Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/961139e6-dd98-338b-a8fd-2649fd896734.roa
File:                     961139e6-dd98-338b-a8fd-2649fd896734.roa (raw, json)
Hash identifier:          Du47gCUAkKknB+89wzcaQ09DvmN1jGryB7d5mddyX7I=
Subject key identifier:   BA:1B:AE:B4:CB:D3:C3:6F:05:FD:A3:CF:33:64:35:E2:4D:9A:4B:47
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7AA3D85FD71E7F8914A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/961139e6-dd98-338b-a8fd-2649fd896734.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        2603:20c8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:aa:3d:85:fd:71:e7:f8:91:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=86cba1b1-e0a6-44a4-ae3b-3d440a726284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:48:b5:f6:4b:c2:64:23:b3:b3:e7:e1:9d:
                    3c:c4:0f:b5:d9:68:f4:1a:c2:65:3c:e0:41:86:9e:
                    3c:18:a9:f4:e4:b7:b8:f4:8c:27:fc:61:21:9a:b1:
                    f9:08:4a:dd:36:a0:32:d6:77:b0:b3:b3:8c:cd:70:
                    a2:e5:99:0c:d7:55:03:88:84:6d:3a:50:96:16:3f:
                    ed:85:8b:d1:36:c5:b4:aa:9a:b3:e0:61:8e:59:17:
                    9f:0b:2e:07:6a:65:0d:c2:0d:b4:de:59:24:80:7c:
                    65:90:c4:61:d3:fe:ae:88:ef:75:3b:a1:8e:e8:95:
                    c6:ce:58:36:ab:b9:9e:7a:21:37:10:5a:f8:6b:fa:
                    50:ae:8f:4e:97:0a:34:2a:4b:c0:4e:07:70:32:9a:
                    f2:92:80:86:22:9c:22:3a:4c:92:b6:e9:bd:93:40:
                    38:31:3b:8c:f9:20:76:1c:6e:53:53:54:6b:e4:66:
                    c8:54:45:a4:2e:d6:ad:fe:91:fe:16:5c:5d:df:00:
                    4a:6e:e1:bf:3f:c8:10:2c:95:df:99:27:52:8a:13:
                    ea:ec:ff:ae:37:1a:98:77:fb:64:1c:1a:69:d4:4d:
                    10:64:44:7b:cc:00:fc:2b:95:a3:1d:47:0d:e4:24:
                    df:eb:c6:bb:a3:91:76:bb:78:7f:7d:f0:52:e5:72:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:AE:B4:CB:D3:C3:6F:05:FD:A3:CF:33:64:35:E2:4D:9A:4B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/961139e6-dd98-338b-a8fd-2649fd896734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20c8:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:82:35:83:23:cc:9f:85:e3:b3:9d:28:a7:93:69:e1:18:2e:
         96:22:20:db:2b:1d:91:1a:04:36:49:13:b3:0d:95:32:ad:bf:
         4a:de:37:50:f5:84:c2:37:c5:55:3c:00:ff:47:bb:ab:48:93:
         9d:91:5a:e8:ff:69:71:a2:a5:a3:6b:e4:93:67:67:cb:35:26:
         1f:ac:1b:11:07:1f:8a:b1:97:22:b4:9e:32:f7:24:a6:e7:8b:
         fb:6b:ed:0d:0c:10:3a:63:24:10:12:50:27:1f:04:6d:fc:93:
         b9:47:c1:ad:7e:71:72:48:1a:ff:20:1c:ab:48:be:d6:16:7c:
         46:03:2f:ff:d3:f9:9d:ce:ae:4c:da:ac:15:aa:42:0e:51:f6:
         ef:96:70:5f:81:c4:cf:87:b0:08:38:5a:36:5e:61:f4:81:91:
         f7:6a:94:40:4d:1d:a9:13:1f:3d:4c:8a:7e:a8:0a:72:ef:b3:
         33:05:92:d5:3f:b6:2c:d4:82:20:ff:4f:ce:e4:35:b9:a1:c3:
         7c:e7:26:38:ae:ed:d5:dd:2b:ab:01:f2:bd:b3:73:09:6b:d5:
         18:28:bb:bf:9c:c9:d8:b3:f8:1f:30:8e:bf:81:3e:9b:c7:c6:
         27:03:21:87:cf:e8:ba:eb:d2:23:9c:3a:6c:ce:68:ad:d6:bf:
         9c:a0:fd:e9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8Dp6o9hf1x5/iRSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
ODZjYmExYjEtZTBhNi00NGE0LWFlM2ItM2Q0NDBhNzI2Mjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA5ItfZLwmQjs7Pn4Z08xA+12Wj0GsJlPOBB
hp48GKn05Le49Iwn/GEhmrH5CErdNqAy1news7OMzXCi5ZkM11UDiIRtOlCWFj/t
hYvRNsW0qpqz4GGOWRefCy4HamUNwg203lkkgHxlkMRh0/6uiO91O6GO6JXGzlg2
q7meeiE3EFr4a/pQro9Olwo0KkvATgdwMprykoCGIpwiOkyStum9k0A4MTuM+SB2
HG5TU1Rr5GbIVEWkLtat/pH+Flxd3wBKbuG/P8gQLJXfmSdSihPq7P+uNxqYd/tk
HBpp1E0QZER7zAD8K5WjHUcN5CTf68a7o5F2u3h/ffBS5XJfMQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLobrrTL08NvBf2jzzNkNeJNmktHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTYxMTM5ZTYtZGQ5OC0z
MzhiLWE4ZmQtMjY0OWZkODk2NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgyEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVoI1gyPMn4Xjs50op5Np4RguliIg2ysdkRoENkkTsw2VMq2/St43
UPWEwjfFVTwA/0e7q0iTnZFa6P9pcaKlo2vkk2dnyzUmH6wbEQcfirGXIrSeMvck
pueL+2vtDQwQOmMkEBJQJx8EbfyTuUfBrX5xckga/yAcq0i+1hZ8RgMv/9P5nc6u
TNqsFapCDlH275ZwX4HEz4ewCDhaNl5h9IGR92qUQE0dqRMfPUyKfqgKcu+zMwWS
1T+2LNSCIP9PzuQ1uaHDfOcmOK7t1d0rqwHyvbNzCWvVGCi7v5zJ2LP4HzCOv4E+
m8fGJwMhh8/ouuvSI5w6bM5orda/nKD96Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 23:19:31 2026 by rpki-client