjc3LTg2YWQtOTljMzI4ODEyYTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/VUCe1Pf5y/HFXnyev6ToiAjBISU9YfieXn
bdyGn3EDQR7d0lYutdSB+W5n6M7bHz8k+79E7tkyIYtdULWw2tPS7OERPrMfDXoa
IdrOevNA7uFB6m/9f5UJV1lNF2YkrC8GEVPgfLyzWE/8OHPt7Im+3ImFf1/FjnsT
ZEdItNoJHaDwuoCdBUCDyG3PTu+3nUcrsMjzq2b/VMbumnj4stTWhG8uHw5OITx3
86IN4Ep/wyfMcHYS+yhOl+AwvrMImvjjEMAnCyWX1eyvNBChbLriYW82u8cDKuTe
ZjjP3QMRd6ebB4oxCIMrzXrMflqfk4v/sx4G+ZqYiUiDF7aFxwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGxYd4ijPMXfceyT2d30hGTG3sLKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTFiYjI0ODMtNGFhMS0z
NGFlLWJhM2EtNGE2YmRjYWVkYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDwQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJIqntzAnLmITbXdTZQGbAKSrmwPPSbkk6eiLqfhfw2LiBodlDyMy
hKjwSXy10WJFNjwo1+1n1rekKUWLOJh/Mjppm5B81Jqz1AFpSzuoCLZuwY3ak7Ou
2fTW4Ty3hUNaXMCNwLzbvKJ+riQ8xEV81JokWPZCIc0L5nB20lJO8GMDezcFWRC4
SwL8UE5SsXJnHmRQllEU7j+wZ74v/sAzaBlQfY86zQ5J3djObtOHQTeOo+FJSSWg
GqoNNRTn7ASU15O/or5OUQUnhadIp9TKWSbgfuMhLQaNkHsKJAJArMYTDR1vQsC2
NzsO7M+mkCjWdrzzw9TUhnOvTxTOCBLXNw==
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:17:16 2026 by rpki-client