Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98816fe2-8c71-3cfc-9ced-876feeb062c2.roa
File:                     98816fe2-8c71-3cfc-9ced-876feeb062c2.roa (raw, json)
Hash identifier:          1WOtFdG6pbfs+XKV0BeYWK41JDbVZrsR2l3EGmCLmKU=
Subject key identifier:   3F:3D:B1:FF:D3:BF:59:11:FA:28:42:80:8B:9E:14:0D:E1:5D:A7:CD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DDA4413BCB28F0DA57EA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98816fe2-8c71-3cfc-9ced-876feeb062c2.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        2601:446::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:da:44:13:bc:b2:8f:0d:a5:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=a6bd3022-134a-4417-8dc8-1d269c24f1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:67:16:8e:4e:1e:4e:26:4e:70:47:36:e2:c2:
                    b2:0a:cf:8c:6d:2f:2a:1f:b2:7c:e9:97:fa:6a:b2:
                    48:a0:71:64:2b:fe:23:59:86:43:84:17:04:23:16:
                    92:76:d4:12:6f:19:e4:5e:fe:a7:9e:e9:dc:23:1f:
                    98:5a:4f:d0:63:09:07:73:d9:55:00:94:46:5d:00:
                    36:58:60:6c:4e:82:50:a6:16:e7:ab:11:33:24:84:
                    ef:79:2b:e5:db:b5:69:63:8d:7f:43:27:eb:18:fc:
                    6f:29:96:0c:8b:87:27:be:73:35:9b:13:f2:0e:22:
                    65:1b:ca:5e:ec:0a:c0:de:06:0b:04:c9:be:5b:05:
                    e7:69:78:4e:61:95:6f:de:18:29:ae:28:45:8a:cc:
                    9e:1d:6c:3c:a5:fd:99:1b:cb:9e:29:b9:24:b9:08:
                    e5:71:20:d4:aa:a3:0d:1c:07:a0:56:60:b2:75:72:
                    95:77:80:ff:89:b8:51:8e:83:ad:6c:bb:78:03:db:
                    d2:ad:6c:de:78:36:3a:34:25:05:6e:c5:6e:0c:56:
                    91:c5:d4:ac:95:09:a5:35:cb:54:96:93:f8:86:80:
                    b1:6b:ca:be:9c:f7:fd:a3:d3:2f:ed:c7:06:ff:b1:
                    bf:b9:8a:23:df:82:6b:d1:05:f7:cd:2e:19:e6:48:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3D:B1:FF:D3:BF:59:11:FA:28:42:80:8B:9E:14:0D:E1:5D:A7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98816fe2-8c71-3cfc-9ced-876feeb062c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:446::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:47:02:d9:c2:95:f6:a6:9d:a5:97:59:58:16:ab:c1:42:fb:
         6f:a9:ec:c0:c6:c7:aa:aa:de:41:cc:06:93:ff:3e:f0:7f:7b:
         0b:52:09:56:37:fa:af:42:00:fa:1e:18:bf:21:64:7c:28:ec:
         1e:2e:b5:2f:21:e5:21:35:d6:23:61:bc:da:ff:e9:80:db:ff:
         48:de:66:4f:e4:c4:85:5d:50:8e:30:59:2f:5f:a0:d4:d6:b4:
         13:9f:c8:be:99:d0:8b:6e:c1:91:b3:b4:e0:ab:30:d8:3c:de:
         db:fd:e3:bd:23:9b:ce:c8:67:72:8b:55:47:36:db:ae:08:ea:
         59:7d:86:98:56:f4:2d:a3:ff:75:50:ec:f8:55:50:f2:a8:3e:
         d4:15:55:3b:c4:9c:1c:6d:b4:21:7f:1d:1c:85:5c:aa:04:72:
         6f:c2:c3:12:bf:65:65:62:f1:aa:20:c5:4b:a4:78:07:a6:e7:
         b7:1d:b3:fa:ed:97:06:8f:9b:91:db:9b:b3:c9:22:60:32:8b:
         ce:c5:5e:41:3b:d0:4a:3b:4d:09:9a:b3:62:bb:d5:39:42:c7:
         92:59:2f:8f:ac:d5:f2:85:19:82:b7:7c:10:0d:23:4a:3c:dc:
         ae:9e:2d:1e:47:71:13:e9:4e:26:ec:d1:7c:a6:a6:08:f3:76:
         c1:d1:06:e6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiebdpEE7yyjw2lfqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
YTZiZDMwMjItMTM0YS00NDE3LThkYzgtMWQyNjljMjRmMWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGcWjk4eTiZOcEc24sKyCs+MbS8qH7J86Zf6
arJIoHFkK/4jWYZDhBcEIxaSdtQSbxnkXv6nnuncIx+YWk/QYwkHc9lVAJRGXQA2
WGBsToJQphbnqxEzJITveSvl27VpY41/QyfrGPxvKZYMi4cnvnM1mxPyDiJlG8pe
7ArA3gYLBMm+WwXnaXhOYZVv3hgprihFisyeHWw8pf2ZG8ueKbkkuQjlcSDUqqMN
HAegVmCydXKVd4D/ibhRjoOtbLt4A9vSrWzeeDY6NCUFbsVuDFaRxdSslQmlNctU
lpP4hoCxa8q+nPf9o9Mv7ccG/7G/uYoj34Jr0QX3zS4Z5khwsQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFD89sf/Tv1kR+ihCgIueFA3hXafNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTg4MTZmZTItOGM3MS0z
Y2ZjLTljZWQtODc2ZmVlYjA2MmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEERgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA1UcC2cKV9qadpZdZWBarwUL7b6nswMbHqqreQcwGk/8+8H97C1IJ
Vjf6r0IA+h4YvyFkfCjsHi61LyHlITXWI2G82v/pgNv/SN5mT+TEhV1QjjBZL1+g
1Na0E5/IvpnQi27BkbO04Ksw2Dze2/3jvSObzshncotVRzbbrgjqWX2GmFb0LaP/
dVDs+FVQ8qg+1BVVO8ScHG20IX8dHIVcqgRyb8LDEr9lZWLxqiDFS6R4B6bntx2z
+u2XBo+bkdubs8kiYDKLzsVeQTvQSjtNCZqzYrvVOULHklkvj6zV8oUZgrd8EA0j
Sjzcrp4tHkdxE+lOJuzRfKamCPN2wdEG5g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:28 2025 by rpki-client