Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf0e964b-22eb-3c1d-9344-600eb7a4631b.roa
File:                     bf0e964b-22eb-3c1d-9344-600eb7a4631b.roa (raw, json)
Hash identifier:          XWBnisiUmSfMTUq2jjIZ76xYSzNtU28pMNmvFP3YPlU=
Subject key identifier:   34:1C:CE:35:05:E2:13:38:31:DF:5F:A9:F5:77:0A:DC:A0:C9:B2:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F77833138F65362E1462DD570
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf0e964b-22eb-3c1d-9344-600eb7a4631b.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     7016
IP address blocks:        2603:3007:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:31:38:f6:53:62:e1:46:2d:d5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=8ebbb426-a23d-47ce-82cc-2b4257c5cb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:b8:80:b2:a8:29:96:6c:7d:b1:7f:58:36:
                    59:b8:a2:4f:dd:89:82:a4:74:02:ee:6e:59:9f:7b:
                    90:ba:72:59:36:f9:1c:07:55:4a:e5:5c:f4:e2:08:
                    22:7d:14:3c:3e:b1:56:4d:91:9d:9d:59:8d:e6:21:
                    b3:4d:21:37:47:3b:57:3c:7d:18:2d:42:5d:ad:71:
                    88:8b:d3:a9:35:1e:e3:b5:78:0a:e0:97:8a:bf:aa:
                    44:1e:30:98:7c:18:96:a4:68:23:37:1e:b3:11:da:
                    24:dd:d4:ca:49:71:1b:c7:78:cf:e7:88:98:34:83:
                    b1:71:89:af:0f:eb:2c:33:53:b1:e7:2a:dd:a9:9a:
                    ee:53:21:98:a1:47:70:ba:be:07:63:11:0c:90:de:
                    fd:26:aa:74:ed:30:3f:76:2d:97:b6:3d:e9:e5:f1:
                    3d:9f:c1:51:cb:c1:1f:94:50:d6:b3:28:0e:ec:a3:
                    a5:85:a5:46:1f:d6:ec:6c:52:46:22:18:f0:73:63:
                    3e:61:9b:46:a6:65:82:6e:e2:28:d3:2b:cf:49:6a:
                    bc:45:4a:62:be:d2:66:da:db:a1:fd:1e:1d:82:79:
                    50:1b:88:e5:8e:7e:1f:19:71:b9:a9:cc:18:1e:ac:
                    c1:01:8c:ae:d3:d8:09:25:26:96:c6:92:ff:0e:eb:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1C:CE:35:05:E2:13:38:31:DF:5F:A9:F5:77:0A:DC:A0:C9:B2:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf0e964b-22eb-3c1d-9344-600eb7a4631b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3007:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:93:db:cf:1d:b9:e8:2b:30:06:7d:6e:0b:96:46:e2:2a:a5:
         84:1b:c0:ca:dd:49:cc:78:a0:2f:6f:a8:f8:83:fa:ec:1b:f3:
         87:15:59:dc:1e:e4:72:96:33:9e:7a:84:ae:32:a7:e6:8a:1d:
         c0:1b:a5:a8:59:b1:ac:59:d1:d6:fb:43:37:d0:97:3d:eb:03:
         7d:68:0d:89:76:c1:38:f5:ca:f7:6f:81:ed:0c:29:93:f7:b4:
         8f:17:e5:90:b9:25:3f:fd:0d:22:60:1b:01:f5:49:45:c3:2a:
         72:ba:61:a9:00:5d:6e:e1:27:62:49:63:39:70:b8:80:74:89:
         30:f1:bb:d7:47:53:bc:fb:b5:31:96:c6:2c:ab:ea:d1:59:33:
         70:77:fc:e3:e4:0c:a1:03:c5:a0:f0:49:19:62:5d:c9:43:72:
         56:91:be:70:32:4a:4f:98:d1:61:e4:76:05:b6:4f:f4:9a:cb:
         d0:9f:bd:fe:08:19:38:5e:cc:01:f1:5e:56:95:10:4f:1d:89:
         84:b9:7e:f6:7e:e3:1f:76:9f:f2:18:7f:f7:b2:00:87:af:bb:
         34:18:1d:b2:4d:97:39:d7:e3:98:e2:18:87:58:1e:86:26:b2:
         56:1e:f7:7a:fc:eb:8e:5c:a9:4a:8b:99:4f:2a:8a:00:5b:7b:
         18:52:1a:c0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE93gzE49lNi4UYt1XAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk
OGViYmI0MjYtYTIzZC00N2NlLTgyY2MtMmI0MjU3YzVjYjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpy4gLKoKZZsfbF/WDZZuKJP3YmCpHQC7m5Z
n3uQunJZNvkcB1VK5Vz04ggifRQ8PrFWTZGdnVmN5iGzTSE3RztXPH0YLUJdrXGI
i9OpNR7jtXgK4JeKv6pEHjCYfBiWpGgjNx6zEdok3dTKSXEbx3jP54iYNIOxcYmv
D+ssM1Ox5yrdqZruUyGYoUdwur4HYxEMkN79Jqp07TA/di2Xtj3p5fE9n8FRy8Ef
lFDWsygO7KOlhaVGH9bsbFJGIhjwc2M+YZtGpmWCbuIo0yvPSWq8RUpivtJm2tuh
/R4dgnlQG4jljn4fGXG5qcwYHqzBAYyu09gJJSaWxpL/Duv92wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDQczjUF4hM4Md9fqfV3CtygybKeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYwZTk2NGItMjJlYi0z
YzFkLTkzNDQtNjAwZWI3YTQ2MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBwMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKZPbzx256CswBn1uC5ZG4iqlhBvAyt1JzHigL2+o+IP67BvzhxVZ
3B7kcpYznnqErjKn5oodwBulqFmxrFnR1vtDN9CXPesDfWgNiXbBOPXK92+B7Qwp
k/e0jxflkLklP/0NImAbAfVJRcMqcrphqQBdbuEnYkljOXC4gHSJMPG710dTvPu1
MZbGLKvq0VkzcHf84+QMoQPFoPBJGWJdyUNyVpG+cDJKT5jRYeR2BbZP9JrL0J+9
/ggZOF7MAfFeVpUQTx2JhLl+9n7jH3af8hh/97IAh6+7NBgdsk2XOdfjmOIYh1ge
hiayVh73evzrjlypSouZTyqKAFt7GFIawA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:14:27 2026 by rpki-client