Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9acb855-539a-3373-9fa3-72949e84ca66.roa
File:                     a9acb855-539a-3373-9fa3-72949e84ca66.roa (raw, json)
Hash identifier:          sgH8uB5AjdAOiHC1xx9DNpyaWCvlDid9dVaWBQbVShg=
Subject key identifier:   70:DA:A8:D4:6B:62:02:FE:E2:AC:BC:7E:FE:C6:C8:FE:D0:99:2A:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4300E06FD6D7F6C7C78D9E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9acb855-539a-3373-9fa3-72949e84ca66.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2603:218b:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:0e:06:fd:6d:7f:6c:7c:78:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=5f5c9e5a-b596-49da-bf7e-0595e48ed585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:92:70:a8:d4:e2:db:cf:0a:1b:df:a6:c5:
                    42:03:ca:b0:2e:c6:6f:4b:1c:14:37:68:f4:5f:1a:
                    24:c7:72:06:28:88:5d:aa:55:06:93:ea:c8:85:e2:
                    74:73:2d:22:07:7a:74:26:0d:4a:8c:e9:56:e0:5b:
                    fe:c6:3e:2b:82:81:39:f5:6e:02:e1:be:59:b7:ce:
                    60:58:52:98:3b:57:97:02:af:57:e0:b4:5c:5a:6f:
                    cb:eb:fa:7b:65:d1:09:4f:6d:c3:6a:f9:54:a2:bc:
                    3c:19:6a:e1:95:d5:d8:88:2b:65:cb:bf:c5:dd:c9:
                    4c:18:ef:69:3d:0f:02:7e:96:d7:be:fe:8f:8a:31:
                    e0:cd:2b:59:3e:3a:72:75:d3:0e:c8:22:5a:a8:92:
                    da:df:0e:08:1f:3e:f7:4f:d1:7b:a7:0d:71:84:95:
                    dd:08:35:f1:e7:e2:2b:87:7e:ea:ab:0a:69:85:0b:
                    78:6e:21:e0:84:1d:1e:d3:b7:d6:5a:9f:a6:ea:87:
                    d8:9c:86:f1:2e:06:df:a8:20:e3:c5:95:47:13:e7:
                    ff:64:c6:a0:dd:9e:bc:e9:1a:70:b0:45:e6:13:ff:
                    9f:ef:ee:93:6e:a6:4e:3e:0e:8a:0d:62:1b:b4:40:
                    86:0f:5f:64:94:81:8b:7f:7f:dc:f1:30:c5:f1:0f:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DA:A8:D4:6B:62:02:FE:E2:AC:BC:7E:FE:C6:C8:FE:D0:99:2A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a9acb855-539a-3373-9fa3-72949e84ca66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:218b:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:f1:37:a3:1a:65:3d:b6:7d:e5:d3:54:dd:e8:46:41:91:74:
         a8:de:fb:8a:d3:d4:52:20:33:1c:fd:15:26:62:cb:f9:f5:1d:
         4c:50:72:51:3c:cb:27:01:55:65:2a:40:f9:f5:6b:17:4c:9e:
         83:3a:aa:ca:a4:33:47:87:20:ef:7f:60:82:2f:3e:70:5d:13:
         c4:28:1a:3b:a7:f0:09:b9:5b:4c:11:07:79:b9:b9:fd:63:1a:
         e9:7d:9a:1e:5c:e7:8f:e4:a8:16:38:f0:c6:b0:3e:ac:93:74:
         55:82:c4:b1:62:b7:0b:32:b5:94:f5:b1:3b:9d:cf:fe:7c:b3:
         50:4b:58:53:96:30:d5:4c:f5:1a:3d:17:44:8e:2b:63:88:ed:
         2d:d2:8f:3c:a4:a4:02:e7:a4:3c:eb:93:36:6b:cf:4a:ce:76:
         a8:fb:71:9a:f9:40:8f:52:0e:eb:6c:22:24:05:72:3f:e2:7a:
         35:0c:9d:9d:aa:7f:0b:90:73:dd:c2:92:b6:ed:95:fd:28:ee:
         3f:b8:2e:51:87:d0:6c:8c:e2:04:f6:23:06:8f:02:d6:f8:8c:
         24:08:ec:4c:cf:19:0f:e9:4c:66:bb:e7:9e:55:d4:2b:bb:90:
         29:c2:bd:ff:f8:e0:a6:bf:e9:31:84:e9:08:c4:b6:40:35:fc:
         45:63:ee:c4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnUMA4G/W1/bHx42eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NWY1YzllNWEtYjU5Ni00OWRhLWJmN2UtMDU5NWU0OGVkNTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9OScKjU4tvPChvfpsVCA8qwLsZvSxwUN2j0
Xxokx3IGKIhdqlUGk+rIheJ0cy0iB3p0Jg1KjOlW4Fv+xj4rgoE59W4C4b5Zt85g
WFKYO1eXAq9X4LRcWm/L6/p7ZdEJT23DavlUorw8GWrhldXYiCtly7/F3clMGO9p
PQ8CfpbXvv6PijHgzStZPjpyddMOyCJaqJLa3w4IHz73T9F7pw1xhJXdCDXx5+Ir
h37qqwpphQt4biHghB0e07fWWp+m6ofYnIbxLgbfqCDjxZVHE+f/ZMag3Z686Rpw
sEXmE/+f7+6TbqZOPg6KDWIbtECGD19klIGLf3/c8TDF8Q8jmwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHDaqNRrYgL+4qy8fv7GyP7QmSqnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTlhY2I4NTUtNTM5YS0z
MzczLTlmYTMtNzI5NDllODRjYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMhi0Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAx/E3oxplPbZ95dNU3ehGQZF0qN77itPUUiAzHP0VJmLL+fUdTFBy
UTzLJwFVZSpA+fVrF0yegzqqyqQzR4cg739ggi8+cF0TxCgaO6fwCblbTBEHebm5
/WMa6X2aHlznj+SoFjjwxrA+rJN0VYLEsWK3CzK1lPWxO53P/nyzUEtYU5Yw1Uz1
Gj0XRI4rY4jtLdKPPKSkAuekPOuTNmvPSs52qPtxmvlAj1IO62wiJAVyP+J6NQyd
nap/C5Bz3cKStu2V/SjuP7guUYfQbIziBPYjBo8C1viMJAjsTM8ZD+lMZrvnnlXU
K7uQKcK9//jgpr/pMYTpCMS2QDX8RWPuxA==
-----END CERTIFICATE-----
Generated at Tue Jun 3 06:25:39 2025 by rpki-client