Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1d483f4-9e88-3527-90c5-cd5e31756593.roa
File:                     d1d483f4-9e88-3527-90c5-cd5e31756593.roa (raw, json)
Hash identifier:          WFVIqZSyCR+SjOaKPXEGLaz1pyUurs4MMs0ZyPhCZHs=
Subject key identifier:   C5:D8:76:D5:20:F0:42:FD:F1:A2:E5:D1:F5:24:18:B4:56:27:62:FD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D8EF76F7F7EE8963FD2ACE1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1d483f4-9e88-3527-90c5-cd5e31756593.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     33287
IP address blocks:        2603:301d:2100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f7:6f:7f:7e:e8:96:3f:d2:ac:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=80d23af9-68c1-4417-9ebc-8df6963f890a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4a:92:be:b5:60:97:64:0a:30:fc:6a:7b:75:
                    9c:7b:fd:2c:47:e6:61:f1:f1:77:95:92:a9:a9:cb:
                    02:c3:d4:44:0f:87:53:07:4b:c1:ee:63:34:61:95:
                    c4:3c:c8:13:56:32:ed:3e:f9:d2:59:d7:95:04:c1:
                    df:4d:74:e1:d8:9a:ac:85:28:2d:74:12:fa:49:7b:
                    e9:db:1f:24:a3:89:c4:d1:55:2f:4a:c6:04:eb:47:
                    a8:30:26:dd:61:48:3e:f6:d9:44:85:f2:75:92:4a:
                    34:09:5e:b1:6a:b5:15:13:6f:64:d9:06:e3:20:59:
                    f8:22:b0:fd:96:c8:1c:48:7b:ca:30:4e:6c:93:2b:
                    6c:28:45:23:cd:e8:d5:55:ef:0e:60:08:48:b0:ed:
                    c3:27:29:c0:76:f8:a9:1e:62:5d:b5:04:15:be:6d:
                    ca:81:a2:1d:bc:a1:53:bb:22:f4:19:93:16:1c:1e:
                    80:d4:9c:46:9f:d6:a6:bb:7c:29:0d:c7:df:df:c5:
                    41:b6:7c:72:4e:32:d0:db:06:6f:ba:a3:05:23:c1:
                    48:d1:dc:7f:dc:48:eb:42:e8:a8:f7:c2:27:4e:a8:
                    83:7e:ee:1a:be:ef:a8:7a:56:c0:45:46:8a:63:5a:
                    27:11:80:b2:f2:d8:86:e1:c0:ea:8a:58:b9:67:32:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D8:76:D5:20:F0:42:FD:F1:A2:E5:D1:F5:24:18:B4:56:27:62:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1d483f4-9e88-3527-90c5-cd5e31756593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:301d:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:bf:62:5d:bb:7a:96:4a:5e:49:1f:3b:b4:60:73:db:78:c9:
         fa:c7:8d:19:94:a1:48:dd:d3:c8:79:e9:30:c8:8b:ae:8f:d7:
         df:e5:b7:c3:da:ba:76:e6:f9:f9:ae:d5:e2:8a:6e:77:b2:79:
         bb:ed:48:85:7e:3d:bb:38:00:2d:00:3a:57:8d:4b:56:54:ea:
         bf:03:33:bb:b1:37:6c:11:51:7c:6c:05:41:3a:d7:00:39:46:
         4e:aa:90:27:9c:2f:76:d9:39:fa:04:0f:d3:35:7b:af:0d:d4:
         57:6c:1d:7c:7a:2a:03:3d:1c:46:38:12:28:3c:2c:ae:aa:07:
         53:5c:b4:7f:95:74:54:a8:ef:c4:ef:d2:79:0c:bc:7f:54:5b:
         3a:0d:c4:5f:d6:fa:c4:45:77:cd:e4:e0:b4:c3:b4:d8:63:42:
         6c:27:b9:3c:79:dd:96:bc:e8:0a:f7:9b:56:e1:0c:92:37:c5:
         a9:a7:70:55:06:ca:7d:16:ad:ee:cd:0f:48:f2:5b:64:f2:ba:
         46:39:df:7d:02:12:c8:34:00:35:81:6d:73:3a:75:69:b1:85:
         b0:5a:78:ec:eb:2f:ed:5b:c2:15:31:fb:77:61:b4:1a:c8:55:
         b7:dd:24:cd:82:f4:75:0d:61:74:31:b9:19:19:d4:01:4d:e3:
         16:70:b8:ef
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O929/fuiWP9Ks4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ODBkMjNhZjktNjhjMS00NDE3LTllYmMtOGRmNjk2M2Y4OTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUqSvrVgl2QKMPxqe3Wce/0sR+Zh8fF3lZKp
qcsCw9RED4dTB0vB7mM0YZXEPMgTVjLtPvnSWdeVBMHfTXTh2JqshSgtdBL6SXvp
2x8ko4nE0VUvSsYE60eoMCbdYUg+9tlEhfJ1kko0CV6xarUVE29k2QbjIFn4IrD9
lsgcSHvKME5skytsKEUjzejVVe8OYAhIsO3DJynAdvipHmJdtQQVvm3KgaIdvKFT
uyL0GZMWHB6A1JxGn9amu3wpDcff38VBtnxyTjLQ2wZvuqMFI8FI0dx/3EjrQuio
98InTqiDfu4avu+oelbARUaKY1onEYCy8tiG4cDqili5ZzIO1QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMXYdtUg8EL98aLl0fUkGLRWJ2L9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFkNDgzZjQtOWU4OC0z
NTI3LTkwYzUtY2Q1ZTMxNzU2NTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwHSEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARL9iXbt6lkpeSR87tGBz23jJ+seNGZShSN3TyHnpMMiLro/X3+W3
w9q6dub5+a7V4opud7J5u+1IhX49uzgALQA6V41LVlTqvwMzu7E3bBFRfGwFQTrX
ADlGTqqQJ5wvdtk5+gQP0zV7rw3UV2wdfHoqAz0cRjgSKDwsrqoHU1y0f5V0VKjv
xO/SeQy8f1RbOg3EX9b6xEV3zeTgtMO02GNCbCe5PHndlrzoCvebVuEMkjfFqadw
VQbKfRat7s0PSPJbZPK6RjnffQISyDQANYFtczp1abGFsFp47Osv7VvCFTH7d2G0
GshVt90kzYL0dQ1hdDG5GRnUAU3jFnC47w==
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:06:19 2026 by rpki-client