Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa
File:                     4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa (raw, json)
Hash identifier:          ELW5Bhm3UtGiPPRB8UFlM+kl5vn5hWhx61UPVfgy3z8=
Subject key identifier:   F8:D9:44:5A:7C:35:56:5E:3F:55:8C:6E:BD:0A:C6:B2:9A:89:55:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EC8E53148E3034B3306D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        2603:3015:2d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:8e:53:14:8e:30:34:b3:30:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=65a76b89-12d7-4817-a90c-847afaf28769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:0b:88:c6:b2:8e:62:78:63:39:71:23:b8:
                    29:c2:67:a0:e2:c2:7c:79:e5:41:f2:35:c3:ae:4d:
                    6f:b5:26:64:57:23:6e:e3:cf:9a:c0:2f:3d:d8:82:
                    15:3d:9d:8f:d7:07:f4:d0:b5:2f:68:ef:45:d9:7b:
                    06:3d:46:8d:7a:8d:79:f5:29:59:25:33:a4:8b:24:
                    a1:d5:c6:c6:90:7f:be:d7:72:bd:58:55:14:6e:a1:
                    7b:a4:9b:e9:57:0b:86:47:00:ba:d4:41:ac:a2:04:
                    e5:81:21:18:e3:70:27:54:65:02:bf:de:6e:b4:11:
                    70:30:12:06:03:29:a9:d5:dc:bb:42:fd:a0:cb:dc:
                    e9:39:31:02:66:7e:de:9a:12:2f:5b:0f:4a:d3:f4:
                    46:51:c0:1f:47:8a:d4:43:39:d6:ec:a3:87:3f:8d:
                    d5:36:fa:b0:47:4a:78:75:ae:ac:04:5d:20:9c:85:
                    c1:00:25:88:2b:a0:74:d3:ab:62:88:d9:76:40:90:
                    7d:27:e1:2a:f5:da:6c:43:be:39:60:20:d1:7c:3f:
                    1f:be:16:f1:25:f1:9e:f9:25:05:37:93:df:e5:64:
                    a9:49:a2:41:66:ea:6b:ce:94:35:36:2c:24:b9:7c:
                    67:c0:83:52:b4:eb:5b:10:de:08:0e:45:a2:8d:85:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D9:44:5A:7C:35:56:5E:3F:55:8C:6E:BD:0A:C6:B2:9A:89:55:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3015:2d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ca:d0:47:fa:6c:14:46:6d:99:d6:bf:a5:6b:f9:73:e0:90:
         25:ac:d2:2f:cf:33:27:c7:4a:ba:fa:8d:e1:b7:ab:e8:94:4a:
         6d:94:ed:9a:a4:6c:79:b1:69:a1:68:8e:e9:4d:77:30:92:ef:
         73:dd:17:3a:01:f3:4e:2e:0c:7c:5e:49:03:e3:8e:fe:ef:48:
         3a:3a:88:7f:3d:ad:7e:8d:2d:a8:41:be:c1:c1:15:21:41:12:
         45:4e:a4:3b:76:46:53:e2:90:fa:57:d0:03:cc:74:e0:0f:3a:
         35:81:51:71:6c:89:bd:2a:64:e5:3f:7a:4f:88:e8:1e:c9:c7:
         df:c4:17:42:de:9f:e0:37:92:7e:b1:8f:db:85:50:e0:44:e6:
         fe:1d:ea:96:31:a4:9d:70:f5:6f:28:e6:89:a5:15:f2:52:83:
         13:e4:fd:bc:73:33:1c:47:90:65:3a:3e:1e:59:91:aa:c9:f1:
         05:c5:0a:35:d4:8c:92:aa:c9:72:7c:cf:57:64:de:aa:45:de:
         5b:ea:3f:f2:87:24:1e:aa:22:0e:54:58:c1:46:e7:18:5b:c0:
         1e:6f:d6:0f:a5:ba:9e:fa:8a:33:d5:ba:57:eb:19:7f:f2:36:
         95:4e:73:96:66:e9:4e:dc:d4:ec:43:95:4b:c9:4f:b0:02:f2:
         8e:b3:30:1d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq07I5TFI4wNLMwbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NjVhNzZiODktMTJkNy00ODE3LWE5MGMtODQ3YWZhZjI4NzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOULiMayjmJ4YzlxI7gpwmeg4sJ8eeVB8jXD
rk1vtSZkVyNu48+awC892IIVPZ2P1wf00LUvaO9F2XsGPUaNeo159SlZJTOkiySh
1cbGkH++13K9WFUUbqF7pJvpVwuGRwC61EGsogTlgSEY43AnVGUCv95utBFwMBIG
Aymp1dy7Qv2gy9zpOTECZn7emhIvWw9K0/RGUcAfR4rUQznW7KOHP43VNvqwR0p4
da6sBF0gnIXBACWIK6B006tiiNl2QJB9J+Eq9dpsQ745YCDRfD8fvhbxJfGe+SUF
N5Pf5WSpSaJBZuprzpQ1NiwkuXxnwINStOtbEN4IDkWijYVvKwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPjZRFp8NVZeP1WMbr0KxrKaiVVLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDEyMGQxZjMtNWMxZS0z
YTU2LWJhY2MtNWUzZjI0NWNjYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFS0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAC8rQR/psFEZtmda/pWv5c+CQJazSL88zJ8dKuvqN4ber6JRKbZTt
mqRsebFpoWiO6U13MJLvc90XOgHzTi4MfF5JA+OO/u9IOjqIfz2tfo0tqEG+wcEV
IUESRU6kO3ZGU+KQ+lfQA8x04A86NYFRcWyJvSpk5T96T4joHsnH38QXQt6f4DeS
frGP24VQ4ETm/h3qljGknXD1byjmiaUV8lKDE+T9vHMzHEeQZTo+HlmRqsnxBcUK
NdSMkqrJcnzPV2TeqkXeW+o/8ockHqoiDlRYwUbnGFvAHm/WD6W6nvqKM9W6V+sZ
f/I2lU5zlmbpTtzU7EOVS8lPsALyjrMwHQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:11:31 2025 by rpki-client