Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c79e225d-4099-3054-b4f6-ce539ad185d3.roa
File:                     c79e225d-4099-3054-b4f6-ce539ad185d3.roa (raw, json)
Hash identifier:          V1lYBl0r4kuF0Rzb9nFkeSqTLgjGoW9mVy8Mmcc9rMo=
Subject key identifier:   F4:95:59:9D:DC:72:D5:94:36:C2:4B:8E:8B:F6:59:FF:4F:47:D5:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EE42FCAA45B6F84AF71F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c79e225d-4099-3054-b4f6-ce539ad185d3.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        2603:2406:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ee:42:fc:aa:45:b6:f8:4a:f7:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=72e712f2-2d76-46c9-aa7d-3e8645d856bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:85:03:4c:99:90:91:75:31:89:a0:12:3b:
                    67:b7:e6:45:5c:db:4f:c8:38:54:b2:1f:d2:74:ba:
                    af:b8:6a:92:01:86:02:26:6a:81:50:13:ae:2b:b0:
                    bc:04:c9:fb:b3:3c:35:a4:6d:03:88:3e:32:ec:5e:
                    12:4b:2e:b2:30:83:48:5e:23:57:3d:ce:ae:71:fa:
                    c0:60:f5:10:15:cf:f1:c0:9c:d7:fb:53:13:8b:9e:
                    43:28:a2:7c:0d:03:dd:2e:78:3a:2a:67:9a:3b:06:
                    fe:77:28:18:4f:63:0f:5a:ba:3d:5d:cc:07:a1:97:
                    20:6e:9f:1b:bb:46:cd:b1:2c:3f:12:89:d7:4e:7a:
                    93:e6:de:1f:27:e4:ea:45:db:d8:fd:39:4f:1c:20:
                    fe:65:28:83:ca:bc:c4:9f:18:1a:7b:b7:a2:d8:db:
                    b8:77:a5:a8:ce:67:09:90:fb:4b:92:81:8a:5a:68:
                    5f:e7:e2:e8:53:4d:72:4b:42:64:29:00:e7:88:96:
                    c5:f9:cf:85:47:77:cf:a6:5b:5d:1d:d9:26:d8:1f:
                    9f:69:14:ea:a5:e8:11:9b:87:19:e3:0b:54:d5:f4:
                    92:0f:1f:ac:76:d8:6b:0b:8a:c3:4c:b3:16:c6:94:
                    f1:13:b2:77:2b:9a:cc:99:9a:e8:ec:60:03:ae:69:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:95:59:9D:DC:72:D5:94:36:C2:4B:8E:8B:F6:59:FF:4F:47:D5:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c79e225d-4099-3054-b4f6-ce539ad185d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2406:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5b:0f:ec:66:f9:4d:29:a3:b4:d2:ec:41:34:c2:9e:fd:fb:
         e0:45:17:a4:93:8b:f5:6c:04:c5:56:f4:06:d9:dc:56:c4:43:
         35:da:3f:fb:18:af:06:51:42:d2:ff:a0:2e:56:4a:59:ef:99:
         b3:aa:3c:bc:34:ed:03:e8:4b:b1:85:e2:bd:e0:d7:97:d5:02:
         82:7b:07:31:0f:8c:5c:19:26:e7:98:30:1a:13:2e:79:16:b9:
         9f:ac:25:db:58:61:65:5d:17:94:1b:20:ab:a8:86:96:40:25:
         01:8f:f3:4c:15:72:27:2e:66:ea:56:67:e8:6d:67:1d:a5:5e:
         5b:b0:54:8d:e5:97:f8:94:1c:03:8d:b1:82:26:60:47:6a:fc:
         7f:14:7d:ec:d9:33:95:86:d4:dd:ea:9c:28:5d:80:a7:12:4d:
         70:98:9d:4c:18:a7:c7:51:26:da:43:76:bd:cb:a0:6a:13:0f:
         48:af:a4:b1:0d:f9:a2:9b:f8:f1:59:c2:4c:c7:16:10:d0:ba:
         e6:e8:20:ff:31:1b:5d:91:d0:0f:85:7c:18:97:f1:71:21:4b:
         0a:e2:53:b4:ac:8e:e6:d0:75:ca:ea:38:64:e0:98:bc:d2:18:
         b2:e3:c7:9f:75:83:7c:25:46:40:ce:bc:f1:41:30:65:e8:fc:
         8c:46:98:9d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq07kL8qkW2+Er3H4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NzJlNzEyZjItMmQ3Ni00NmM5LWFhN2QtM2U4NjQ1ZDg1NmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk2FA0yZkJF1MYmgEjtnt+ZFXNtPyDhUsh/S
dLqvuGqSAYYCJmqBUBOuK7C8BMn7szw1pG0DiD4y7F4SSy6yMINIXiNXPc6ucfrA
YPUQFc/xwJzX+1MTi55DKKJ8DQPdLng6KmeaOwb+dygYT2MPWro9XcwHoZcgbp8b
u0bNsSw/EonXTnqT5t4fJ+TqRdvY/TlPHCD+ZSiDyrzEnxgae7ei2Nu4d6WozmcJ
kPtLkoGKWmhf5+LoU01yS0JkKQDniJbF+c+FR3fPpltdHdkm2B+faRTqpegRm4cZ
4wtU1fSSDx+sdthrC4rDTLMWxpTxE7J3K5rMmZro7GADrmk9VwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPSVWZ3cctWUNsJLjov2Wf9PR9VqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzc5ZTIyNWQtNDA5OS0z
MDU0LWI0ZjYtY2U1MzlhZDE4NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMkBkAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAW1sP7Gb5TSmjtNLsQTTCnv374EUXpJOL9WwExVb0BtncVsRDNdo/
+xivBlFC0v+gLlZKWe+Zs6o8vDTtA+hLsYXiveDXl9UCgnsHMQ+MXBkm55gwGhMu
eRa5n6wl21hhZV0XlBsgq6iGlkAlAY/zTBVyJy5m6lZn6G1nHaVeW7BUjeWX+JQc
A42xgiZgR2r8fxR97NkzlYbU3eqcKF2ApxJNcJidTBinx1Em2kN2vcugahMPSK+k
sQ35opv48VnCTMcWENC65ugg/zEbXZHQD4V8GJfxcSFLCuJTtKyO5tB1yuo4ZOCY
vNIYsuPHn3WDfCVGQM688UEwZej8jEaYnQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:20 2025 by rpki-client