Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a743b71-5d3f-31ee-9bcd-240a74737712.roa
File:                     3a743b71-5d3f-31ee-9bcd-240a74737712.roa (raw, json)
Hash identifier:          P1JQiaUABEfBVpEtPUY6O5OyZw8gBRepURH4aMPvMiU=
Subject key identifier:   86:93:90:53:E6:42:18:6E:EF:A0:6E:23:AF:AD:61:CF:FD:A9:B1:A2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E3600839901C2B04B904BA180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a743b71-5d3f-31ee-9bcd-240a74737712.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     7015
IP address blocks:        2601:198:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:83:99:01:c2:b0:4b:90:4b:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=e99782c3-1bb0-4b89-95ac-88e223a8ab20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:c2:af:d8:27:da:ea:da:d7:b7:3d:b2:c5:
                    8d:1c:31:92:db:6d:5e:bb:5a:1a:17:d3:aa:53:4a:
                    fa:87:a5:d2:74:ef:83:dc:af:a6:b8:e7:54:6e:53:
                    51:59:0a:94:f8:2f:4a:d9:79:35:54:56:8f:9b:6d:
                    48:a5:92:6f:4a:f9:21:0b:22:ad:0e:d2:c6:d0:3f:
                    6c:83:e3:2c:54:db:bf:7a:d0:7c:97:48:ee:23:32:
                    21:29:8d:83:02:53:9e:c7:f6:fd:f7:5c:a0:ff:a7:
                    b8:f3:29:d8:09:16:5d:48:b8:1c:a7:02:8a:d2:2c:
                    c9:1f:46:a6:6b:3d:fc:86:34:fc:f8:89:1a:61:cb:
                    70:67:fd:7e:eb:d2:3f:5e:f2:38:7a:ee:aa:1c:40:
                    e8:dc:0a:3d:00:db:89:c9:d1:01:46:f5:dc:39:a0:
                    18:a0:24:2a:b2:30:7c:1c:62:41:01:0a:fd:20:59:
                    59:13:fe:62:d2:db:e2:66:76:69:c3:e3:40:4a:3e:
                    50:b9:6a:c7:78:b7:f3:9e:2e:c7:6e:e5:b6:a2:25:
                    37:db:02:ab:cd:63:4b:0f:01:80:9e:bf:37:0f:f6:
                    89:be:fd:36:76:59:76:b4:f6:78:aa:ce:f1:cf:7e:
                    42:d4:3e:ea:f6:f7:79:34:27:5d:7e:f3:23:02:c9:
                    b5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:93:90:53:E6:42:18:6E:EF:A0:6E:23:AF:AD:61:CF:FD:A9:B1:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a743b71-5d3f-31ee-9bcd-240a74737712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:198:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:65:d4:50:db:02:2f:5c:58:f1:7e:c2:f7:2d:82:d3:c4:ee:
         1a:b8:24:57:7c:44:45:59:3d:df:4e:bf:f6:38:e3:77:9c:66:
         39:de:39:93:78:a8:d7:e3:c3:57:85:59:7e:92:e9:c3:2f:74:
         e4:92:b2:c3:dc:b8:99:3e:c4:27:4d:c0:be:ad:88:a9:5d:18:
         e7:4c:0b:52:70:b8:cb:0c:95:b0:44:41:95:b1:9b:aa:4e:1b:
         a3:0e:2f:bb:49:0e:4b:4c:d8:3b:b5:2a:47:a3:ad:6e:56:86:
         75:b1:03:18:48:45:39:78:50:fe:5a:bd:6e:a5:31:a2:34:f8:
         99:44:27:d3:13:67:3d:49:ed:21:97:d7:97:eb:04:73:78:9e:
         7c:86:40:af:c2:7e:a5:bb:40:fc:a4:f4:30:63:fa:e4:15:62:
         2b:44:67:43:0e:f3:b3:96:0c:d3:67:dc:d1:05:b1:33:d7:11:
         48:2e:a8:f2:d6:14:d0:5d:69:c6:68:3e:ac:4f:dc:65:8a:f9:
         4c:78:c5:7c:92:6b:90:e5:a2:ae:7c:75:9a:14:11:d5:59:d2:
         f9:93:c6:31:a5:03:b0:76:4c:32:b5:d4:59:5c:08:a2:a4:b1:
         19:40:2a:e1:b8:0c:6e:1e:66:2c:94:e1:f9:fa:69:4d:c0:db:
         04:1e:c2:bc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE42AIOZAcKwS5BLoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
ZTk5NzgyYzMtMWJiMC00Yjg5LTk1YWMtODhlMjIzYThhYjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokjCr9gn2ura17c9ssWNHDGS221eu1oaF9Oq
U0r6h6XSdO+D3K+muOdUblNRWQqU+C9K2Xk1VFaPm21IpZJvSvkhCyKtDtLG0D9s
g+MsVNu/etB8l0juIzIhKY2DAlOex/b991yg/6e48ynYCRZdSLgcpwKK0izJH0am
az38hjT8+IkaYctwZ/1+69I/XvI4eu6qHEDo3Ao9ANuJydEBRvXcOaAYoCQqsjB8
HGJBAQr9IFlZE/5i0tviZnZpw+NASj5QuWrHeLfzni7HbuW2oiU32wKrzWNLDwGA
nr83D/aJvv02dll2tPZ4qs7xz35C1D7q9vd5NCddfvMjAsm1lwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIaTkFPmQhhu76BuI6+tYc/9qbGiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E3NDNiNzEtNWQzZi0z
MWVlLTliY2QtMjQwYTc0NzM3NzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEBmMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEArWXUUNsCL1xY8X7C9y2C08TuGrgkV3xERVk9306/9jjjd5xmOd45
k3io1+PDV4VZfpLpwy905JKyw9y4mT7EJ03Avq2IqV0Y50wLUnC4ywyVsERBlbGb
qk4bow4vu0kOS0zYO7UqR6OtblaGdbEDGEhFOXhQ/lq9bqUxojT4mUQn0xNnPUnt
IZfXl+sEc3iefIZAr8J+pbtA/KT0MGP65BViK0RnQw7zs5YM02fc0QWxM9cRSC6o
8tYU0F1pxmg+rE/cZYr5THjFfJJrkOWirnx1mhQR1VnS+ZPGMaUDsHZMMrXUWVwI
oqSxGUAq4bgMbh5mLJTh+fppTcDbBB7CvA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:46 2026 by rpki-client