Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77536eab-7b49-3f2f-aa8d-de14d0f5446b.roa
File:                     77536eab-7b49-3f2f-aa8d-de14d0f5446b.roa (raw, json)
Hash identifier:          IraOBRUwVp84ab1V8FM1wu+WUHzDS57sx8YxXfLy198=
Subject key identifier:   64:48:DB:88:F2:B5:16:E2:93:DB:2E:8B:E6:44:2A:79:0A:99:46:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB221387A5A9E893BA23FD380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77536eab-7b49-3f2f-aa8d-de14d0f5446b.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     7016
IP address blocks:        2603:2547:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:38:7a:5a:9e:89:3b:a2:3f:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=3d25c186-9274-463a-9658-152944af14b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3f:69:4f:ba:39:5b:3f:45:0b:aa:b4:60:81:
                    8c:25:65:55:4a:ba:e8:59:60:fc:b0:61:f8:8d:bf:
                    d9:05:b1:49:0e:52:73:f2:69:72:a1:a1:11:b4:76:
                    7b:f6:3d:cc:31:2e:bf:75:d1:21:95:d1:f5:91:f3:
                    a1:7e:27:f6:7f:8e:2e:0e:16:c1:90:4d:64:0e:d8:
                    50:d8:4c:19:08:8e:a5:99:35:3d:33:ae:b8:be:80:
                    29:bb:24:a4:4f:fa:90:3c:d7:77:4c:ed:7b:e7:40:
                    ce:be:61:27:9e:14:78:a8:a2:53:32:a2:86:c7:2e:
                    1a:04:91:c3:ef:69:8d:6f:ce:5a:8a:d2:bd:50:ab:
                    52:d0:1b:de:7b:30:72:f6:02:2d:bf:81:6f:38:7c:
                    2d:93:dd:9f:35:04:08:2f:dd:af:f1:fb:c6:68:63:
                    3e:a9:34:34:10:71:78:81:f1:1f:21:86:89:06:3d:
                    16:38:fa:82:d1:98:3d:19:d0:d1:82:1f:71:c5:42:
                    06:00:c0:2d:78:88:8c:c7:eb:3a:c7:3d:cf:2e:e8:
                    c5:cf:b7:a5:fb:a1:2c:49:04:df:21:93:e7:01:f1:
                    81:d6:eb:d0:a9:cc:55:6d:78:45:c8:70:3f:f9:fa:
                    f4:43:e1:d5:1e:7d:b3:aa:16:7d:74:bd:e2:4d:1e:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:48:DB:88:F2:B5:16:E2:93:DB:2E:8B:E6:44:2A:79:0A:99:46:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/77536eab-7b49-3f2f-aa8d-de14d0f5446b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2547:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:2b:b2:95:61:99:46:92:58:ba:2f:90:c5:83:e3:fc:2c:b0:
         ad:31:68:3b:55:ce:a6:bf:dc:da:7a:72:ef:f2:08:8c:3a:f4:
         a3:4f:d1:6b:cc:c8:62:20:d5:f4:2b:29:57:73:c8:e8:ab:69:
         8a:9c:4f:06:ad:48:f3:6b:b5:01:89:41:38:4f:7c:a0:f7:f8:
         53:03:fd:12:cd:63:56:43:fc:77:89:d2:96:a3:27:77:f9:4f:
         3a:32:2d:e8:4f:94:f2:f6:11:c7:c3:c1:be:78:62:15:f9:26:
         60:d0:05:60:b6:4c:cf:9e:3e:b8:f4:c1:23:3d:28:ec:58:65:
         67:44:a7:2e:68:68:9c:04:88:f0:da:f0:7a:f0:aa:9b:d1:e0:
         07:f1:57:85:6e:06:19:a4:29:d3:21:d5:66:a4:05:4c:36:01:
         3a:06:35:29:b3:ed:29:89:cd:08:e0:5b:2e:b7:83:58:78:75:
         28:7f:ed:4c:23:a5:f2:e7:d9:9a:c0:51:52:86:1a:88:99:87:
         9f:5c:20:e9:0a:1b:b2:21:5a:a6:77:81:7d:f9:d9:cf:78:b4:
         9a:4f:f4:36:b8:a0:25:fb:4f:e7:d7:af:0b:ed:1e:1e:a1:1d:
         71:7b:f5:eb:20:81:13:0e:a5:41:e1:b6:4c:0b:6b:dd:49:3d:
         79:73:89:89
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEqyITh6Wp6JO6I/04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
M2QyNWMxODYtOTI3NC00NjNhLTk2NTgtMTUyOTQ0YWYxNGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj9pT7o5Wz9FC6q0YIGMJWVVSrroWWD8sGH4
jb/ZBbFJDlJz8mlyoaERtHZ79j3MMS6/ddEhldH1kfOhfif2f44uDhbBkE1kDthQ
2EwZCI6lmTU9M664voApuySkT/qQPNd3TO1750DOvmEnnhR4qKJTMqKGxy4aBJHD
72mNb85aitK9UKtS0BveezBy9gItv4FvOHwtk92fNQQIL92v8fvGaGM+qTQ0EHF4
gfEfIYaJBj0WOPqC0Zg9GdDRgh9xxUIGAMAteIiMx+s6xz3PLujFz7el+6EsSQTf
IZPnAfGB1uvQqcxVbXhFyHA/+fr0Q+HVHn2zqhZ9dL3iTR7wrQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGRI24jytRbik9sui+ZEKnkKmUajMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzc1MzZlYWItN2I0OS0z
ZjJmLWFhOGQtZGUxNGQwZjU0NDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMlR4Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmyuylWGZRpJYui+QxYPj/CywrTFoO1XOpr/c2npy7/IIjDr0o0/R
a8zIYiDV9CspV3PI6KtpipxPBq1I82u1AYlBOE98oPf4UwP9Es1jVkP8d4nSlqMn
d/lPOjIt6E+U8vYRx8PBvnhiFfkmYNAFYLZMz54+uPTBIz0o7FhlZ0SnLmhonASI
8NrwevCqm9HgB/FXhW4GGaQp0yHVZqQFTDYBOgY1KbPtKYnNCOBbLreDWHh1KH/t
TCOl8ufZmsBRUoYaiJmHn1wg6QobsiFapneBffnZz3i0mk/0NrigJftP59evC+0e
HqEdcXv16yCBEw6lQeG2TAtr3Uk9eXOJiQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 19:28:32 2025 by rpki-client