Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72c59529-a0e7-3055-b43a-79727525cd8b.roa
File:                     72c59529-a0e7-3055-b43a-79727525cd8b.roa (raw, json)
Hash identifier:          DvAeWaFgRPt2ALmeDUnVXaII9tBxWscq9xJiI9NyZ2Q=
Subject key identifier:   EE:65:96:DD:42:9B:71:10:77:33:71:3D:29:65:2A:58:B7:A7:E9:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C2F80F6CF7679BDF60740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72c59529-a0e7-3055-b43a-79727525cd8b.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7725
IP address blocks:        2603:20c4:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:2f:80:f6:cf:76:79:bd:f6:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=1ad850c9-5bf9-4977-b6b2-83fad3130418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5b:8a:0d:bd:92:2d:5c:2e:95:f6:a6:a2:a9:
                    e7:dc:90:61:3b:6c:b6:86:be:37:e9:8e:b3:39:da:
                    ef:05:69:09:23:65:e9:90:b7:69:52:81:70:ee:ce:
                    25:0d:d8:bc:95:ea:c1:d0:50:a8:08:c6:06:95:05:
                    71:9b:06:cb:87:0e:c5:03:ea:61:d1:eb:48:bc:2c:
                    42:36:28:e6:99:74:9b:30:10:52:29:3b:89:47:0b:
                    b4:71:15:32:c2:92:23:ba:52:bf:fb:1a:20:07:7a:
                    4f:a4:fe:9a:cf:45:ab:a6:fc:eb:ec:66:b3:ea:d4:
                    96:84:46:1a:73:bd:1a:2e:d7:6a:b6:ad:21:34:ec:
                    41:70:de:5b:e8:bb:ae:ac:de:69:87:4e:38:ac:99:
                    a6:59:71:0c:17:09:f4:8c:e5:ad:64:13:21:17:87:
                    86:8f:33:b5:f1:17:68:65:9d:5f:62:f9:32:55:e9:
                    ac:13:29:6d:09:80:b0:f4:71:4d:1e:c0:a3:69:e9:
                    e7:cb:56:42:41:ac:0c:2a:fa:af:fd:9d:16:3f:dd:
                    ca:0b:f8:81:10:6b:4b:d1:cf:16:32:db:a0:74:27:
                    89:b4:16:2b:9f:b6:e3:ab:00:a0:7f:4d:84:1e:91:
                    a1:ef:ac:b8:ae:96:09:7a:91:e2:94:6c:6a:2f:87:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:96:DD:42:9B:71:10:77:33:71:3D:29:65:2A:58:B7:A7:E9:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72c59529-a0e7-3055-b43a-79727525cd8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20c4:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:69:79:98:21:af:e5:2c:5a:5d:d3:ed:12:a8:a2:bb:93:
         3e:36:53:94:f8:9e:fd:23:8b:46:64:7d:48:2e:04:1b:d8:56:
         96:d7:c8:81:ec:89:c0:bf:ff:07:67:ea:84:3b:cd:90:82:44:
         32:15:e8:13:ff:e1:4e:82:c2:5c:cc:3e:d5:b8:4d:88:a1:4c:
         aa:da:41:9d:41:31:1c:d7:53:c3:7a:07:75:ac:fe:4e:66:17:
         32:28:69:d5:fc:a0:9f:6c:70:98:e4:5a:f8:aa:c0:65:af:16:
         c4:4e:f0:a3:60:fe:a0:4d:17:b4:bd:fe:b3:42:9a:eb:c0:7e:
         66:b9:43:cf:72:9a:3b:74:fb:bf:82:6b:3c:1d:02:59:11:df:
         ef:67:71:9d:72:81:41:8c:52:4b:5d:31:ca:dc:5e:67:57:95:
         f2:8c:4e:08:0e:d4:15:a3:c9:ef:f6:ec:d8:f5:71:4b:18:b8:
         14:e6:68:05:71:c8:c4:78:2c:9b:2a:b9:5e:65:10:7c:cb:45:
         ea:df:92:e9:88:cb:36:ee:28:f2:80:9e:89:0f:fa:17:6f:9f:
         42:00:a0:24:2b:6b:30:65:53:ec:2d:8c:dc:fd:67:9a:6a:63:
         a4:6d:3f:99:81:94:47:89:6c:b9:7d:fd:55:6d:f0:ad:9c:23:
         ac:2a:74:ca
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkgPC+A9s92eb32B0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
MWFkODUwYzktNWJmOS00OTc3LWI2YjItODNmYWQzMTMwNDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1luKDb2SLVwulfamoqnn3JBhO2y2hr436Y6z
OdrvBWkJI2XpkLdpUoFw7s4lDdi8lerB0FCoCMYGlQVxmwbLhw7FA+ph0etIvCxC
NijmmXSbMBBSKTuJRwu0cRUywpIjulK/+xogB3pPpP6az0Wrpvzr7Gaz6tSWhEYa
c70aLtdqtq0hNOxBcN5b6LuurN5ph044rJmmWXEMFwn0jOWtZBMhF4eGjzO18Rdo
ZZ1fYvkyVemsEyltCYCw9HFNHsCjaenny1ZCQawMKvqv/Z0WP93KC/iBEGtL0c8W
MtugdCeJtBYrn7bjqwCgf02EHpGh76y4rpYJepHilGxqL4d8SwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFO5llt1Cm3EQdzNxPSllKli3p+n3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzJjNTk1MjktYTBlNy0z
MDU1LWI0M2EtNzk3Mjc1MjVjZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgxEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARJxpeZghr+UsWl3T7RKooruTPjZTlPie/SOLRmR9SC4EG9hWltfI
geyJwL//B2fqhDvNkIJEMhXoE//hToLCXMw+1bhNiKFMqtpBnUExHNdTw3oHdaz+
TmYXMihp1fygn2xwmORa+KrAZa8WxE7wo2D+oE0XtL3+s0Ka68B+ZrlDz3KaO3T7
v4JrPB0CWRHf72dxnXKBQYxSS10xytxeZ1eV8oxOCA7UFaPJ7/bs2PVxSxi4FOZo
BXHIxHgsmyq5XmUQfMtF6t+S6YjLNu4o8oCeiQ/6F2+fQgCgJCtrMGVT7C2M3P1n
mmpjpG0/mYGUR4lsuX39VW3wrZwjrCp0yg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:33:55 2025 by rpki-client