Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad9d5ad3-8b8e-3759-a06f-380c4bae6ed4.roa
File:                     ad9d5ad3-8b8e-3759-a06f-380c4bae6ed4.roa (raw, json)
Hash identifier:          K8ZAraC6Q4SJUU4MbknY+9POeSYoSiAtXifg34A/SZc=
Subject key identifier:   38:7A:7D:1B:7E:26:CA:4F:19:2D:8F:72:E9:48:4E:75:74:49:CE:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0C57A0859C567450CB200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad9d5ad3-8b8e-3759-a06f-380c4bae6ed4.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        2603:300a:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:c5:7a:08:59:c5:67:45:0c:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=85a86a24-fe59-4f37-b60c-79b84f3c62a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:42:47:97:78:f3:67:18:c9:84:b0:60:e9:
                    01:99:46:59:df:c0:78:35:ea:ea:94:a7:22:58:16:
                    9c:ba:e8:72:8c:0d:e0:3e:48:b6:6a:88:ef:d7:c6:
                    b6:7b:0c:1d:14:3f:c5:51:c0:46:e3:18:3d:61:21:
                    6b:88:06:62:05:ba:ca:c9:02:e4:b1:b3:21:fa:d3:
                    08:cd:cc:cd:8c:b0:d7:b0:ee:86:82:3b:bb:4b:6a:
                    84:77:bb:df:d3:be:59:6f:47:87:4e:4b:24:4a:e9:
                    dd:09:bc:94:7e:04:ed:ea:d4:70:d8:07:a8:59:cc:
                    4c:bf:00:b6:71:74:0b:6e:3a:92:fa:1f:17:5d:63:
                    04:e6:5d:ba:96:2e:e1:ad:8c:ba:c9:0a:bf:c8:50:
                    1b:c3:77:49:0d:07:cd:d4:1d:e0:8c:b6:82:a5:96:
                    05:26:f1:e7:ea:45:bd:56:e0:93:e0:3d:2f:98:ab:
                    b8:7e:ba:43:dc:38:ef:c2:aa:cc:48:8a:71:5a:d3:
                    eb:fb:55:a3:74:8a:f1:d8:9e:3b:50:81:fe:b6:fa:
                    4a:20:71:59:19:b9:3d:e3:65:c3:94:d6:e2:43:1d:
                    ad:9c:28:bc:b6:aa:51:2f:0e:37:ee:db:40:71:93:
                    3c:58:dc:05:6f:dc:ab:c9:17:1e:fb:bc:fb:fc:ba:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:7D:1B:7E:26:CA:4F:19:2D:8F:72:E9:48:4E:75:74:49:CE:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad9d5ad3-8b8e-3759-a06f-380c4bae6ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300a:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:45:ec:72:f5:31:d1:ac:c0:31:7b:12:73:a7:02:50:4a:
         85:28:29:47:b8:5f:68:52:c5:d0:08:95:2e:58:1e:dd:a5:a0:
         f3:5e:07:a7:59:dd:3a:95:35:bf:5e:30:03:ff:c5:13:05:87:
         6b:74:be:7b:f7:2c:d0:64:84:f9:68:83:27:16:42:ed:0d:27:
         6d:8e:cb:c5:20:e0:4e:ff:99:c1:6e:57:96:77:b9:86:3f:d7:
         ec:e3:95:a7:0d:c3:3d:47:cd:b4:56:73:ba:d1:4a:e8:dd:06:
         16:ed:a4:37:b1:8d:ea:e2:f5:88:08:39:09:6c:2c:27:ed:c4:
         49:75:10:a8:76:66:3c:13:cd:b5:a8:c3:df:34:c9:13:03:42:
         ec:71:3a:7d:d7:27:db:ed:60:06:d4:06:b5:80:76:a3:84:ec:
         11:83:64:51:13:a2:55:a0:32:b0:d7:40:09:c9:bc:e4:2e:c5:
         7d:49:5e:62:e7:5d:fe:c5:ae:de:5a:e4:85:26:70:7b:d2:46:
         46:b4:2f:3a:16:c5:98:d9:02:c0:4d:50:fe:4f:4c:1c:93:f7:
         e7:4f:fe:20:9e:d9:d3:d0:31:f1:d2:42:84:b6:6b:69:01:56:
         74:ad:ec:8b:fa:cf:46:e1:57:04:1e:31:fe:c0:93:4d:fe:43:
         5b:87:1b:da
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkssMV6CFnFZ0UMsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODVhODZhMjQtZmU1OS00ZjM3LWI2MGMtNzliODRmM2M2MmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFtCR5d482cYyYSwYOkBmUZZ38B4NerqlKci
WBacuuhyjA3gPki2aojv18a2ewwdFD/FUcBG4xg9YSFriAZiBbrKyQLksbMh+tMI
zczNjLDXsO6Ggju7S2qEd7vf075Zb0eHTkskSundCbyUfgTt6tRw2AeoWcxMvwC2
cXQLbjqS+h8XXWME5l26li7hrYy6yQq/yFAbw3dJDQfN1B3gjLaCpZYFJvHn6kW9
VuCT4D0vmKu4frpD3DjvwqrMSIpxWtPr+1WjdIrx2J47UIH+tvpKIHFZGbk942XD
lNbiQx2tnCi8tqpRLw437ttAcZM8WNwFb9yryRce+7z7/LrD7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDh6fRt+JspPGS2PculITnV0Sc4qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQ5ZDVhZDMtOGI4ZS0z
NzU5LWEwNmYtMzgwYzRiYWU2ZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwCgsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAan1F7HL1MdGswDF7EnOnAlBKhSgpR7hfaFLF0AiVLlge3aWg814H
p1ndOpU1v14wA//FEwWHa3S+e/cs0GSE+WiDJxZC7Q0nbY7LxSDgTv+ZwW5Xlne5
hj/X7OOVpw3DPUfNtFZzutFK6N0GFu2kN7GN6uL1iAg5CWwsJ+3ESXUQqHZmPBPN
tajD3zTJEwNC7HE6fdcn2+1gBtQGtYB2o4TsEYNkUROiVaAysNdACcm85C7FfUle
Yudd/sWu3lrkhSZwe9JGRrQvOhbFmNkCwE1Q/k9MHJP350/+IJ7Z09Ax8dJChLZr
aQFWdK3si/rPRuFXBB4x/sCTTf5DW4cb2g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:58 2025 by rpki-client