Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/066638c1-d8bc-373c-a720-ea7ef82603a9.roa
File:                     066638c1-d8bc-373c-a720-ea7ef82603a9.roa (raw, json)
Hash identifier:          rO9QxXeZNN34KmyxZdo38dgiopWBgGGOIV5FSS2XDxk=
Subject key identifier:   C4:90:79:A9:B7:F3:93:AF:0D:8E:5F:02:00:F8:C5:F4:70:F0:6F:72
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA9FFE922BC898FD86FE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/066638c1-d8bc-373c-a720-ea7ef82603a9.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        2603:300c:1500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:9f:fe:92:2b:c8:98:fd:86:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e1ef27c8-71b6-4286-b603-449aa9f75930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:24:ba:00:95:7e:5b:21:b8:70:5c:00:63:
                    27:cc:33:79:0d:fc:9b:87:71:c9:f4:76:d3:6d:02:
                    2a:0d:92:bf:4b:61:cb:c1:55:40:ac:3c:dc:61:22:
                    f2:0f:a8:a7:64:18:9b:0e:5a:07:1c:72:85:13:26:
                    c4:08:62:78:6b:8c:7d:65:97:eb:ea:ad:31:8a:07:
                    f0:30:97:a8:e6:7f:83:a3:98:f4:29:ad:21:27:43:
                    a0:d6:e6:cb:0c:4c:86:df:f6:c9:63:ca:95:38:5d:
                    37:b8:49:ad:9d:f2:4f:05:74:87:d3:56:13:9e:19:
                    3f:07:7a:12:fc:b0:c8:db:2a:ae:dc:93:45:91:90:
                    f1:bf:e9:44:af:0e:51:12:50:e2:56:9c:0a:ea:fd:
                    38:d0:97:70:42:d2:f0:13:84:35:b1:a5:ba:b4:d2:
                    89:d3:22:12:be:0b:e5:18:af:56:e1:7b:72:f0:26:
                    77:0d:c9:a4:a8:bf:d7:52:4b:33:0b:e1:07:3b:2f:
                    d3:23:4a:cb:24:a9:df:6c:81:97:f2:79:12:dd:6d:
                    80:c8:cb:d9:fe:72:97:4b:e9:d7:b0:62:d0:7a:f8:
                    d3:13:b7:1d:9e:d7:64:10:bb:1e:9b:e1:aa:09:c6:
                    37:5c:fb:fd:5e:c1:a7:47:fd:51:99:14:24:e4:58:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:90:79:A9:B7:F3:93:AF:0D:8E:5F:02:00:F8:C5:F4:70:F0:6F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/066638c1-d8bc-373c-a720-ea7ef82603a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300c:1500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:4f:9f:1a:2f:93:38:c8:be:23:34:3f:97:b2:8d:a4:af:0f:
         13:30:0c:21:38:6b:31:1c:4d:b0:9f:87:07:fd:64:d2:d0:7d:
         61:15:c5:25:1a:d7:6e:e7:cb:66:79:eb:ea:57:c3:2c:7b:cd:
         06:16:30:2a:a7:87:e2:ea:4f:af:8e:3e:d0:f6:f2:10:da:56:
         4c:07:5e:05:2c:c8:30:95:37:63:df:9e:30:08:37:75:7d:8e:
         45:c9:0e:b4:47:06:a2:93:54:d3:25:8b:f9:02:dc:27:d3:47:
         0b:85:cf:7c:69:2d:26:d3:7c:57:3d:2e:49:5e:b7:dd:8b:8f:
         dd:c9:e9:d5:7a:58:52:b7:07:19:8c:eb:2a:ab:35:c2:2a:82:
         9d:10:9b:8d:47:b2:f5:88:fc:c6:e3:d5:c5:b7:61:8b:4f:18:
         c2:7e:45:e7:40:96:df:99:2c:64:dd:41:ec:74:d7:96:cf:d3:
         3e:a7:64:b2:16:0f:f1:ca:86:7b:f1:48:d1:79:3d:76:38:b7:
         4e:c8:fc:ff:fc:c5:20:e2:57:09:32:38:1d:87:0e:8e:d4:6f:
         ec:0b:6b:31:89:cf:0c:3e:f2:9f:c9:40:21:70:68:fa:91:4c:
         04:83:97:93:53:9d:3f:2d:c8:28:62:cd:aa:82:d8:4a:94:31:
         6e:d8:e8:f4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuVqp/+kivImP2G/kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk
ZTFlZjI3YzgtNzFiNi00Mjg2LWI2MDMtNDQ5YWE5Zjc1OTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44ckugCVflshuHBcAGMnzDN5Dfybh3HJ9HbT
bQIqDZK/S2HLwVVArDzcYSLyD6inZBibDloHHHKFEybECGJ4a4x9ZZfr6q0xigfw
MJeo5n+Do5j0Ka0hJ0Og1ubLDEyG3/bJY8qVOF03uEmtnfJPBXSH01YTnhk/B3oS
/LDI2yqu3JNFkZDxv+lErw5RElDiVpwK6v040JdwQtLwE4Q1saW6tNKJ0yISvgvl
GK9W4Xty8CZ3DcmkqL/XUkszC+EHOy/TI0rLJKnfbIGX8nkS3W2AyMvZ/nKXS+nX
sGLQevjTE7cdntdkELsem+GqCcY3XPv9XsGnR/1RmRQk5FiyPQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMSQeam385OvDY5fAgD4xfRw8G9yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY2NjM4YzEtZDhiYy0z
NzNjLWE3MjAtZWE3ZWY4MjYwM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDBUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmk+fGi+TOMi+IzQ/l7KNpK8PEzAMIThrMRxNsJ+HB/1k0tB9YRXF
JRrXbufLZnnr6lfDLHvNBhYwKqeH4upPr44+0PbyENpWTAdeBSzIMJU3Y9+eMAg3
dX2ORckOtEcGopNU0yWL+QLcJ9NHC4XPfGktJtN8Vz0uSV633YuP3cnp1XpYUrcH
GYzrKqs1wiqCnRCbjUey9Yj8xuPVxbdhi08Ywn5F50CW35ksZN1B7HTXls/TPqdk
shYP8cqGe/FI0Xk9dji3Tsj8//zFIOJXCTI4HYcOjtRv7AtrMYnPDD7yn8lAIXBo
+pFMBIOXk1OdPy3IKGLNqoLYSpQxbtjo9A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:21:29 2025 by rpki-client