Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b00bd20d-96a6-3d78-bc12-794a1ca83a15.roa
File:                     b00bd20d-96a6-3d78-bc12-794a1ca83a15.roa (raw, json)
Hash identifier:          dQSdhRJkz2dJ6Pod26HZT8GS1V39wRl7XgwCXTpBstM=
Subject key identifier:   18:A1:04:77:3D:B1:33:72:56:B4:30:BF:99:8D:7C:94:72:AB:72:7C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43171F2D5DE7CD5758DA300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b00bd20d-96a6-3d78-bc12-794a1ca83a15.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2603:3005:7400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:71:f2:d5:de:7c:d5:75:8d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=79ab1a6b-c12b-4d2c-b9fa-be7d241246ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:73:0a:dc:92:8b:c1:bb:bc:1f:df:b0:bd:
                    00:87:43:b5:ff:2e:6d:4c:4b:0a:c9:13:fc:06:80:
                    cd:ac:be:2d:df:a3:16:49:04:cf:8e:2a:5c:8c:a5:
                    4b:27:ed:43:30:ea:c0:e9:63:0a:14:c5:e7:47:b3:
                    81:5b:98:0f:f5:5c:0c:16:2e:18:df:64:3b:0d:d6:
                    ae:05:f7:f9:27:11:14:64:7f:64:d5:01:d4:3a:42:
                    25:df:00:c9:3b:fb:4e:40:b7:74:90:17:fa:d4:80:
                    ac:b8:b1:4d:f6:60:02:03:dc:85:33:57:bc:e2:89:
                    b6:c2:98:f4:7a:72:31:46:e5:1f:8e:58:a6:2a:34:
                    98:6b:56:9e:c5:87:97:98:0c:13:bc:08:2f:ed:42:
                    a2:f6:21:ae:fd:16:b2:9b:86:7f:59:59:d0:2e:ec:
                    37:21:23:e3:c2:0e:b3:74:b7:73:7a:72:39:62:03:
                    12:7c:6f:ff:78:49:5b:cd:b4:72:91:7f:74:6d:dd:
                    a4:71:b7:15:11:4f:2f:7b:c1:fd:fa:dd:6e:d9:02:
                    62:dd:57:5b:b8:2c:4e:b3:5c:cf:99:e6:84:4a:91:
                    cd:4d:2b:69:1a:44:4b:52:fe:92:e3:17:56:7c:fd:
                    5c:2d:e9:e3:ea:b9:30:b5:12:d4:2b:7a:26:2e:5e:
                    7f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A1:04:77:3D:B1:33:72:56:B4:30:BF:99:8D:7C:94:72:AB:72:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b00bd20d-96a6-3d78-bc12-794a1ca83a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:7400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:25:4a:18:2d:2d:0d:49:25:d8:6c:ad:01:cc:42:a2:26:32:
         fc:2d:ce:17:0e:0a:e1:4e:9f:98:05:46:f0:58:99:75:1d:19:
         12:a2:8a:ab:1b:fb:80:25:45:59:83:b6:90:0b:59:5d:81:8d:
         c5:5d:3e:51:c2:de:a2:d3:f3:75:99:e3:3a:eb:18:bb:00:a4:
         f7:79:13:e7:cb:68:93:55:ae:53:bb:d8:b6:ac:0c:3f:cd:14:
         af:12:9f:76:78:1d:30:04:e7:f3:c2:f8:6d:13:41:1b:f5:77:
         00:f8:48:c3:04:32:9a:44:a7:32:b7:47:30:04:e4:d4:cd:06:
         98:90:85:66:07:32:85:a2:0d:2d:86:a2:c2:ab:5e:5e:16:97:
         78:94:f9:41:b0:c0:24:45:8e:04:54:0b:51:2b:b3:ed:f6:70:
         fa:c9:55:c0:61:ae:8a:7c:99:a7:5c:6f:0b:c4:60:c8:31:90:
         d7:d0:21:2f:f1:86:d5:91:81:d3:a6:bd:ab:ce:21:89:8e:9b:
         a9:5a:f9:c7:18:94:09:69:db:a6:1a:e0:50:73:1b:f7:99:ec:
         5a:37:f6:94:60:e4:34:9a:f7:21:79:df:bf:78:e8:b8:ca:36:
         ec:76:38:f2:a8:88:67:4c:b0:cc:0f:dd:73:2c:96:eb:0a:97:
         c7:32:bf:7f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnUMXHy1d581XWNowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NzlhYjFhNmItYzEyYi00ZDJjLWI5ZmEtYmU3ZDI0MTI0NmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUxzCtySi8G7vB/fsL0Ah0O1/y5tTEsKyRP8
BoDNrL4t36MWSQTPjipcjKVLJ+1DMOrA6WMKFMXnR7OBW5gP9VwMFi4Y32Q7Ddau
Bff5JxEUZH9k1QHUOkIl3wDJO/tOQLd0kBf61ICsuLFN9mACA9yFM1e84om2wpj0
enIxRuUfjlimKjSYa1aexYeXmAwTvAgv7UKi9iGu/Raym4Z/WVnQLuw3ISPjwg6z
dLdzenI5YgMSfG//eElbzbRykX90bd2kcbcVEU8ve8H9+t1u2QJi3VdbuCxOs1zP
meaESpHNTStpGkRLUv6S4xdWfP1cLenj6rkwtRLUK3omLl5/DwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBihBHc9sTNyVrQwv5mNfJRyq3J8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjAwYmQyMGQtOTZhNi0z
ZDc4LWJjMTItNzk0YTFjYTgzYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBXQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOiVKGC0tDUkl2GytAcxCoiYy/C3OFw4K4U6fmAVG8FiZdR0ZEqKK
qxv7gCVFWYO2kAtZXYGNxV0+UcLeotPzdZnjOusYuwCk93kT58tok1WuU7vYtqwM
P80UrxKfdngdMATn88L4bRNBG/V3APhIwwQymkSnMrdHMATk1M0GmJCFZgcyhaIN
LYaiwqteXhaXeJT5QbDAJEWOBFQLUSuz7fZw+slVwGGuinyZp1xvC8RgyDGQ19Ah
L/GG1ZGB06a9q84hiY6bqVr5xxiUCWnbphrgUHMb95nsWjf2lGDkNJr3IXnfv3jo
uMo27HY48qiIZ0ywzA/dcyyW6wqXxzK/fw==
-----END CERTIFICATE-----
Generated at Tue Jun 3 05:04:26 2025 by rpki-client