Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a9c13d3-fee6-3dad-bb80-d3a69766bcad.roa
File:                     1a9c13d3-fee6-3dad-bb80-d3a69766bcad.roa (raw, json)
Hash identifier:          fiZx0+uEmqF165JEb+WtsJOXRmehfQFL2jPX3NsWK9A=
Subject key identifier:   33:CF:7D:3C:9D:FC:F5:8B:E4:F7:12:7F:42:BC:02:8E:0A:D1:11:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C0607E43C2758B3E201F640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a9c13d3-fee6-3dad-bb80-d3a69766bcad.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        2601:42::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:07:e4:3c:27:58:b3:e2:01:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3928e634-5d01-4a48-b0d3-027b57ad1a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:d2:15:ce:88:3c:e8:07:80:09:ad:7d:c2:
                    b4:9d:a4:b6:c0:50:6f:fe:57:83:5f:8c:94:ee:60:
                    2a:28:96:72:79:5f:45:ae:4d:d5:af:22:bd:49:ce:
                    0a:5b:64:b0:af:d2:42:57:15:be:f3:dd:d9:a3:82:
                    ec:0a:60:ef:0f:d4:c0:3b:66:4b:48:6c:a5:cb:75:
                    68:1b:1e:d8:28:5d:5f:ed:9d:99:9e:4b:8d:86:b0:
                    2d:69:9e:49:37:a1:dc:df:ff:ea:77:88:3c:6f:b6:
                    fc:cb:22:b8:e9:c1:f0:cd:7b:b2:45:95:cf:d5:a6:
                    6f:72:06:f3:05:35:0e:1d:db:a9:f2:d1:19:da:c3:
                    90:76:f3:c6:2f:87:2c:ac:44:ae:7b:0a:52:fc:d9:
                    7b:59:6c:54:ca:8d:a3:77:b5:9a:eb:9e:1b:5a:35:
                    af:0c:67:c9:ca:a4:78:66:ae:f3:4d:06:10:bb:db:
                    97:f1:cc:c5:52:18:d7:70:18:3e:f2:57:d9:db:45:
                    8f:10:b9:ec:45:95:a0:67:a2:f6:d8:a5:18:de:29:
                    1e:42:14:4e:ce:9a:29:10:04:8d:31:92:39:fb:98:
                    b1:83:e7:ef:b0:f9:8c:eb:6e:0f:80:13:82:7c:47:
                    44:66:ac:0a:35:a7:6c:dd:3f:e5:27:92:2f:40:96:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CF:7D:3C:9D:FC:F5:8B:E4:F7:12:7F:42:BC:02:8E:0A:D1:11:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a9c13d3-fee6-3dad-bb80-d3a69766bcad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:42::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:67:cc:1f:27:32:00:75:3b:e7:9b:3c:08:68:91:ea:fb:bd:
         ff:47:ec:8b:be:0e:b9:2e:b0:86:63:9d:e0:57:fa:3d:6f:b7:
         30:a6:9b:2f:f2:8a:40:25:a5:6f:c1:74:e6:89:dd:86:c8:62:
         fe:fd:9c:75:06:0d:33:9a:fe:0c:e4:6d:63:74:14:0d:72:6e:
         50:37:ab:67:73:cb:1a:c4:a3:6a:eb:84:23:31:38:b9:fc:7e:
         f0:c8:38:22:dc:ef:ab:5a:86:d3:f9:1f:78:f0:7e:52:00:ed:
         b0:3f:8c:82:04:1d:d9:11:81:7f:b3:da:19:b7:c3:75:9e:24:
         0e:13:eb:00:f2:2b:82:e0:6c:02:63:8b:03:4a:fe:02:09:bf:
         98:9b:5c:7a:1a:f2:83:41:f2:59:a5:aa:1d:f6:35:48:f4:10:
         dd:0e:e4:71:ab:7b:84:1a:dc:24:91:8a:98:f8:9e:fd:7f:f4:
         8c:4d:2b:5b:60:ec:c2:7a:d8:30:2b:0f:7a:dd:01:b2:35:92:
         41:c2:85:e1:72:b1:6d:4d:5d:dc:a8:72:0e:8a:33:8a:01:5f:
         e8:94:76:9d:d7:d3:57:c7:fd:e2:1b:ba:d0:46:33:de:92:9e:
         70:47:f4:74:67:95:f6:03:d0:23:69:0a:31:d1:46:9e:5e:e4:
         68:ee:d5:6f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoMBgfkPCdYs+IB9kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MzkyOGU2MzQtNWQwMS00YTQ4LWIwZDMtMDI3YjU3YWQxYTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlnSFc6IPOgHgAmtfcK0naS2wFBv/leDX4yU
7mAqKJZyeV9Frk3VryK9Sc4KW2Swr9JCVxW+893Zo4LsCmDvD9TAO2ZLSGyly3Vo
Gx7YKF1f7Z2ZnkuNhrAtaZ5JN6Hc3//qd4g8b7b8yyK46cHwzXuyRZXP1aZvcgbz
BTUOHdup8tEZ2sOQdvPGL4csrESuewpS/Nl7WWxUyo2jd7Wa654bWjWvDGfJyqR4
Zq7zTQYQu9uX8czFUhjXcBg+8lfZ20WPELnsRZWgZ6L22KUY3ikeQhROzpopEASN
MZI5+5ixg+fvsPmM624PgBOCfEdEZqwKNads3T/lJ5IvQJa52QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDPPfTyd/PWL5PcSf0K8Ao4K0RHuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWE5YzEzZDMtZmVlNi0z
ZGFkLWJiODAtZDNhNjk3NjZiY2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAQgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgmfMHycyAHU755s8CGiR6vu9/0fsi74OuS6whmOd4Ff6PW+3MKab
L/KKQCWlb8F05ondhshi/v2cdQYNM5r+DORtY3QUDXJuUDerZ3PLGsSjauuEIzE4
ufx+8Mg4Itzvq1qG0/kfePB+UgDtsD+MggQd2RGBf7PaGbfDdZ4kDhPrAPIrguBs
AmOLA0r+Agm/mJtcehryg0HyWaWqHfY1SPQQ3Q7kcat7hBrcJJGKmPie/X/0jE0r
W2DswnrYMCsPet0BsjWSQcKF4XKxbU1d3KhyDoozigFf6JR2ndfTV8f94hu60EYz
3pKecEf0dGeV9gPQI2kKMdFGnl7kaO7Vbw==
-----END CERTIFICATE-----
Generated at Wed Jun 4 23:06:58 2025 by rpki-client