Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6e95dc7-d94a-30c2-9fd8-a2d6ffe5d33e.roa
File:                     a6e95dc7-d94a-30c2-9fd8-a2d6ffe5d33e.roa (raw, json)
Hash identifier:          A61MsEaoEjgMF5xkZcl0X+UqCqfnQBL+hIAi7r87pLo=
Subject key identifier:   A1:31:D5:A1:39:57:64:63:79:9C:B1:1F:C0:4B:F2:C6:37:8B:D4:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF77DE4BA0921BD62450600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6e95dc7-d94a-30c2-9fd8-a2d6ffe5d33e.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33491
IP address blocks:        2603:2802::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:7d:e4:ba:09:21:bd:62:45:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=375cb4da-f0ee-4e65-84ce-889f95a473a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:c9:b9:b8:c0:e9:1b:ed:5a:d0:ca:86:aa:
                    5c:c4:c2:d7:13:1a:a7:4b:62:1a:66:6a:04:58:45:
                    fd:11:90:3d:4c:19:38:96:fb:14:ca:3d:67:8d:87:
                    03:34:02:4c:a8:0f:6e:a2:d7:78:42:0d:a3:10:ca:
                    3a:a9:e4:a8:3b:82:4a:07:cb:e4:c1:be:52:d7:cb:
                    41:72:89:da:49:05:1f:75:59:60:ac:61:bc:fc:0a:
                    ad:08:be:0a:eb:5a:ac:6d:3e:93:3f:ae:06:79:ff:
                    99:6c:2a:5e:e3:2c:fb:e5:aa:de:b5:b8:bf:b0:b3:
                    22:4f:80:8d:60:28:a0:f4:c6:d8:b7:a5:53:67:77:
                    ff:3d:04:5d:96:ab:7e:96:e2:88:f0:77:d1:00:98:
                    61:d5:62:e6:c2:06:99:13:ef:06:eb:31:fb:b1:76:
                    21:08:c7:ab:a6:a6:71:37:c6:df:68:ed:09:a1:37:
                    e6:6a:71:50:c0:2a:20:db:05:03:d6:3e:ea:c7:cf:
                    69:b6:d6:d7:c1:fe:6e:66:00:a9:17:d9:bd:9b:61:
                    56:6a:77:61:e5:64:70:e0:7f:da:ba:51:be:26:57:
                    13:41:43:19:f0:fa:5e:2b:96:d7:63:db:22:9f:1a:
                    39:79:1a:9f:71:4c:2e:ca:ee:63:26:93:df:c5:35:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:31:D5:A1:39:57:64:63:79:9C:B1:1F:C0:4B:F2:C6:37:8B:D4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6e95dc7-d94a-30c2-9fd8-a2d6ffe5d33e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2802::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:7f:72:26:b7:a2:06:d7:c5:cf:4e:a8:00:74:ec:47:d7:0b:
         83:b9:60:b4:33:13:08:f2:d0:fd:58:fc:da:0d:d0:4b:5f:4a:
         7a:5b:d4:cd:e4:15:79:27:d1:fa:ad:d7:13:db:4c:65:42:9c:
         b4:5c:82:73:14:2a:d2:44:7c:f0:fd:16:24:d5:fb:5f:7a:49:
         b3:d5:82:08:a1:5a:8f:99:a7:9e:71:ca:5a:ad:e2:e3:9b:51:
         81:6b:1a:b0:2a:26:70:30:84:ba:b5:3e:fb:56:ef:8a:b6:7b:
         bc:39:83:3b:86:83:c7:2a:2f:e0:1f:71:8f:52:49:1c:ad:55:
         0a:7e:69:a4:cc:91:89:6e:ec:16:01:88:5b:58:67:ff:37:0e:
         97:99:cd:6f:cd:33:76:f2:df:dd:10:8e:c6:7f:a9:48:6b:1b:
         46:b6:12:79:04:fd:92:18:8c:b4:85:3c:0d:d8:3d:c0:1b:0c:
         51:0b:3a:be:c5:00:ae:a8:0c:27:cd:19:d1:9c:c5:72:ec:0f:
         fd:b7:21:6c:7f:41:9d:38:e0:3c:3f:ad:29:e0:bd:f2:cd:e5:
         dc:4f:f7:82:e1:e6:c9:69:0e:64:9b:19:d7:66:df:56:32:e5:
         cd:07:72:11:c7:be:72:90:ac:8b:f7:a6:6e:2e:c2:fe:13:af:
         48:69:3e:40
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O933kugkhvWJFBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
Mzc1Y2I0ZGEtZjBlZS00ZTY1LTg0Y2UtODg5Zjk1YTQ3M2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNHJubjA6RvtWtDKhqpcxMLXExqnS2IaZmoE
WEX9EZA9TBk4lvsUyj1njYcDNAJMqA9uotd4Qg2jEMo6qeSoO4JKB8vkwb5S18tB
conaSQUfdVlgrGG8/AqtCL4K61qsbT6TP64Gef+ZbCpe4yz75aretbi/sLMiT4CN
YCig9MbYt6VTZ3f/PQRdlqt+luKI8HfRAJhh1WLmwgaZE+8G6zH7sXYhCMerpqZx
N8bfaO0JoTfmanFQwCog2wUD1j7qx89pttbXwf5uZgCpF9m9m2FWandh5WRw4H/a
ulG+JlcTQUMZ8PpeK5bXY9sinxo5eRqfcUwuyu5jJpPfxTXYQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKEx1aE5V2RjeZyxH8BL8sY3i9TuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTZlOTVkYzctZDk0YS0z
MGMyLTlmZDgtYTJkNmZmZTVkMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMoAgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA2H9yJreiBtfFz06oAHTsR9cLg7lgtDMTCPLQ/Vj82g3QS19KelvU
zeQVeSfR+q3XE9tMZUKctFyCcxQq0kR88P0WJNX7X3pJs9WCCKFaj5mnnnHKWq3i
45tRgWsasComcDCEurU++1bvirZ7vDmDO4aDxyov4B9xj1JJHK1VCn5ppMyRiW7s
FgGIW1hn/zcOl5nNb80zdvLf3RCOxn+pSGsbRrYSeQT9khiMtIU8Ddg9wBsMUQs6
vsUArqgMJ80Z0ZzFcuwP/bchbH9BnTjgPD+tKeC98s3l3E/3guHmyWkOZJsZ12bf
VjLlzQdyEce+cpCsi/embi7C/hOvSGk+QA==
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:12:28 2026 by rpki-client