Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15b67ba5-07d5-326a-9257-a8f87ec147ce.roa
File:                     15b67ba5-07d5-326a-9257-a8f87ec147ce.roa (raw, json)
Hash identifier:          BbSUmmR1LUjMKptzRAmgiq4AqiUA6X8xW1FdrNoMWVk=
Subject key identifier:   E9:AB:80:1A:01:E6:15:B8:6E:8F:9E:8C:A9:C6:68:98:A5:EB:D7:31
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75A17B7405C818C5B93440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15b67ba5-07d5-326a-9257-a8f87ec147ce.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        2603:20cf:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:a1:7b:74:05:c8:18:c5:b9:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=d827276a-2f5f-4422-bd73-aa22d8e643d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:81:03:96:91:a1:71:dd:43:cc:77:62:42:81:
                    81:b2:70:84:9c:e8:56:bb:61:e1:49:64:60:25:1a:
                    d2:8c:e9:f5:da:e4:e1:c3:d3:61:26:e5:02:c9:98:
                    a1:46:45:07:f3:a1:87:ce:d9:9c:04:77:c4:ab:05:
                    63:36:dc:9e:6e:96:00:5d:e5:93:38:c0:ce:60:7b:
                    f2:b7:f0:9e:e2:40:f3:28:d6:d9:42:21:1f:0d:6b:
                    8f:65:0a:47:fd:32:b6:8d:40:28:44:c8:bc:80:81:
                    54:27:f7:c6:bd:68:ce:05:4f:36:72:5f:b0:4d:f6:
                    ca:f7:e3:aa:e1:a2:3b:0a:c7:ba:c3:bc:0f:31:59:
                    c3:de:f4:96:cd:51:24:3f:bf:62:26:70:49:83:f2:
                    c4:32:1c:e4:65:eb:f8:c7:06:74:ae:36:d4:46:60:
                    f7:2f:e1:74:85:a1:09:d8:96:28:4f:91:9d:c1:33:
                    a4:78:48:aa:a8:2f:e2:aa:41:4e:da:1e:03:5c:1e:
                    15:81:42:51:95:46:6f:91:9e:76:75:24:ef:5a:c3:
                    1f:18:b6:a3:95:41:bc:e8:e9:1c:bf:d4:03:e3:9e:
                    c5:bf:ef:59:cc:a3:8c:a9:28:6d:8f:5e:c7:ac:d8:
                    9d:2d:78:47:11:89:67:bf:1d:a9:68:ab:6a:ee:27:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AB:80:1A:01:E6:15:B8:6E:8F:9E:8C:A9:C6:68:98:A5:EB:D7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15b67ba5-07d5-326a-9257-a8f87ec147ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20cf:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3c:93:27:2f:af:83:a6:81:54:90:bb:02:62:1d:99:63:85:
         29:63:63:84:52:b5:87:2e:79:df:fb:fc:31:8b:7f:fd:56:c3:
         a6:51:92:40:18:ac:19:d3:30:cc:33:d1:1b:4e:ba:9f:80:38:
         a1:54:5f:de:d2:bc:ec:fe:fe:4a:80:14:a9:26:6c:9d:51:74:
         29:69:23:4a:4f:d6:4b:3e:7e:2a:c1:e7:7d:ee:c9:43:b5:da:
         d1:79:3b:81:4f:e3:c4:db:9e:b9:39:6d:92:69:24:eb:91:4e:
         28:b7:6c:a4:26:82:6b:1d:66:3e:fb:71:f4:a4:33:b9:c0:89:
         e5:d6:35:e9:3e:15:22:ae:3f:03:9c:44:a9:83:43:5a:95:a9:
         54:cf:20:a1:fe:4d:03:d0:d5:d1:10:1a:b2:e2:93:f1:41:43:
         d7:75:0c:a2:c2:77:8b:80:4c:0e:bb:6a:f5:74:c8:95:c6:1d:
         40:41:0e:3d:f8:cc:d6:36:42:3a:1d:15:7e:f1:e3:b1:fb:c1:
         c8:82:d1:58:8d:7b:8f:20:ca:79:f9:fd:f1:28:09:bf:ca:01:
         f9:3b:7f:48:97:8d:33:b4:46:19:a4:b7:51:d6:63:08:d6:86:
         e3:21:d7:18:88:62:b5:4a:5e:f9:b8:99:5c:db:ee:22:81:6b:
         de:cf:4d:d1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn/daF7dAXIGMW5NEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
ZDgyNzI3NmEtMmY1Zi00NDIyLWJkNzMtYWEyMmQ4ZTY0M2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIEDlpGhcd1DzHdiQoGBsnCEnOhWu2HhSWRg
JRrSjOn12uThw9NhJuUCyZihRkUH86GHztmcBHfEqwVjNtyebpYAXeWTOMDOYHvy
t/Ce4kDzKNbZQiEfDWuPZQpH/TK2jUAoRMi8gIFUJ/fGvWjOBU82cl+wTfbK9+Oq
4aI7Cse6w7wPMVnD3vSWzVEkP79iJnBJg/LEMhzkZev4xwZ0rjbURmD3L+F0haEJ
2JYoT5GdwTOkeEiqqC/iqkFO2h4DXB4VgUJRlUZvkZ52dSTvWsMfGLajlUG86Okc
v9QD457Fv+9ZzKOMqShtj17HrNidLXhHEYlnvx2paKtq7icv7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOmrgBoB5hW4bo+ejKnGaJil69cxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTViNjdiYTUtMDdkNS0z
MjZhLTkyNTctYThmODdlYzE0N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgz4Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALDyTJy+vg6aBVJC7AmIdmWOFKWNjhFK1hy553/v8MYt//VbDplGS
QBisGdMwzDPRG066n4A4oVRf3tK87P7+SoAUqSZsnVF0KWkjSk/WSz5+KsHnfe7J
Q7Xa0Xk7gU/jxNueuTltkmkk65FOKLdspCaCax1mPvtx9KQzucCJ5dY16T4VIq4/
A5xEqYNDWpWpVM8gof5NA9DV0RAasuKT8UFD13UMosJ3i4BMDrtq9XTIlcYdQEEO
PfjM1jZCOh0VfvHjsfvByILRWI17jyDKefn98SgJv8oB+Tt/SJeNM7RGGaS3UdZj
CNaG4yHXGIhitUpe+biZXNvuIoFr3s9N0Q==
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:02:50 2025 by rpki-client