Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d713722-cc89-3a1e-a19d-f2f9100dfda4.roa
File:                     7d713722-cc89-3a1e-a19d-f2f9100dfda4.roa (raw, json)
Hash identifier:          gXX55VQKx16SXheJRQdFuxeVO1BzmMxzwtEudW1lxZ4=
Subject key identifier:   98:B1:AB:71:07:28:D9:98:31:39:99:CE:A8:6A:48:CA:12:70:37:CA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3BDC0BD6B41AB8DEA0F700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d713722-cc89-3a1e-a19d-f2f9100dfda4.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33659
IP address blocks:        2603:2088:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:dc:0b:d6:b4:1a:b8:de:a0:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=14f82b58-f3a0-4959-92cb-6351ae6953b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:16:dd:fb:2b:dd:13:50:ca:4e:2d:79:ea:a5:
                    78:d7:6c:37:63:2f:58:cc:2f:b1:24:9d:6b:70:15:
                    bc:c7:54:83:e4:02:41:e9:3b:ed:4c:a8:e3:9c:cf:
                    0c:20:3b:58:ce:a7:47:e0:32:33:7e:59:ef:b8:67:
                    2e:2c:f9:a5:4a:22:02:4e:f5:fb:9a:46:c6:fe:45:
                    22:f5:52:2f:c8:e5:7f:81:aa:5a:a8:8f:27:c6:df:
                    96:2f:5b:82:39:ab:51:24:2c:e0:f6:c4:03:5a:21:
                    1d:c3:ef:01:1f:5c:46:10:5b:66:71:89:68:17:bd:
                    31:42:e4:3b:80:21:71:2f:6b:8c:4d:4f:88:56:81:
                    2e:d2:09:8a:f9:f6:12:2a:91:f4:50:a6:f8:8f:3e:
                    22:c9:ac:49:88:6f:8f:aa:0c:90:e9:1a:b4:3f:61:
                    af:33:35:c1:96:a7:f6:ac:41:16:7c:83:f4:a4:2b:
                    79:01:1b:ad:3f:5b:79:09:66:dc:af:fc:09:5f:1e:
                    30:26:f6:e3:06:21:1d:e8:0c:e3:64:58:d4:64:c5:
                    8d:ec:59:32:7b:67:e3:af:7e:3b:5a:92:51:dd:80:
                    a4:fb:fe:8f:3c:1e:de:35:4a:66:06:c1:e3:8b:0a:
                    e2:7d:2c:2e:d0:4b:3e:5f:b9:a5:e6:62:06:50:df:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B1:AB:71:07:28:D9:98:31:39:99:CE:A8:6A:48:CA:12:70:37:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d713722-cc89-3a1e-a19d-f2f9100dfda4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2088:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c0:45:ed:9d:f1:d1:90:5d:b6:b5:10:9f:60:91:e9:7f:f6:
         15:15:58:71:36:af:43:60:fe:78:24:dc:37:44:3c:bf:6c:e2:
         3c:f1:08:f8:76:41:39:02:39:03:ac:11:3a:78:60:e2:60:82:
         c6:32:84:25:74:9a:c2:86:79:35:c0:76:8f:fb:e4:dc:12:04:
         b0:6e:a9:d0:13:ea:f1:f4:df:23:7e:8e:a5:6b:6e:3a:88:a3:
         18:d3:ba:43:01:22:d7:b2:a9:87:b8:ab:ff:ac:0a:9e:50:5d:
         f0:68:65:c8:b3:1a:a0:f6:7b:ce:8e:38:4f:16:0a:f5:c5:98:
         6a:f1:4f:49:a1:3d:d3:c8:93:9c:e6:9c:bc:b5:b9:02:20:42:
         16:78:c0:1e:c4:73:57:56:05:29:90:45:4c:35:ff:36:4c:82:
         52:5b:0d:47:70:7a:0c:d2:15:7b:da:a7:a0:34:42:7b:70:9b:
         8d:d1:1d:b4:57:07:db:2a:f1:74:1b:16:09:47:e0:15:d4:d8:
         0a:83:43:73:2a:55:76:a9:b9:fe:f5:fb:d7:99:91:8d:2b:45:
         c8:9c:03:ec:78:47:5b:84:14:8d:17:0c:a4:38:61:77:0d:7d:
         a7:31:b9:df:e1:d7:60:c7:b4:a7:e1:aa:06:aa:56:59:63:11:
         eb:30:81:af
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5vO9wL1rQauN6g9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
MTRmODJiNTgtZjNhMC00OTU5LTkyY2ItNjM1MWFlNjk1M2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBbd+yvdE1DKTi156qV412w3Yy9YzC+xJJ1r
cBW8x1SD5AJB6TvtTKjjnM8MIDtYzqdH4DIzflnvuGcuLPmlSiICTvX7mkbG/kUi
9VIvyOV/gapaqI8nxt+WL1uCOatRJCzg9sQDWiEdw+8BH1xGEFtmcYloF70xQuQ7
gCFxL2uMTU+IVoEu0gmK+fYSKpH0UKb4jz4iyaxJiG+PqgyQ6Rq0P2GvMzXBlqf2
rEEWfIP0pCt5ARutP1t5CWbcr/wJXx4wJvbjBiEd6AzjZFjUZMWN7Fkye2fjr347
WpJR3YCk+/6PPB7eNUpmBsHjiwrifSwu0Es+X7ml5mIGUN959wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJixq3EHKNmYMTmZzqhqSMoScDfKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Q3MTM3MjItY2M4OS0z
YTFlLWExOWQtZjJmOTEwMGRmZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgiMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZMBF7Z3x0ZBdtrUQn2CR6X/2FRVYcTavQ2D+eCTcN0Q8v2ziPPEI
+HZBOQI5A6wROnhg4mCCxjKEJXSawoZ5NcB2j/vk3BIEsG6p0BPq8fTfI36OpWtu
OoijGNO6QwEi17Kph7ir/6wKnlBd8GhlyLMaoPZ7zo44TxYK9cWYavFPSaE908iT
nOacvLW5AiBCFnjAHsRzV1YFKZBFTDX/NkyCUlsNR3B6DNIVe9qnoDRCe3CbjdEd
tFcH2yrxdBsWCUfgFdTYCoNDcypVdqm5/vX715mRjStFyJwD7HhHW4QUjRcMpDhh
dw19pzG53+HXYMe0p+GqBqpWWWMR6zCBrw==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:13:31 2026 by rpki-client