Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc4ba406-6602-3a82-a0c3-e277a168793c.roa
File:                     cc4ba406-6602-3a82-a0c3-e277a168793c.roa (raw, json)
Hash identifier:          aAl0UDr3VzV0Q8rIO+g/FmKCZQN+7yRu+Qg10PNExPE=
Subject key identifier:   25:D8:8C:8F:A5:A7:FE:03:FA:C0:A1:C5:C7:4A:62:5D:C5:EA:71:FF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E31CF2753292E3D93454D8DE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc4ba406-6602-3a82-a0c3-e277a168793c.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     7016
IP address blocks:        2603:3007:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:27:53:29:2e:3d:93:45:4d:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=cd7a9b2b-b7e6-4d57-aef1-118c935a7a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:db:c3:04:d4:03:9f:3a:98:1a:7d:a6:4f:
                    6d:46:11:d4:f7:4d:77:dd:b0:94:fe:a6:44:8c:e0:
                    81:c9:4d:93:5b:19:27:fd:9c:05:0d:30:06:05:79:
                    42:26:23:1b:41:21:08:b7:a5:be:79:e8:55:72:6f:
                    d8:da:fa:29:cd:77:bc:2e:b2:06:92:03:65:df:4f:
                    c4:ec:23:2d:69:88:40:54:2b:ea:03:3d:35:38:17:
                    c9:09:c9:33:da:59:c7:4f:36:9d:c3:a3:c6:63:90:
                    91:0a:34:15:92:1c:1f:a8:70:76:91:24:01:dc:3b:
                    6c:f3:6e:7f:b5:89:5b:32:ed:51:7f:f1:d2:d5:23:
                    04:c1:b7:49:0c:6b:15:82:16:45:79:e5:59:ae:6c:
                    88:f9:f5:d3:f3:20:df:3f:27:d1:c6:28:70:b7:d4:
                    92:ae:fd:8b:6c:21:af:3d:7e:73:0e:5d:e7:7b:77:
                    68:6a:e5:1b:66:35:da:a8:57:7e:77:bd:90:dc:39:
                    30:59:47:3a:6a:f3:95:90:b7:5a:ae:7d:d6:0e:3e:
                    b9:ec:83:e4:0a:7d:1e:19:a9:b0:ef:3c:b3:21:02:
                    d7:93:17:35:c2:b2:d1:87:ba:f8:32:f3:b0:3b:2c:
                    0f:52:11:96:0d:5d:86:ef:6d:2e:49:bb:c8:1c:09:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D8:8C:8F:A5:A7:FE:03:FA:C0:A1:C5:C7:4A:62:5D:C5:EA:71:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc4ba406-6602-3a82-a0c3-e277a168793c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3007:1c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:dc:88:be:0a:af:78:74:ab:ef:f6:98:be:d1:5d:49:97:9f:
         cc:76:78:65:80:d6:63:31:b2:bb:43:15:90:65:f3:ea:f5:8f:
         f7:2d:ff:83:d1:31:17:64:8a:d7:8e:a5:1b:2e:f6:01:93:bb:
         a3:e4:8a:66:9a:12:9d:05:db:7b:66:82:b1:15:1f:ac:19:06:
         1d:ae:35:be:e4:c3:dd:b8:d2:2f:31:71:7f:48:52:d3:1c:d9:
         28:ab:e9:9d:49:bc:4b:41:17:f1:1a:d9:fa:16:b8:f7:06:c3:
         d5:52:06:dc:be:81:02:68:0a:cd:1e:cd:a3:8b:3a:53:60:3c:
         23:a7:f0:0c:1b:2c:45:c2:d1:29:dc:f9:0d:a9:1b:c6:a5:c8:
         56:6a:22:13:df:ed:39:ed:96:6e:1e:26:11:12:d0:46:e3:90:
         29:7c:85:dd:85:55:a7:05:2b:5a:aa:7b:8e:5d:80:95:67:1b:
         7a:34:02:5e:70:5a:26:81:ab:40:12:de:8a:ae:0c:5d:0b:06:
         e3:16:f1:30:4c:6d:24:ae:92:fe:27:8e:2b:bb:0d:02:c0:c3:
         7c:1d:a4:a9:7f:3f:5e:c8:d2:4e:5d:f4:fb:45:fd:95:d0:d0:
         3d:7b:56:b1:00:96:ed:1c:8e:23:93:f1:87:62:5a:02:87:05:
         97:17:d7:86
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4xzydTKS49k0VNjeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk
Y2Q3YTliMmItYjdlNi00ZDU3LWFlZjEtMTE4YzkzNWE3YTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnLbwwTUA586mBp9pk9tRhHU90133bCU/qZE
jOCByU2TWxkn/ZwFDTAGBXlCJiMbQSEIt6W+eehVcm/Y2vopzXe8LrIGkgNl30/E
7CMtaYhAVCvqAz01OBfJCckz2lnHTzadw6PGY5CRCjQVkhwfqHB2kSQB3Dts825/
tYlbMu1Rf/HS1SMEwbdJDGsVghZFeeVZrmyI+fXT8yDfPyfRxihwt9SSrv2LbCGv
PX5zDl3ne3doauUbZjXaqFd+d72Q3DkwWUc6avOVkLdarn3WDj657IPkCn0eGamw
7zyzIQLXkxc1wrLRh7r4MvOwOywPUhGWDV2G720uSbvIHAkUPwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCXYjI+lp/4D+sChxcdKYl3F6nH/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2M0YmE0MDYtNjYwMi0z
YTgyLWEwYzMtZTI3N2ExNjg3OTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBxww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA2tyIvgqveHSr7/aYvtFdSZefzHZ4ZYDWYzGyu0MVkGXz6vWP9y3/
g9ExF2SK146lGy72AZO7o+SKZpoSnQXbe2aCsRUfrBkGHa41vuTD3bjSLzFxf0hS
0xzZKKvpnUm8S0EX8RrZ+ha49wbD1VIG3L6BAmgKzR7No4s6U2A8I6fwDBssRcLR
Kdz5DakbxqXIVmoiE9/tOe2Wbh4mERLQRuOQKXyF3YVVpwUrWqp7jl2AlWcbejQC
XnBaJoGrQBLeiq4MXQsG4xbxMExtJK6S/ieOK7sNAsDDfB2kqX8/XsjSTl30+0X9
ldDQPXtWsQCW7RyOI5Pxh2JaAocFlxfXhg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:19:14 2026 by rpki-client