Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aea159d4-1b43-385b-bf07-1312fadbfe54.roa
File:                     aea159d4-1b43-385b-bf07-1312fadbfe54.roa (raw, json)
Hash identifier:          E4MlJJA1kINXxVMCwqgMUL1B7VT2J5Y69PVn4eLVsgA=
Subject key identifier:   50:C2:37:31:8A:83:07:87:DD:10:00:38:78:0A:D4:3B:38:DE:77:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3B501D4148AF9393F4CD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aea159d4-1b43-385b-bf07-1312fadbfe54.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33651
IP address blocks:        2601:645:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:50:1d:41:48:af:93:93:f4:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=309a07e5-db4a-4625-b849-ef5cdc91d590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:5e:75:07:75:66:2f:d7:0e:ff:4b:30:13:
                    a1:26:41:48:f3:95:f0:77:8f:29:7e:31:47:46:72:
                    b9:41:0f:43:1c:94:0d:d8:e4:f7:1e:c0:2b:17:c2:
                    cd:15:2a:f2:76:56:85:d2:97:b4:6e:3c:a4:05:07:
                    72:bb:e4:5d:30:4a:8d:ae:ea:df:44:c1:c6:d5:8c:
                    28:5a:85:7a:1c:40:27:0d:9d:43:12:cc:2f:8d:23:
                    9a:7d:71:2d:58:e5:a0:58:18:2c:8f:91:74:c9:10:
                    f0:6e:91:3b:d4:b3:24:a7:f2:4e:b1:c7:b2:b9:97:
                    62:b8:48:bd:c8:2e:5a:55:c8:aa:9f:09:33:ae:c0:
                    49:ed:53:2c:ab:47:90:2f:45:97:fe:f3:c1:f7:b8:
                    bb:09:c4:75:cb:29:ad:05:6f:94:eb:69:61:d5:a2:
                    10:43:52:19:4d:b1:2e:38:ea:9a:43:46:a3:2d:37:
                    3e:79:8a:69:d6:2c:b5:3e:db:e5:cd:f3:d6:ff:c3:
                    54:25:6e:3a:ab:6d:ba:ce:58:d8:00:ca:b4:4f:81:
                    75:c3:75:b7:a1:21:f9:21:44:cc:6a:20:61:fa:ad:
                    4a:1e:89:00:b1:4d:80:90:a4:e0:4b:e0:68:20:19:
                    be:da:54:17:ef:c5:21:39:60:b0:e4:06:03:b3:23:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C2:37:31:8A:83:07:87:DD:10:00:38:78:0A:D4:3B:38:DE:77:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aea159d4-1b43-385b-bf07-1312fadbfe54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:645:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e5:9c:c7:ae:b0:7f:1e:ac:c7:bd:fe:41:77:96:25:3d:77:
         91:6d:dc:10:cb:8f:45:4e:47:1f:de:5d:14:2e:f7:ee:fa:97:
         69:b2:57:39:84:1e:51:4f:96:98:a9:e3:9d:18:f1:62:19:e8:
         6d:c4:1b:2c:b9:11:88:61:2d:16:d7:fc:3f:67:35:39:9d:b9:
         4a:ff:40:d2:91:13:bd:a6:f2:b3:5e:93:9b:0a:70:9a:ec:bb:
         29:42:ab:52:c5:3f:ca:11:71:4c:02:b7:3e:32:84:a1:3f:39:
         29:1e:5f:98:88:b5:e9:71:51:d5:db:37:7a:5d:97:28:6c:21:
         61:18:46:ac:e0:da:34:5e:ec:78:80:9c:f0:1e:2a:e4:90:9a:
         65:dd:2d:c7:f7:2a:96:56:b5:3f:e8:94:a7:a1:60:f6:b9:9d:
         c5:8c:70:1e:57:bf:67:23:c2:b0:fa:c2:2e:35:1c:ee:2d:a5:
         6f:2e:65:f6:12:36:7f:2e:81:45:4f:2a:6e:a4:a6:ff:94:85:
         7a:18:87:e7:15:99:18:3b:56:b5:5a:f5:3a:f5:85:4f:76:ad:
         57:35:c0:2d:7b:ca:22:08:9c:a2:ac:3d:e8:9a:1b:de:72:e2:
         12:56:e8:1c:23:3d:39:c3:50:4f:5f:d2:51:ba:c7:ea:87:a1:
         11:ae:86:bb
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5vO1AdQUivk5P0zQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
MzA5YTA3ZTUtZGI0YS00NjI1LWI4NDktZWY1Y2RjOTFkNTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXhedQd1Zi/XDv9LMBOhJkFI85Xwd48pfjFH
RnK5QQ9DHJQN2OT3HsArF8LNFSrydlaF0pe0bjykBQdyu+RdMEqNrurfRMHG1Ywo
WoV6HEAnDZ1DEswvjSOafXEtWOWgWBgsj5F0yRDwbpE71LMkp/JOsceyuZdiuEi9
yC5aVciqnwkzrsBJ7VMsq0eQL0WX/vPB97i7CcR1yymtBW+U62lh1aIQQ1IZTbEu
OOqaQ0ajLTc+eYpp1iy1PtvlzfPW/8NUJW46q226zljYAMq0T4F1w3W3oSH5IUTM
aiBh+q1KHokAsU2AkKTgS+BoIBm+2lQX78UhOWCw5AYDsyPHqQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFDCNzGKgweH3RAAOHgK1Ds43nfRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVhMTU5ZDQtMWI0My0z
ODViLWJmMDctMTMxMmZhZGJmZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEGRYAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABeWcx66wfx6sx73+QXeWJT13kW3cEMuPRU5HH95dFC737vqXabJX
OYQeUU+WmKnjnRjxYhnobcQbLLkRiGEtFtf8P2c1OZ25Sv9A0pETvabys16Tmwpw
muy7KUKrUsU/yhFxTAK3PjKEoT85KR5fmIi16XFR1ds3el2XKGwhYRhGrODaNF7s
eICc8B4q5JCaZd0tx/cqlla1P+iUp6Fg9rmdxYxwHle/ZyPCsPrCLjUc7i2lby5l
9hI2fy6BRU8qbqSm/5SFehiH5xWZGDtWtVr1OvWFT3atVzXALXvKIgicoqw96Job
3nLiElboHCM9OcNQT1/SUbrH6oehEa6Guw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:53 2026 by rpki-client