Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/387667b9-5714-3d43-a83f-10d2850b071d.roa
File:                     387667b9-5714-3d43-a83f-10d2850b071d.roa (raw, json)
Hash identifier:          b6+da+vUaOyMiQRePlzS8b/zUuD3M1rIIIx0Yj4wo6o=
Subject key identifier:   B9:5E:86:FA:A6:BD:6E:00:32:67:18:0D:78:7E:00:44:17:59:84:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA66F3F4CE130233A14EC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/387667b9-5714-3d43-a83f-10d2850b071d.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        2001:559:c229::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:6f:3f:4c:e1:30:23:3a:14:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=0a248362-4673-40d5-a11d-3d41a28f199a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:56:56:07:1b:46:7a:9a:c3:ba:70:8c:ad:
                    d3:dd:00:2c:ae:c8:29:6f:75:24:7f:c9:d6:87:47:
                    e8:12:43:11:80:f5:8a:99:56:dc:69:b5:38:ac:f0:
                    44:84:aa:9e:44:c9:f1:d7:ef:89:d9:75:03:61:32:
                    fd:0c:4c:02:ff:39:32:ac:a4:27:8d:31:d4:df:36:
                    81:a7:1a:fc:68:f0:c9:91:f5:8c:ac:97:2e:43:37:
                    71:83:c0:40:81:d4:36:01:b4:30:d8:41:fb:bf:ad:
                    3d:de:4a:6b:4c:47:7a:55:c1:c3:66:51:85:cc:a9:
                    8d:4c:9e:78:89:d9:4f:e3:a7:4e:88:74:da:ef:eb:
                    07:da:b8:57:c0:36:6e:87:03:b5:ad:b4:3a:12:2d:
                    0f:31:72:77:57:1f:f7:0b:90:3b:81:0e:a5:77:0a:
                    88:17:bf:f3:f2:b7:c1:6c:35:c1:fc:1f:e0:69:25:
                    c5:d9:64:2e:9e:e2:da:ff:98:66:ab:c6:a0:04:1a:
                    c5:fd:48:74:10:ae:8f:e9:aa:6c:08:98:01:7e:0e:
                    3c:aa:16:53:b7:ca:5b:18:db:e7:c7:d9:af:45:d1:
                    3c:68:00:20:3f:81:cf:8b:e4:02:0d:f0:a0:30:5f:
                    83:01:d1:aa:a4:c2:95:eb:a1:57:18:06:26:10:ea:
                    9c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5E:86:FA:A6:BD:6E:00:32:67:18:0D:78:7E:00:44:17:59:84:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/387667b9-5714-3d43-a83f-10d2850b071d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c229::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d1:4a:47:46:bb:4e:23:89:4f:c4:99:35:bf:e0:81:af:91:
         be:44:01:13:2a:9f:18:a1:53:54:25:62:97:c6:76:cc:2f:bf:
         8d:3e:1b:14:51:8b:fe:27:3a:36:27:ac:4a:97:18:d6:c5:e9:
         47:6d:7e:7e:b1:b8:1c:7b:a6:2d:bf:55:1a:16:98:b9:c6:e7:
         69:14:4d:14:53:34:24:3f:08:b2:47:a6:5e:d9:ce:e1:1c:a3:
         cb:16:24:0b:dc:8c:83:08:7f:60:18:d4:cc:f1:59:7a:30:49:
         b3:6b:76:b8:4a:ad:64:f0:20:17:26:6d:0d:ff:e7:eb:02:08:
         09:37:89:b6:b8:aa:a0:62:e5:30:b9:63:b7:2f:f6:c6:f9:91:
         d1:ca:ab:3f:e4:fa:3a:32:8d:41:6d:84:4a:05:24:59:ad:c6:
         ef:e3:41:51:a0:08:78:c7:15:5b:43:be:7d:89:56:d7:95:bc:
         0d:40:16:ff:e5:24:88:10:71:a1:47:d0:74:1c:d2:c5:53:2c:
         45:fc:5b:dd:aa:9c:a5:e2:e6:fb:03:f4:5a:f1:01:e5:50:6e:
         90:b2:82:59:42:23:4c:8c:f4:c1:85:39:09:13:50:1a:3b:22:
         f0:e1:3c:fd:93:58:48:84:96:3f:31:d4:22:09:5a:e3:f5:78:
         41:ee:09:54
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pm8/TOEwIzoU7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MGEyNDgzNjItNDY3My00MGQ1LWExMWQtM2Q0MWEyOGYxOTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXhWVgcbRnqaw7pwjK3T3QAsrsgpb3Ukf8nW
h0foEkMRgPWKmVbcabU4rPBEhKqeRMnx1++J2XUDYTL9DEwC/zkyrKQnjTHU3zaB
pxr8aPDJkfWMrJcuQzdxg8BAgdQ2AbQw2EH7v6093kprTEd6VcHDZlGFzKmNTJ54
idlP46dOiHTa7+sH2rhXwDZuhwO1rbQ6Ei0PMXJ3Vx/3C5A7gQ6ldwqIF7/z8rfB
bDXB/B/gaSXF2WQunuLa/5hmq8agBBrF/Uh0EK6P6apsCJgBfg48qhZTt8pbGNvn
x9mvRdE8aAAgP4HPi+QCDfCgMF+DAdGqpMKV66FXGAYmEOqcJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLlehvqmvW4AMmcYDXh+AEQXWYQ4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzg3NjY3YjktNTcxNC0z
ZDQzLWE4M2YtMTBkMjg1MGIwNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcIp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHrRSkdGu04jiU/EmTW/4IGvkb5EARMqnxihU1QlYpfGdswvv40+
GxRRi/4nOjYnrEqXGNbF6Udtfn6xuBx7pi2/VRoWmLnG52kUTRRTNCQ/CLJHpl7Z
zuEco8sWJAvcjIMIf2AY1MzxWXowSbNrdrhKrWTwIBcmbQ3/5+sCCAk3iba4qqBi
5TC5Y7cv9sb5kdHKqz/k+joyjUFthEoFJFmtxu/jQVGgCHjHFVtDvn2JVteVvA1A
Fv/lJIgQcaFH0HQc0sVTLEX8W92qnKXi5vsD9FrxAeVQbpCygllCI0yM9MGFOQkT
UBo7IvDhPP2TWEiElj8x1CIJWuP1eEHuCVQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:33:50 2025 by rpki-client