Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76be84e9-0616-359a-b44a-60ab9f8c089d.roa
File:                     76be84e9-0616-359a-b44a-60ab9f8c089d.roa (raw, json)
Hash identifier:          7sXVW3UgfjBfVw4cCS5G/FhCV4U9HGrHQJNHgPQz9d8=
Subject key identifier:   05:DD:7D:99:06:18:24:02:71:9D:D3:25:A3:94:1D:34:B9:21:55:E0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C6B35E9BCBD0A60C2AC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76be84e9-0616-359a-b44a-60ab9f8c089d.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        2603:3016:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:6b:35:e9:bc:bd:0a:60:c2:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=ce93c907-a5e0-4df0-9433-91ad1347ddae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:73:51:55:ee:b5:de:d7:fa:82:d7:9b:7a:a3:
                    e9:f3:b2:47:8a:19:ff:c5:7d:58:cc:49:f4:ef:72:
                    56:3b:01:47:88:2f:36:fd:10:8a:f8:dc:c4:f7:23:
                    d7:d6:4c:a7:3b:e2:ba:07:4e:0e:7b:c0:79:1b:0b:
                    9a:c6:5e:84:d8:da:aa:f9:d4:15:3c:87:3e:91:e2:
                    de:40:b6:2f:15:27:3d:e0:0f:f2:e2:07:cd:10:3f:
                    c1:74:cc:40:e2:4e:d6:4b:54:e5:38:65:d2:5e:e0:
                    a0:ee:91:f7:c6:11:9c:f8:99:f1:a6:cd:7a:be:17:
                    8f:1d:5c:b1:04:0c:a1:71:17:d5:7b:62:87:98:28:
                    40:29:3e:0c:af:9a:11:43:29:92:e6:2a:15:63:69:
                    05:1f:31:8e:34:67:01:70:c0:00:2c:cd:a0:27:bb:
                    db:84:65:33:db:63:d2:51:53:60:57:08:90:0b:51:
                    34:b9:cb:bd:30:b7:5b:8f:5c:d5:41:2f:54:d6:11:
                    53:3c:fd:b1:92:69:42:49:95:61:c4:93:77:e4:04:
                    a9:c4:01:2d:49:fd:2d:4f:e9:6e:6b:20:95:d3:c1:
                    57:1d:6c:80:12:bf:6c:d8:2b:9d:97:05:7f:15:89:
                    5e:12:73:bd:51:a2:9e:7e:59:46:78:01:de:8e:96:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DD:7D:99:06:18:24:02:71:9D:D3:25:A3:94:1D:34:B9:21:55:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76be84e9-0616-359a-b44a-60ab9f8c089d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3016:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:1e:c4:2a:bb:1e:ba:a4:cc:f0:b1:f1:d9:47:54:3f:93:21:
         ba:a8:6b:6e:8d:a7:f6:a5:ed:2f:a9:19:27:a0:66:c9:67:7e:
         df:91:88:40:3c:f2:73:70:66:9c:40:50:a8:99:5a:eb:ca:bc:
         6e:bc:16:cf:d5:43:ec:7d:f0:fe:c8:cf:dc:c1:38:b1:20:2f:
         a4:7b:17:07:13:2f:b9:ff:a0:e8:bb:73:f4:e1:6e:d5:61:7f:
         86:b5:f3:a0:de:71:e2:62:74:f2:93:19:53:78:50:5e:43:91:
         db:f4:1a:b2:73:0e:68:ed:5c:b2:fe:6f:8b:2b:80:49:47:1a:
         3a:07:47:85:06:eb:d2:48:57:90:38:31:55:06:01:45:7b:b2:
         13:49:17:e0:7b:04:a3:0a:f1:f5:90:41:89:80:51:b4:1e:2b:
         67:a9:e1:b7:d0:d6:ff:46:13:28:26:9b:43:ae:8b:ac:36:a9:
         ca:df:87:36:36:88:c0:35:78:96:1b:ff:82:ba:20:47:ae:24:
         f2:51:4c:d7:57:1c:21:47:b3:5c:d7:e1:e4:89:3e:9e:b2:f2:
         86:3b:17:cd:84:60:2f:00:db:43:73:49:91:2d:d8:44:5f:65:
         3e:e6:03:0c:e6:f9:94:3e:45:c5:5a:4a:a1:ce:91:61:39:3f:
         63:5f:7a:42
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiebGs16by9CmDCrEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
Y2U5M2M5MDctYTVlMC00ZGYwLTk0MzMtOTFhZDEzNDdkZGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3NRVe613tf6gtebeqPp87JHihn/xX1YzEn0
73JWOwFHiC82/RCK+NzE9yPX1kynO+K6B04Oe8B5Gwuaxl6E2Nqq+dQVPIc+keLe
QLYvFSc94A/y4gfNED/BdMxA4k7WS1TlOGXSXuCg7pH3xhGc+Jnxps16vhePHVyx
BAyhcRfVe2KHmChAKT4Mr5oRQymS5ioVY2kFHzGONGcBcMAALM2gJ7vbhGUz22PS
UVNgVwiQC1E0ucu9MLdbj1zVQS9U1hFTPP2xkmlCSZVhxJN35ASpxAEtSf0tT+lu
ayCV08FXHWyAEr9s2CudlwV/FYleEnO9UaKefllGeAHejpan5wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAXdfZkGGCQCcZ3TJaOUHTS5IVXgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzZiZTg0ZTktMDYxNi0z
NTlhLWI0NGEtNjBhYjlmOGMwODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFgsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnh7EKrseuqTM8LHx2UdUP5Mhuqhrbo2n9qXtL6kZJ6BmyWd+35GI
QDzyc3BmnEBQqJla68q8brwWz9VD7H3w/sjP3ME4sSAvpHsXBxMvuf+g6Ltz9OFu
1WF/hrXzoN5x4mJ08pMZU3hQXkOR2/QasnMOaO1csv5viyuASUcaOgdHhQbr0khX
kDgxVQYBRXuyE0kX4HsEowrx9ZBBiYBRtB4rZ6nht9DW/0YTKCabQ66LrDapyt+H
NjaIwDV4lhv/grogR64k8lFM11ccIUezXNfh5Ik+nrLyhjsXzYRgLwDbQ3NJkS3Y
RF9lPuYDDOb5lD5FxVpKoc6RYTk/Y196Qg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:37:06 2025 by rpki-client