Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0acdf5fc-5384-3324-b123-a61982ba6a7b.roa
File:                     0acdf5fc-5384-3324-b123-a61982ba6a7b.roa (raw, json)
Hash identifier:          Lh4hl2AA/ldFCfweWQi9V1rINdduDDTOCrbNQ25wEDc=
Subject key identifier:   29:75:AD:1E:6D:02:4C:D5:16:50:4A:32:E9:6C:5B:66:FA:06:38:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220ED873BE11FB9A14DC800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0acdf5fc-5384-3324-b123-a61982ba6a7b.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7016
IP address blocks:        2603:2549:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:ed:87:3b:e1:1f:b9:a1:4d:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=19ecea45-4433-48ef-a5bb-2847d511a8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:21:a0:bb:cd:db:b2:6f:c7:3d:90:8b:b5:
                    53:1c:06:f7:ec:e0:99:80:fe:98:7d:06:9f:da:ff:
                    6d:fa:8d:a5:08:eb:89:67:19:72:e8:65:a0:ed:83:
                    60:07:56:39:02:0a:c3:8d:1a:98:b9:4e:88:f1:24:
                    97:8b:9d:0f:0f:1c:77:18:0b:bb:a0:92:21:d3:ec:
                    1d:85:a3:a6:cf:4b:55:b4:70:a5:d5:8d:fa:bc:2d:
                    d9:10:52:a2:04:23:54:4f:87:f5:c9:84:37:0d:0d:
                    ec:cd:6a:d1:1b:bd:49:9d:23:02:e5:0f:41:49:f6:
                    a0:87:d6:41:56:dc:2a:f1:b3:11:d4:57:f2:36:c7:
                    4f:14:5b:b2:7e:89:49:60:4b:2f:ea:45:31:c2:35:
                    58:23:ae:bd:c7:38:ee:5f:04:d6:2f:a8:19:63:9e:
                    16:44:52:14:55:db:2c:e4:39:ca:e8:35:76:8b:09:
                    58:8c:dc:3a:94:8c:67:68:92:55:d9:34:35:3e:2b:
                    42:90:85:3a:28:d0:05:99:fa:8f:91:aa:06:57:52:
                    99:be:d3:91:57:98:12:29:29:81:14:7d:0c:15:69:
                    2c:de:3d:f2:5c:d5:ef:73:fc:71:09:35:87:10:99:
                    f4:da:4b:89:a5:46:dd:13:6e:e3:22:2c:03:37:69:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:75:AD:1E:6D:02:4C:D5:16:50:4A:32:E9:6C:5B:66:FA:06:38:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0acdf5fc-5384-3324-b123-a61982ba6a7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2549:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ee:eb:f6:61:0d:c0:63:0e:f7:36:b6:d4:13:97:bb:67:be:
         e7:0f:c3:76:4d:9f:2e:b4:0e:8f:4f:c2:95:fa:d9:42:55:33:
         5b:23:7b:5c:7d:51:87:c2:6c:ab:a8:41:3e:cf:e3:d0:35:01:
         64:87:2e:8b:ff:c9:20:9a:f8:bc:48:fe:41:e1:ab:8e:5e:82:
         7f:e4:92:f0:26:fa:92:99:af:32:80:9b:1e:ff:6d:9b:c8:0a:
         d0:08:d1:f8:a2:09:85:01:9b:d1:f7:96:18:fb:8b:d2:71:0a:
         b2:6f:77:a0:0f:26:1d:20:0a:33:26:13:63:62:9f:8c:7b:8a:
         ab:c3:5d:30:5d:fd:bb:ae:f7:33:37:1c:40:b9:2d:51:3a:c0:
         46:80:87:7b:4b:f1:50:6c:db:05:a8:35:67:ad:c0:64:f6:35:
         fe:d4:ff:2f:de:c1:e8:16:06:92:9d:cc:9a:26:12:41:9f:c1:
         3b:5c:75:20:8b:51:53:d0:b8:f9:2f:28:17:99:59:31:e9:be:
         8e:3d:84:b9:fe:41:33:f1:8b:39:06:41:96:0a:6d:54:32:83:
         1c:a8:80:09:04:e7:9e:3f:9e:90:4f:b3:05:30:bb:f7:8d:ac:
         ab:d1:62:15:79:12:56:33:5c:2d:a4:c3:43:3a:36:ee:ae:58:
         1c:46:f1:3f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqyIO2HO+EfuaFNyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MTllY2VhNDUtNDQzMy00OGVmLWE1YmItMjg0N2Q1MTFhOGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseYhoLvN27Jvxz2Qi7VTHAb37OCZgP6YfQaf
2v9t+o2lCOuJZxly6GWg7YNgB1Y5AgrDjRqYuU6I8SSXi50PDxx3GAu7oJIh0+wd
haOmz0tVtHCl1Y36vC3ZEFKiBCNUT4f1yYQ3DQ3szWrRG71JnSMC5Q9BSfagh9ZB
Vtwq8bMR1FfyNsdPFFuyfolJYEsv6kUxwjVYI669xzjuXwTWL6gZY54WRFIUVdss
5DnK6DV2iwlYjNw6lIxnaJJV2TQ1PitCkIU6KNAFmfqPkaoGV1KZvtORV5gSKSmB
FH0MFWks3j3yXNXvc/xxCTWHEJn02kuJpUbdE27jIiwDN2kdlQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCl1rR5tAkzVFlBKMulsW2b6BjiCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFjZGY1ZmMtNTM4NC0z
MzI0LWIxMjMtYTYxOTgyYmE2YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMlScAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAiO7r9mENwGMO9za21BOXu2e+5w/Ddk2fLrQOj0/ClfrZQlUzWyN7
XH1Rh8Jsq6hBPs/j0DUBZIcui//JIJr4vEj+QeGrjl6Cf+SS8Cb6kpmvMoCbHv9t
m8gK0AjR+KIJhQGb0feWGPuL0nEKsm93oA8mHSAKMyYTY2KfjHuKq8NdMF39u673
MzccQLktUTrARoCHe0vxUGzbBag1Z63AZPY1/tT/L97B6BYGkp3MmiYSQZ/BO1x1
IItRU9C4+S8oF5lZMem+jj2Euf5BM/GLOQZBlgptVDKDHKiACQTnnj+ekE+zBTC7
942sq9FiFXkSVjNcLaTDQzo27q5YHEbxPw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 19:26:46 2025 by rpki-client