Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67dac0e2-31e9-3697-befa-dbb598ce045e.roa
File:                     67dac0e2-31e9-3697-befa-dbb598ce045e.roa (raw, json)
Hash identifier:          HYbdmFnGZzvSzBD5+K5XZViG1jaJb25Xm/hpqNQ9/lc=
Subject key identifier:   E6:2D:63:36:54:73:A7:6C:F1:BA:92:F4:20:60:A8:70:CE:B5:0E:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3A9705CEA910D74F8B4620
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67dac0e2-31e9-3697-befa-dbb598ce045e.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33659
IP address blocks:        2603:2080::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:97:05:ce:a9:10:d7:4f:8b:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=c19cb5e1-4564-401c-b16d-ba2461fd9f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0e:53:71:bf:9d:92:aa:6f:0c:95:e3:c8:5e:
                    6a:60:33:68:62:a3:4d:1e:b7:43:52:7a:35:6c:7a:
                    07:c0:ac:00:0c:27:e6:6f:66:0d:84:0a:33:f4:01:
                    e8:a2:8c:ca:14:3e:d4:74:e3:dc:8a:89:fa:0d:22:
                    34:d7:37:6b:15:ff:16:0f:9c:11:7f:8a:06:94:78:
                    c6:cb:a9:ce:3a:66:36:1a:65:d0:9c:68:46:9a:1c:
                    47:c3:13:e9:93:18:69:d0:43:f9:d6:a4:d4:8a:04:
                    5c:3c:a5:e1:98:d5:25:de:cd:6c:55:ec:e9:a3:2d:
                    94:14:fb:d9:ca:a5:25:9c:76:83:4a:af:d8:0e:1b:
                    09:ab:70:91:7f:5a:31:f8:ff:a2:80:32:3c:80:c0:
                    86:de:f3:57:7e:e4:fd:c4:90:2c:66:09:20:c1:8a:
                    f7:04:88:ba:e0:3d:56:4b:ac:49:0d:ca:a4:dd:f0:
                    2b:7f:78:ad:68:44:ad:d1:c2:3d:91:aa:30:21:28:
                    27:5f:75:d8:bc:1a:7e:aa:14:52:e1:8e:71:d0:04:
                    44:0c:a2:39:d6:03:67:b8:eb:b8:ca:5f:00:ad:7d:
                    ec:99:77:b4:b1:7c:b8:5b:81:9e:f8:48:e7:8d:4b:
                    7a:4c:83:34:c8:ce:f3:9d:48:4e:54:83:41:77:03:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2D:63:36:54:73:A7:6C:F1:BA:92:F4:20:60:A8:70:CE:B5:0E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67dac0e2-31e9-3697-befa-dbb598ce045e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2080::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:19:18:64:ae:78:ab:ef:1f:f8:e4:48:dc:7e:ae:7e:3a:bd:
         4f:67:74:da:47:85:4b:90:1a:ec:84:b1:9f:c2:6d:5e:ce:94:
         a9:17:95:69:5c:a4:b6:2c:12:04:cb:89:ae:96:63:b8:d9:95:
         13:3d:b2:c6:e4:09:8e:46:13:51:37:d8:72:ba:73:a0:dd:c4:
         49:e2:45:14:6e:a6:2e:7d:13:04:40:ee:c5:bb:8e:8c:6e:ba:
         35:27:71:29:dc:e7:aa:ce:70:00:2e:93:c4:ed:8d:87:dd:07:
         f4:4a:f9:4e:81:99:b4:d8:10:04:fa:a3:79:b4:ed:b5:4c:4f:
         74:92:8f:a5:3e:0b:e5:d8:5e:74:00:0c:cf:d5:16:a9:3f:e7:
         d5:c3:69:50:b3:ac:7b:48:bc:f0:71:fe:26:47:0e:25:17:a7:
         76:65:63:05:1c:6f:48:d3:fc:d9:cd:90:06:81:70:d8:0e:ab:
         b7:13:d7:d8:21:8b:48:59:43:db:4f:92:08:ec:b3:fd:92:16:
         09:f0:4e:1e:b8:0d:10:65:2c:61:25:cb:ee:2f:78:30:ff:f4:
         89:fc:fd:f6:17:4b:53:81:00:25:0b:33:80:c1:e7:70:6a:4e:
         bc:af:57:fe:43:06:9a:15:aa:9f:0a:6c:53:de:7b:a4:33:ac:
         b4:f8:b2:fd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5vOpcFzqkQ10+LRiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
YzE5Y2I1ZTEtNDU2NC00MDFjLWIxNmQtYmEyNDYxZmQ5Zjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA5Tcb+dkqpvDJXjyF5qYDNoYqNNHrdDUno1
bHoHwKwADCfmb2YNhAoz9AHooozKFD7UdOPcion6DSI01zdrFf8WD5wRf4oGlHjG
y6nOOmY2GmXQnGhGmhxHwxPpkxhp0EP51qTUigRcPKXhmNUl3s1sVezpoy2UFPvZ
yqUlnHaDSq/YDhsJq3CRf1ox+P+igDI8gMCG3vNXfuT9xJAsZgkgwYr3BIi64D1W
S6xJDcqk3fArf3itaESt0cI9kaowISgnX3XYvBp+qhRS4Y5x0AREDKI51gNnuOu4
yl8ArX3smXe0sXy4W4Ge+EjnjUt6TIM0yM7znUhOVINBdwOXXQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOYtYzZUc6ds8bqS9CBgqHDOtQ7uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjdkYWMwZTItMzFlOS0z
Njk3LWJlZmEtZGJiNTk4Y2UwNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMggAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAHxkYZK54q+8f+ORI3H6ufjq9T2d02keFS5Aa7ISxn8JtXs6UqReV
aVyktiwSBMuJrpZjuNmVEz2yxuQJjkYTUTfYcrpzoN3ESeJFFG6mLn0TBEDuxbuO
jG66NSdxKdznqs5wAC6TxO2Nh90H9Er5ToGZtNgQBPqjebTttUxPdJKPpT4L5dhe
dAAMz9UWqT/n1cNpULOse0i88HH+JkcOJRendmVjBRxvSNP82c2QBoFw2A6rtxPX
2CGLSFlD20+SCOyz/ZIWCfBOHrgNEGUsYSXL7i94MP/0ifz99hdLU4EAJQszgMHn
cGpOvK9X/kMGmhWqnwpsU957pDOstPiy/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:28 2026 by rpki-client