Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f99c278-e7e2-3995-a010-1c438352ad5e.roa
File:                     7f99c278-e7e2-3995-a010-1c438352ad5e.roa (raw, json)
Hash identifier:          3XVkeNXfMG0zzsZddKs5xhvwSZjkw7Ps8Eg0TvZLLsU=
Subject key identifier:   07:DC:60:90:60:02:0E:49:4D:81:B8:D7:4D:E3:D8:BA:F1:B6:92:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E35FFD041E410F2A965B71860
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f99c278-e7e2-3995-a010-1c438352ad5e.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33668
IP address blocks:        2603:3015:2b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:d0:41:e4:10:f2:a9:65:b7:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=ff001e57-bdac-4371-ab5d-1f93fb68eb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:b0:d3:e9:06:49:16:b3:9c:b6:75:ba:0c:
                    a7:85:69:ae:ef:f0:86:65:f9:48:d4:5c:79:47:32:
                    d5:82:af:87:63:bf:c4:c1:10:d2:3b:d4:a8:ae:df:
                    09:a8:22:76:86:2f:ec:00:c4:f0:05:8f:a6:8d:30:
                    f2:47:6f:51:ef:88:e7:4e:72:e9:4e:92:6e:04:64:
                    2f:02:8c:df:5d:53:9c:9f:1a:7c:85:dd:f6:fb:0a:
                    46:0a:6c:6b:73:11:31:6a:75:49:b6:28:e2:3e:2e:
                    f9:ac:43:37:20:5d:83:cd:a4:7e:6e:33:5b:78:59:
                    5d:22:22:32:91:20:ba:17:04:ec:63:a7:a5:0e:91:
                    ea:a1:31:3a:43:1f:ab:a7:ee:70:7b:16:dc:73:1c:
                    71:ae:f0:30:a5:e1:d2:16:c3:07:a9:24:7d:86:f1:
                    66:7b:36:81:8a:39:81:ea:a1:45:6e:f6:9b:63:62:
                    18:bf:da:1a:c0:00:6a:a6:69:24:00:a1:05:b3:48:
                    22:9a:dc:0a:c7:31:76:e5:da:26:4d:fd:ab:69:32:
                    e0:4e:45:99:04:2b:2c:70:a3:d9:2a:ad:71:d3:7b:
                    9f:7b:03:26:b2:59:36:f6:1f:da:8f:6d:50:a7:c1:
                    f4:c7:7a:5a:28:14:ca:f3:ef:d8:6d:59:a5:46:48:
                    7c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DC:60:90:60:02:0E:49:4D:81:B8:D7:4D:E3:D8:BA:F1:B6:92:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7f99c278-e7e2-3995-a010-1c438352ad5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:2b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:cf:55:5e:ee:db:1e:94:4f:f4:c6:9c:fd:49:df:93:7d:4f:
         a7:92:f4:bb:56:ac:34:e0:f2:79:ff:83:62:c6:a8:54:f1:af:
         6e:38:8a:4f:85:6e:2b:f3:aa:e6:55:ac:8a:5f:97:2b:00:9d:
         02:63:08:f1:ab:cb:2b:0f:c2:8c:be:2c:16:32:de:c8:b8:85:
         be:29:81:07:4c:90:e1:2c:76:18:98:69:50:d3:22:d5:e5:d5:
         b0:30:fa:39:bc:0c:eb:d6:c4:19:e3:08:26:82:0c:01:77:3a:
         11:4b:3c:bf:56:c5:cb:8e:81:ab:8a:fe:8b:bf:0c:91:54:0f:
         2e:69:cf:b3:86:31:96:ee:f6:e8:52:13:26:75:78:14:6c:33:
         3d:72:89:cf:8b:76:fd:a0:a4:fd:91:41:87:bf:8d:27:2e:fd:
         29:5e:dd:e7:20:72:98:c2:d0:79:9b:81:99:0b:cd:8b:8d:ec:
         62:5f:d1:f6:34:e5:5d:36:24:f9:b9:d9:ca:26:9b:5a:61:db:
         d5:70:f3:00:cd:ff:d6:e3:d9:ed:d5:3c:34:3f:66:0f:fd:e7:
         45:30:af:ac:ed:fa:72:40:68:ef:b0:a6:cd:45:e1:5a:ac:1a:
         b7:99:f1:a9:64:a4:2b:31:ff:a4:bf:f7:98:92:b0:e7:8f:ff:
         dc:d7:ac:87
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE41/9BB5BDyqWW3GGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
ZmYwMDFlNTctYmRhYy00MzcxLWFiNWQtMWY5M2ZiNjhlYjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpGw0+kGSRaznLZ1ugynhWmu7/CGZflI1Fx5
RzLVgq+HY7/EwRDSO9Sort8JqCJ2hi/sAMTwBY+mjTDyR29R74jnTnLpTpJuBGQv
AozfXVOcnxp8hd32+wpGCmxrcxExanVJtijiPi75rEM3IF2DzaR+bjNbeFldIiIy
kSC6FwTsY6elDpHqoTE6Qx+rp+5wexbccxxxrvAwpeHSFsMHqSR9hvFmezaBijmB
6qFFbvabY2IYv9oawABqpmkkAKEFs0gimtwKxzF25domTf2raTLgTkWZBCsscKPZ
Kq1x03ufewMmslk29h/aj21Qp8H0x3paKBTK8+/YbVmlRkh8ZQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAfcYJBgAg5JTYG4103j2LrxtpLvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2Y5OWMyNzgtZTdlMi0z
OTk1LWEwMTAtMWM0MzgzNTJhZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFSsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQM9VXu7bHpRP9Mac/Unfk31Pp5L0u1asNODyef+DYsaoVPGvbjiK
T4VuK/Oq5lWsil+XKwCdAmMI8avLKw/CjL4sFjLeyLiFvimBB0yQ4Sx2GJhpUNMi
1eXVsDD6ObwM69bEGeMIJoIMAXc6EUs8v1bFy46Bq4r+i78MkVQPLmnPs4Yxlu72
6FITJnV4FGwzPXKJz4t2/aCk/ZFBh7+NJy79KV7d5yBymMLQeZuBmQvNi43sYl/R
9jTlXTYk+bnZyiabWmHb1XDzAM3/1uPZ7dU8ND9mD/3nRTCvrO36ckBo77CmzUXh
Wqwat5nxqWSkKzH/pL/3mJKw54//3Neshw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:24:50 2026 by rpki-client