Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/923bb7c8-70fd-3926-9928-b57eda356590.roa
File:                     923bb7c8-70fd-3926-9928-b57eda356590.roa (raw, json)
Hash identifier:          Z6l4JLs638ERAGRhadVl3pRxNLjtLiUWg+eB+eUkkD0=
Subject key identifier:   F4:81:31:BD:37:73:A1:1A:4C:65:3C:56:83:C0:9C:0F:03:B7:5E:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA4CC09EAAB655BDF19B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/923bb7c8-70fd-3926-9928-b57eda356590.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        2603:3015:3800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:4c:c0:9e:aa:b6:55:bd:f1:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=47b64518-d4d2-45ec-b368-0c7d7d23ed93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:95:6e:5b:33:36:84:31:0b:fd:d5:54:44:
                    ec:75:b0:d6:d1:f7:d4:89:70:d4:fa:a9:08:c6:dc:
                    b5:6c:4f:f4:6a:cc:f5:77:27:65:bd:3b:27:a2:86:
                    10:ee:9f:df:98:0d:71:f1:82:24:c4:87:d8:60:c6:
                    e5:82:f6:0c:c2:fb:05:7a:a7:37:46:01:b4:37:ff:
                    99:51:dc:1d:e8:ee:21:08:de:a4:07:c9:ae:0f:e4:
                    ef:c9:f3:63:8f:bf:bc:58:fc:96:4d:30:1b:63:ee:
                    4c:3a:46:73:e1:6b:1a:08:c0:77:5d:33:8a:bf:62:
                    a1:31:91:b6:25:74:be:16:bb:24:bc:34:60:e4:36:
                    d4:de:7f:89:6e:f2:b0:12:95:8a:74:f9:1f:ac:ce:
                    9b:27:87:c7:60:f5:50:39:79:fd:d4:10:34:ae:c4:
                    0f:d2:d0:ff:67:a4:a1:ad:51:11:8e:38:ca:95:1c:
                    61:3b:76:61:59:27:da:8e:5a:a4:91:ab:37:01:18:
                    cc:13:f3:ed:89:47:28:6d:e2:26:d9:cc:30:8c:9e:
                    8d:ae:9d:e5:03:12:69:83:f8:30:36:b7:11:2b:d8:
                    dd:aa:c6:4f:0e:0f:18:53:6e:05:c6:84:df:8b:37:
                    78:67:fe:f9:3c:ec:ff:d1:d7:46:76:08:97:91:3c:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:81:31:BD:37:73:A1:1A:4C:65:3C:56:83:C0:9C:0F:03:B7:5E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/923bb7c8-70fd-3926-9928-b57eda356590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:3800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:16:bd:e5:61:94:52:1a:92:d7:72:dc:58:01:5d:29:88:d2:
         81:80:96:f2:76:27:19:97:4f:93:13:94:f6:49:fc:62:84:ca:
         3c:f2:af:f3:c9:89:bc:8c:b1:dd:9a:bc:b2:45:5a:2c:b4:7b:
         2a:51:57:b8:5b:e0:55:03:92:00:38:e9:26:68:b8:69:2b:6b:
         5f:43:cf:06:ad:41:05:71:76:9f:e6:bf:5f:c1:eb:72:5f:52:
         ee:41:1a:e5:95:59:07:26:73:79:6c:4d:20:8d:bb:c6:83:ba:
         ed:29:34:4e:f9:da:53:45:84:15:cb:20:05:4d:11:0f:cd:8a:
         a9:6b:2d:41:4c:30:2f:a7:60:cf:36:9d:c7:c4:a6:96:1e:f5:
         c9:9e:82:ea:39:0a:f9:76:a7:9c:58:00:d0:13:d9:8c:cc:62:
         b0:82:57:3f:77:83:07:c1:c3:31:98:a5:8b:02:b1:79:79:3b:
         fa:bb:2c:40:4b:c3:f8:40:01:c8:9b:69:8c:ed:b2:70:81:88:
         a4:b9:f6:6c:c0:bc:c7:d8:f1:1e:aa:0b:23:59:74:b5:e0:c8:
         39:8e:80:11:ed:3d:92:84:4d:3d:f1:94:e4:75:f0:91:c3:95:
         97:04:58:c0:04:65:30:52:44:d5:ab:6c:f9:0e:42:fb:04:da:
         00:21:95:f9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqkzAnqq2Vb3xmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
NDdiNjQ1MTgtZDRkMi00NWVjLWIzNjgtMGM3ZDdkMjNlZDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe+VblszNoQxC/3VVETsdbDW0ffUiXDU+qkI
xty1bE/0asz1dydlvTsnooYQ7p/fmA1x8YIkxIfYYMblgvYMwvsFeqc3RgG0N/+Z
Udwd6O4hCN6kB8muD+TvyfNjj7+8WPyWTTAbY+5MOkZz4WsaCMB3XTOKv2KhMZG2
JXS+FrskvDRg5DbU3n+JbvKwEpWKdPkfrM6bJ4fHYPVQOXn91BA0rsQP0tD/Z6Sh
rVERjjjKlRxhO3ZhWSfajlqkkas3ARjME/PtiUcobeIm2cwwjJ6Nrp3lAxJpg/gw
NrcRK9jdqsZPDg8YU24FxoTfizd4Z/75POz/0ddGdgiXkTxjHQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPSBMb03c6EaTGU8VoPAnA8Dt15UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTIzYmI3YzgtNzBmZC0z
OTI2LTk5MjgtYjU3ZWRhMzU2NTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFTgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAuxa95WGUUhqS13LcWAFdKYjSgYCW8nYnGZdPkxOU9kn8YoTKPPKv
88mJvIyx3Zq8skVaLLR7KlFXuFvgVQOSADjpJmi4aStrX0PPBq1BBXF2n+a/X8Hr
cl9S7kEa5ZVZByZzeWxNII27xoO67Sk0TvnaU0WEFcsgBU0RD82KqWstQUwwL6dg
zzadx8Smlh71yZ6C6jkK+XannFgA0BPZjMxisIJXP3eDB8HDMZiliwKxeXk7+rss
QEvD+EAByJtpjO2ycIGIpLn2bMC8x9jxHqoLI1l0teDIOY6AEe09koRNPfGU5HXw
kcOVlwRYwARlMFJE1ats+Q5C+wTaACGV+Q==
-----END CERTIFICATE-----
Generated at Wed Oct 22 00:23:57 2025 by rpki-client