Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a83b74c-b089-30a1-ae7b-be75fdb1b612.roa
File:                     6a83b74c-b089-30a1-ae7b-be75fdb1b612.roa (raw, json)
Hash identifier:          FX6DtTUAQ9gT86Oz3wZMAtGdq92cZPcN+n9cRT2m7P4=
Subject key identifier:   8F:41:78:30:B4:8C:4A:AE:C9:25:00:AC:B7:73:C1:AE:A2:CF:55:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0B3C3614C1437EB504C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a83b74c-b089-30a1-ae7b-be75fdb1b612.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        2603:2045:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:b3:c3:61:4c:14:37:eb:50:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=b960956e-63a4-41b3-9ace-57c8f4e8c645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:d3:16:3c:9e:29:e4:37:c4:16:d8:e3:42:
                    63:75:8b:ba:03:01:21:51:0f:4e:32:f2:e0:1c:53:
                    d7:1e:96:23:20:c1:51:29:ee:e9:6a:48:76:a2:f4:
                    71:e5:26:fa:b0:7f:70:c0:49:cb:2b:84:5f:8c:f4:
                    10:fb:6d:d2:6c:82:8a:d3:88:67:5c:1a:ac:e4:98:
                    3b:5a:3e:52:c5:fe:e8:1a:97:33:62:b5:6f:d7:cd:
                    71:bc:1a:73:d5:82:48:26:34:b4:d6:0c:b8:23:58:
                    ab:98:0d:d0:11:cb:7f:dd:27:8f:71:e4:c4:67:c2:
                    ed:76:5f:81:02:9c:54:48:e1:12:08:7a:b3:63:f0:
                    b2:dc:0a:41:73:fa:18:bd:49:cd:f1:a9:2c:b8:fa:
                    56:3d:7a:6c:7e:38:98:a6:23:bf:ca:dd:78:33:42:
                    41:8d:4f:67:de:05:2e:ef:45:a9:62:f8:46:40:5a:
                    ba:d6:40:0c:69:06:b9:fa:8b:92:d9:b7:ee:20:61:
                    6c:bb:00:9e:ea:76:90:2b:14:db:85:f6:f9:41:7b:
                    1c:d4:6e:62:52:61:be:2e:ee:38:17:93:a6:65:44:
                    f4:ba:1e:49:77:2d:4c:ba:14:a2:af:00:93:00:97:
                    87:7a:bc:04:30:7c:cb:0a:df:6f:b7:38:2c:8c:59:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:41:78:30:B4:8C:4A:AE:C9:25:00:AC:B7:73:C1:AE:A2:CF:55:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a83b74c-b089-30a1-ae7b-be75fdb1b612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2045:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:35:56:17:3e:7b:74:eb:5a:c1:bf:d6:31:fe:10:78:51:1c:
         24:82:30:23:5d:a8:74:42:b2:17:88:8f:8c:7d:a3:38:2b:46:
         dd:94:a1:87:30:b6:1c:d9:1f:b4:86:f5:0e:02:e0:62:60:c3:
         e4:f1:dc:79:2f:b9:49:08:55:50:a8:4f:88:49:f6:4f:c5:4d:
         9f:e0:9d:b8:6c:74:75:d1:bb:73:4e:5a:df:35:ad:fb:b0:b1:
         84:91:ac:9b:1d:aa:61:79:c4:af:76:bb:c6:0f:e0:57:03:f9:
         b2:0f:c8:46:0b:30:d5:a5:83:4d:c7:bd:a5:04:97:c3:df:0e:
         61:15:95:86:72:02:16:29:1c:be:07:ca:4f:50:2c:7e:f3:a7:
         f7:79:36:76:e3:c4:bc:6a:ec:ab:4a:bb:67:37:9b:20:4b:41:
         3d:34:54:68:43:3a:0d:d0:07:72:c1:66:7a:da:32:b8:d7:41:
         e4:c8:ca:27:b8:41:c8:eb:b7:8b:47:e9:e6:97:2a:81:3e:f1:
         f9:e3:9f:99:5b:bd:22:bd:89:09:5c:13:44:48:ea:95:12:9b:
         ff:89:21:5b:85:e6:a7:ef:14:60:f7:f5:d7:5e:b0:76:10:11:
         01:0d:53:6c:89:eb:e9:1e:eb:21:18:56:97:aa:2d:44:59:7b:
         89:d1:5d:ab
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkssLPDYUwUN+tQTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Yjk2MDk1NmUtNjNhNC00MWIzLTlhY2UtNTdjOGY0ZThjNjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP/TFjyeKeQ3xBbY40JjdYu6AwEhUQ9OMvLg
HFPXHpYjIMFRKe7pakh2ovRx5Sb6sH9wwEnLK4RfjPQQ+23SbIKK04hnXBqs5Jg7
Wj5Sxf7oGpczYrVv181xvBpz1YJIJjS01gy4I1irmA3QEct/3SePceTEZ8Ltdl+B
ApxUSOESCHqzY/Cy3ApBc/oYvUnN8aksuPpWPXpsfjiYpiO/yt14M0JBjU9n3gUu
70WpYvhGQFq61kAMaQa5+ouS2bfuIGFsuwCe6naQKxTbhfb5QXsc1G5iUmG+Lu44
F5OmZUT0uh5Jdy1MuhSirwCTAJeHerwEMHzLCt9vtzgsjFl7ZwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI9BeDC0jEquySUArLdzwa6iz1VlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmE4M2I3NGMtYjA4OS0z
MGExLWFlN2ItYmU3NWZkYjFiNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgRYAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAETVWFz57dOtawb/WMf4QeFEcJIIwI12odEKyF4iPjH2jOCtG3ZSh
hzC2HNkftIb1DgLgYmDD5PHceS+5SQhVUKhPiEn2T8VNn+CduGx0ddG7c05a3zWt
+7CxhJGsmx2qYXnEr3a7xg/gVwP5sg/IRgsw1aWDTce9pQSXw98OYRWVhnICFikc
vgfKT1AsfvOn93k2duPEvGrsq0q7ZzebIEtBPTRUaEM6DdAHcsFmetoyuNdB5MjK
J7hByOu3i0fp5pcqgT7x+eOfmVu9Ir2JCVwTREjqlRKb/4khW4Xmp+8UYPf1116w
dhARAQ1TbInr6R7rIRhWl6otRFl7idFdqw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:13 2025 by rpki-client