Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a84b84-4044-33a4-ae1f-58f8c1237875.roa
File:                     d5a84b84-4044-33a4-ae1f-58f8c1237875.roa (raw, json)
Hash identifier:          MYCorSYFN1iL2E0En+q8d4g37inWtmO15QPcgcvOaLc=
Subject key identifier:   86:46:EB:C0:61:FF:FA:39:AF:8F:8D:6F:54:E2:78:CA:20:C3:DF:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849FF75A1CF800842AF4E5EBC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a84b84-4044-33a4-ae1f-58f8c1237875.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     7725
IP address blocks:        2603:3001:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:a1:cf:80:08:42:af:4e:5e:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=4746447e-0d37-4419-a5b1-4d19709cfcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:b8:64:2f:cc:1f:e8:20:ba:29:6b:1e:fc:
                    e9:50:b8:15:9a:d3:40:6b:13:80:fb:d0:20:43:b8:
                    3a:88:55:87:d1:88:c6:8c:16:32:c8:6d:e4:c4:b1:
                    b7:2c:05:cb:3a:bc:6a:ec:2c:b2:70:ea:17:47:78:
                    6c:e7:b4:a8:71:4c:b6:07:c2:e3:61:b1:d1:1c:0b:
                    93:11:f4:c9:31:53:99:74:67:56:a2:75:7d:dd:71:
                    63:ef:5c:0d:b7:c3:79:d1:c9:b6:1b:27:3d:eb:4d:
                    7c:8d:a6:6e:7f:72:50:a5:ab:59:3d:a9:b1:09:04:
                    bd:31:3d:4e:7e:b0:46:dc:37:e2:9a:9d:1b:66:6c:
                    7e:e1:91:0a:f4:4f:13:7e:55:25:5c:42:20:fc:ed:
                    8b:f8:6d:60:08:b5:b7:a7:6d:01:6b:91:95:f6:c1:
                    d8:2c:ae:de:01:9a:02:22:9f:53:98:1b:5d:13:06:
                    f5:5b:9a:12:11:a7:03:f5:74:44:10:e0:c0:c8:03:
                    7e:10:b8:0c:a2:6d:70:c6:ea:2e:a5:f7:f4:1a:58:
                    2e:02:4d:2e:f6:5e:56:d7:94:8c:64:fb:ec:f7:68:
                    d7:6c:b4:85:7d:60:74:af:1c:82:46:66:85:53:e5:
                    0d:9f:72:65:69:35:58:7c:8b:8b:b6:d8:1f:7e:94:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:46:EB:C0:61:FF:FA:39:AF:8F:8D:6F:54:E2:78:CA:20:C3:DF:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5a84b84-4044-33a4-ae1f-58f8c1237875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3001:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:6b:15:5c:75:46:1e:d2:0a:ee:07:5c:61:12:a5:5e:65:a0:
         53:5a:be:c6:14:03:49:1d:05:9b:c5:cd:50:a5:d3:d6:e5:bb:
         2f:e9:72:92:09:8e:70:43:95:48:a6:55:0e:39:53:a9:99:ba:
         77:80:69:fc:0b:6d:7d:68:11:fc:e3:7b:4b:1f:64:49:e5:97:
         ec:17:e8:ec:20:8f:09:36:c0:ac:38:ae:63:64:60:90:67:70:
         3f:cc:c2:ed:ea:f8:d7:99:43:d3:fe:db:b1:71:cb:1e:75:a2:
         28:a6:bd:39:52:45:07:de:91:87:26:36:f1:7f:d9:c6:e5:21:
         f1:9a:73:de:bf:6d:ea:8b:73:aa:c6:05:69:ba:e9:e0:4c:6b:
         14:77:e0:a6:c2:bb:d4:6c:2f:4e:48:74:61:19:b5:9f:49:14:
         49:ef:a9:15:14:cc:3e:db:84:8a:ab:e1:77:b1:f7:b3:8a:8c:
         c4:a5:41:f7:7d:22:ca:10:96:ac:38:17:33:0a:4d:45:32:2f:
         62:5c:e4:8f:12:f9:5f:6a:bb:c2:e2:b3:c7:95:d9:8f:45:2d:
         ed:e5:8c:db:1a:d1:da:db:c5:47:18:88:a2:c7:af:6e:ee:99:
         da:6e:57:ed:47:a0:8f:2d:c6:c4:23:d5:87:38:66:c8:08:f7:
         da:ba:43:4b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEn/daHPgAhCr05evIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
NDc0NjQ0N2UtMGQzNy00NDE5LWE1YjEtNGQxOTcwOWNmY2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXK4ZC/MH+gguilrHvzpULgVmtNAaxOA+9Ag
Q7g6iFWH0YjGjBYyyG3kxLG3LAXLOrxq7CyycOoXR3hs57SocUy2B8LjYbHRHAuT
EfTJMVOZdGdWonV93XFj71wNt8N50cm2Gyc96018jaZuf3JQpatZPamxCQS9MT1O
frBG3Dfimp0bZmx+4ZEK9E8TflUlXEIg/O2L+G1gCLW3p20Ba5GV9sHYLK7eAZoC
Ip9TmBtdEwb1W5oSEacD9XREEODAyAN+ELgMom1wxuoupff0GlguAk0u9l5W15SM
ZPvs92jXbLSFfWB0rxyCRmaFU+UNn3JlaTVYfIuLttgffpRd/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIZG68Bh//o5r4+Nb1TieMogw98RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDVhODRiODQtNDA0NC0z
M2E0LWFlMWYtNThmOGMxMjM3ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwARAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA0msVXHVGHtIK7gdcYRKlXmWgU1q+xhQDSR0Fm8XNUKXT1uW7L+ly
kgmOcEOVSKZVDjlTqZm6d4Bp/AttfWgR/ON7Sx9kSeWX7Bfo7CCPCTbArDiuY2Rg
kGdwP8zC7er415lD0/7bsXHLHnWiKKa9OVJFB96RhyY28X/ZxuUh8Zpz3r9t6otz
qsYFabrp4ExrFHfgpsK71GwvTkh0YRm1n0kUSe+pFRTMPtuEiqvhd7H3s4qMxKVB
930iyhCWrDgXMwpNRTIvYlzkjxL5X2q7wuKzx5XZj0Ut7eWM2xrR2tvFRxiIosev
bu6Z2m5X7Uegjy3GxCPVhzhmyAj32rpDSw==
-----END CERTIFICATE-----
Generated at Tue Jun 3 07:19:24 2025 by rpki-client