Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c55759c-7721-3dfd-9ab1-3e0c2440f66d.roa
File:                     8c55759c-7721-3dfd-9ab1-3e0c2440f66d.roa (raw, json)
Hash identifier:          2pKL+0t69Dd8ABtsdEBmkC8141gZ9LNDcEDKgh+t48E=
Subject key identifier:   54:AE:95:E7:8B:64:F5:CC:BD:23:B2:84:3F:09:F4:B2:1E:97:E1:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C087EEC3075AC124A1AF0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c55759c-7721-3dfd-9ab1-3e0c2440f66d.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33651
IP address blocks:        2601:645:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:08:7e:ec:30:75:ac:12:4a:1a:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3384eebd-80d2-4e38-b15d-81bc89a9d91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:58:ae:b6:4f:fd:a4:ab:ea:f1:e2:70:04:
                    26:87:bd:40:be:86:e7:8f:a8:3c:c8:07:a1:06:bc:
                    b5:8b:bf:fd:74:8d:cc:60:85:a8:b2:db:ac:f5:2a:
                    e7:dd:95:33:72:7a:77:f4:20:84:15:41:39:63:12:
                    d5:69:c8:31:85:d1:a1:7d:b1:28:f7:84:c4:16:58:
                    e6:10:b0:d1:0f:32:b3:82:b7:a0:3b:2d:a6:39:94:
                    53:cc:f2:73:02:f8:36:b9:10:2d:c4:cf:a0:eb:ef:
                    f0:f7:39:64:cc:2d:36:9e:1f:75:fd:75:82:81:11:
                    89:83:0b:37:09:8d:37:3c:77:fe:78:4e:7c:a4:f1:
                    08:84:c7:04:2a:0f:18:be:25:f5:25:d9:4f:46:f7:
                    dd:e3:83:d6:bc:2a:d3:af:38:21:fe:04:7c:b6:cb:
                    b9:f9:61:d5:b7:de:d4:3c:ec:98:28:00:13:2f:91:
                    d0:76:24:86:50:3c:66:3d:2f:95:79:d1:49:37:1c:
                    2a:79:a4:58:c9:32:94:77:ff:2d:7c:db:40:ce:6e:
                    72:c0:7f:03:82:24:5e:1b:89:13:a3:10:38:93:66:
                    e7:bc:51:c1:94:a6:3e:c7:c9:82:ba:12:33:df:5c:
                    1b:52:1d:73:1b:1b:ac:55:b8:10:cf:76:fb:95:c9:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AE:95:E7:8B:64:F5:CC:BD:23:B2:84:3F:09:F4:B2:1E:97:E1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c55759c-7721-3dfd-9ab1-3e0c2440f66d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:645:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:dd:56:8c:0d:f6:93:83:6e:98:aa:9f:44:e5:50:8b:22:a5:
         c3:2b:7f:f5:90:9e:1d:8e:1e:90:ae:4d:a6:81:cf:6b:65:fa:
         8e:cb:27:92:8e:5d:3c:e1:0e:ce:1b:7f:1c:cb:df:d8:06:49:
         5b:d4:4d:20:df:ff:4e:25:9b:7c:06:52:f2:a1:8b:45:c1:1d:
         d5:26:e0:a4:6d:c2:b5:1e:fa:b8:28:e1:63:24:5f:8e:6e:4e:
         90:75:e2:76:07:a4:5d:30:56:53:36:c6:30:43:05:1d:b2:da:
         63:ae:54:e7:96:03:36:2e:9d:42:06:62:2d:98:9f:af:ea:ba:
         4a:d2:ef:6f:3b:cd:d8:7d:64:4b:3a:51:04:a5:a6:48:04:b9:
         76:0b:bc:0f:d3:aa:9e:23:bb:2a:1d:b3:03:6f:60:a1:a9:a9:
         b7:ed:42:92:44:25:84:ff:35:ff:fe:6e:79:08:a8:dc:ec:f6:
         3d:6e:e8:6d:d8:92:42:39:6a:4c:68:c5:ea:65:93:7f:5e:97:
         3f:68:7e:0b:bf:f5:c3:fa:47:81:35:1b:b4:db:2f:99:33:78:
         88:05:2f:9c:a9:c4:ae:c4:d3:32:d2:67:10:97:78:f2:d3:11:
         b8:eb:13:9b:e1:60:93:01:6a:93:8c:83:29:9a:49:71:46:bb:
         9c:af:76:84
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoMCH7sMHWsEkoa8MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MzM4NGVlYmQtODBkMi00ZTM4LWIxNWQtODFiYzg5YTlkOTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlENYrrZP/aSr6vHicAQmh71Avobnj6g8yAeh
Bry1i7/9dI3MYIWostus9Srn3ZUzcnp39CCEFUE5YxLVacgxhdGhfbEo94TEFljm
ELDRDzKzgregOy2mOZRTzPJzAvg2uRAtxM+g6+/w9zlkzC02nh91/XWCgRGJgws3
CY03PHf+eE58pPEIhMcEKg8YviX1JdlPRvfd44PWvCrTrzgh/gR8tsu5+WHVt97U
POyYKAATL5HQdiSGUDxmPS+VedFJNxwqeaRYyTKUd/8tfNtAzm5ywH8DgiReG4kT
oxA4k2bnvFHBlKY+x8mCuhIz31wbUh1zGxusVbgQz3b7lcmHPwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFSuleeLZPXMvSOyhD8J9LIel+HzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM1NTc1OWMtNzcyMS0z
ZGZkLTlhYjEtM2UwYzI0NDBmNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEGRcAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAwd1WjA32k4NumKqfROVQiyKlwyt/9ZCeHY4ekK5NpoHPa2X6jssn
ko5dPOEOzht/HMvf2AZJW9RNIN//TiWbfAZS8qGLRcEd1SbgpG3CtR76uCjhYyRf
jm5OkHXidgekXTBWUzbGMEMFHbLaY65U55YDNi6dQgZiLZifr+q6StLvbzvN2H1k
SzpRBKWmSAS5dgu8D9OqniO7Kh2zA29goampt+1CkkQlhP81//5ueQio3Oz2PW7o
bdiSQjlqTGjF6mWTf16XP2h+C7/1w/pHgTUbtNsvmTN4iAUvnKnErsTTMtJnEJd4
8tMRuOsTm+FgkwFqk4yDKZpJcUa7nK92hA==
-----END CERTIFICATE-----
Generated at Wed Jun 4 23:13:18 2025 by rpki-client