Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd285353-43ed-3bd3-b0ab-9b2184476171.roa
File:                     bd285353-43ed-3bd3-b0ab-9b2184476171.roa (raw, json)
Hash identifier:          hYxPNWP0nRhzpSyDdKoLrq9+bAshbW+5ug7zWYj8AMQ=
Subject key identifier:   70:14:56:72:EE:F3:7A:36:BE:9C:67:8C:60:36:7F:54:56:29:52:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD4FC6535381DEDDE6BA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd285353-43ed-3bd3-b0ab-9b2184476171.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     7016
IP address blocks:        2603:2544:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:4f:c6:53:53:81:de:dd:e6:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=32aec500-8d4f-45b1-9320-7d93641a2df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:1e:8b:ab:83:c4:9e:9f:b8:12:15:f4:dd:
                    30:1a:f3:99:46:89:fc:ac:38:86:e1:13:33:1c:28:
                    0a:47:7a:ad:5f:90:87:f2:0c:1d:ee:a7:e6:18:65:
                    23:a2:a8:ee:b3:d0:03:f0:a7:53:bf:2b:4c:90:8c:
                    f9:b5:e9:72:bc:32:b9:1f:58:82:86:26:81:47:39:
                    84:12:99:d5:80:bd:fd:fe:fa:ee:14:2d:d0:0e:cd:
                    90:e2:19:9d:71:9b:53:5c:71:f3:4b:81:ad:76:c0:
                    16:c2:4f:36:91:09:26:99:fd:64:6d:a3:f9:16:f3:
                    ac:30:39:dd:26:e0:13:c4:03:21:c2:c9:84:d3:5f:
                    6b:77:f2:c1:a3:71:b6:47:d7:18:b2:18:ff:07:6b:
                    e0:eb:20:d1:e9:51:2f:eb:ee:1f:e9:b0:8d:fb:1c:
                    43:55:ef:4a:7b:31:3b:cf:01:91:c4:46:7a:7e:fe:
                    d0:8e:da:c4:99:d7:cb:8f:cb:43:09:37:37:fc:4e:
                    70:2e:2c:de:69:54:51:c6:db:a6:04:ed:2a:3c:ed:
                    30:53:32:2a:e6:85:18:b9:5d:af:8c:cb:63:71:93:
                    ce:00:e7:34:4c:96:9f:85:e4:56:6d:47:42:e8:3e:
                    d2:1c:96:09:dd:cc:bb:20:0c:12:9d:58:1c:d3:ce:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:14:56:72:EE:F3:7A:36:BE:9C:67:8C:60:36:7F:54:56:29:52:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd285353-43ed-3bd3-b0ab-9b2184476171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2544:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:03:5c:f1:2b:83:de:c9:b7:86:33:80:07:ca:84:e3:89:63:
         cf:4f:ac:8b:40:83:96:c7:5d:ee:f4:92:35:99:b7:fd:57:68:
         e4:07:3b:87:59:0d:5a:38:31:3d:a3:9d:04:68:8a:5d:78:04:
         fe:30:0a:87:eb:c2:fb:63:e3:fd:c1:7c:70:a0:4d:47:0d:9f:
         30:6d:d0:87:81:40:2d:1b:d7:db:19:1a:e6:f6:bc:d9:c0:95:
         9b:37:fc:25:81:55:21:e5:9b:ad:9d:42:4f:f5:f1:3d:7d:f5:
         b4:86:e3:a7:8c:52:b3:5f:75:57:df:95:0e:e7:42:d2:c9:cd:
         a7:e5:3c:2b:15:ce:f2:e3:f8:d4:f0:b6:50:4c:5c:5e:1e:15:
         74:8d:31:d5:85:a6:50:97:66:c4:95:7d:d3:5a:5a:6f:cd:17:
         84:94:e4:27:68:18:dd:74:b5:a3:8c:2c:54:91:f4:d3:c3:27:
         6f:93:fc:a8:ea:bc:c6:85:3d:f1:34:90:01:24:a7:98:09:bc:
         0a:58:3c:8f:4a:48:3a:b9:fa:49:ba:c6:25:72:27:9b:fa:50:
         39:37:94:42:98:6a:e1:a5:40:2d:b3:6b:95:1e:6c:21:bd:1f:
         a9:8f:dc:e5:95:df:57:8e:1e:30:8f:82:44:a7:24:fc:2a:7d:
         58:48:44:76
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEuS3U/GU1OB3t3muoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk
MzJhZWM1MDAtOGQ0Zi00NWIxLTkzMjAtN2Q5MzY0MWEyZGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLUei6uDxJ6fuBIV9N0wGvOZRon8rDiG4RMz
HCgKR3qtX5CH8gwd7qfmGGUjoqjus9AD8KdTvytMkIz5telyvDK5H1iChiaBRzmE
EpnVgL39/vruFC3QDs2Q4hmdcZtTXHHzS4GtdsAWwk82kQkmmf1kbaP5FvOsMDnd
JuATxAMhwsmE019rd/LBo3G2R9cYshj/B2vg6yDR6VEv6+4f6bCN+xxDVe9KezE7
zwGRxEZ6fv7QjtrEmdfLj8tDCTc3/E5wLizeaVRRxtumBO0qPO0wUzIq5oUYuV2v
jMtjcZPOAOc0TJafheRWbUdC6D7SHJYJ3cy7IAwSnVgc087+7QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHAUVnLu83o2vpxnjGA2f1RWKVKOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQyODUzNTMtNDNlZC0z
YmQzLWIwYWItOWIyMTg0NDc2MTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMlRIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALgNc8SuD3sm3hjOAB8qE44ljz0+si0CDlsdd7vSSNZm3/Vdo5Ac7
h1kNWjgxPaOdBGiKXXgE/jAKh+vC+2Pj/cF8cKBNRw2fMG3Qh4FALRvX2xka5va8
2cCVmzf8JYFVIeWbrZ1CT/XxPX31tIbjp4xSs191V9+VDudC0snNp+U8KxXO8uP4
1PC2UExcXh4VdI0x1YWmUJdmxJV901pab80XhJTkJ2gY3XS1o4wsVJH008Mnb5P8
qOq8xoU98TSQASSnmAm8Clg8j0pIOrn6SbrGJXInm/pQOTeUQphq4aVALbNrlR5s
Ib0fqY/c5ZXfV44eMI+CRKck/Cp9WEhEdg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:43 2025 by rpki-client