Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4d879e4-147a-300f-b228-dd88aff59e11.roa
File:                     e4d879e4-147a-300f-b228-dd88aff59e11.roa (raw, json)
Hash identifier:          RMRrt4OD74GCfPKZX8AhEDAmpbyKzuGvH9iFxFgaXFI=
Subject key identifier:   ED:75:9E:1C:2E:26:83:ED:C2:FF:A9:7A:6A:ED:3C:F0:62:4D:68:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBECADC855F90B9C0D7080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4d879e4-147a-300f-b228-dd88aff59e11.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        2603:2180:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:ec:ad:c8:55:f9:0b:9c:0d:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7f8d4795-44df-4456-a16f-26726cda9c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:dc:03:8b:eb:06:fc:c9:76:57:ea:db:23:
                    b8:ef:7e:80:79:a3:24:ae:5e:8d:d5:91:3d:fa:83:
                    d4:17:fd:ca:00:77:ac:89:d7:14:f6:e6:13:0b:98:
                    50:d1:33:64:62:5a:49:10:5d:d3:5e:6e:f7:50:5d:
                    73:31:da:83:2a:94:c9:13:50:4b:29:0e:28:18:00:
                    76:3f:28:76:2d:28:ee:61:55:8f:f4:8d:78:12:98:
                    84:df:68:13:50:9f:14:c2:f4:5d:49:29:7e:dd:e9:
                    ad:65:4b:5f:b3:4d:08:53:d0:bc:b2:fc:72:ff:33:
                    46:5d:c8:50:95:05:8e:d5:89:9a:ce:29:34:5e:94:
                    e9:94:55:3d:f2:0c:01:1c:61:42:73:67:09:36:ae:
                    a0:33:9b:35:ea:d9:a6:3e:16:eb:b7:ec:b4:57:f7:
                    70:db:1b:1a:1c:82:e6:f6:2a:b8:9e:66:ee:81:f4:
                    02:3e:38:0f:6b:62:72:42:7b:0d:c0:90:69:b2:86:
                    90:66:e5:72:2c:e6:c2:73:7f:3b:2f:f6:f2:c9:cd:
                    6b:45:94:80:1b:d0:b5:2e:4f:db:37:b5:38:81:b7:
                    50:cc:91:bf:99:f8:6b:ad:8b:c4:15:f3:25:fa:51:
                    16:91:d5:c3:97:8f:89:3c:ef:0a:0f:98:1f:e1:b8:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:75:9E:1C:2E:26:83:ED:C2:FF:A9:7A:6A:ED:3C:F0:62:4D:68:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4d879e4-147a-300f-b228-dd88aff59e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2180:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:48:26:3f:ea:a3:44:0d:0a:b6:87:89:e5:05:d1:54:c9:d0:
         2b:57:61:8d:0d:5f:23:04:74:e2:4a:16:39:a2:7f:1d:32:47:
         8c:36:7d:fb:92:16:ed:2f:ee:08:b6:bd:dc:c0:f0:80:aa:ce:
         16:df:69:15:4f:e4:9b:90:01:61:8b:cd:b8:4d:26:b2:7f:32:
         70:16:ea:4a:03:d2:32:96:7a:e7:20:58:a1:3b:16:0a:ef:01:
         10:f2:6d:39:bb:9a:97:55:17:7c:08:23:cf:94:62:84:b4:ad:
         2c:1a:3c:04:7a:9d:96:7f:ea:bf:6c:28:0c:52:70:7b:96:ed:
         25:f3:d2:f0:ed:f4:37:72:52:8a:2b:82:97:e7:b7:f6:d8:84:
         02:8a:cd:79:8b:7a:eb:fa:9c:f8:c7:05:a0:05:74:29:b7:41:
         3a:46:e8:b6:5e:ab:78:bf:e1:66:5c:06:34:3c:7e:51:c9:95:
         d3:8a:fa:9c:79:ac:e5:44:36:0d:39:ee:0f:25:a6:79:29:e9:
         ed:0c:3a:97:65:a1:fa:47:e0:fa:c7:41:73:13:59:bf:fb:a1:
         9c:04:35:7c:fc:82:9f:64:da:fd:f5:96:e3:bf:e5:35:98:aa:
         eb:6f:01:c1:fd:3e:ce:e5:4a:af:8c:e7:5f:0e:73:03:e6:14:
         b4:16:c4:c3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEq06+ytyFX5C5wNcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
N2Y4ZDQ3OTUtNDRkZi00NDU2LWExNmYtMjY3MjZjZGE5YzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsObcA4vrBvzJdlfq2yO4736AeaMkrl6N1ZE9
+oPUF/3KAHesidcU9uYTC5hQ0TNkYlpJEF3TXm73UF1zMdqDKpTJE1BLKQ4oGAB2
Pyh2LSjuYVWP9I14EpiE32gTUJ8UwvRdSSl+3emtZUtfs00IU9C8svxy/zNGXchQ
lQWO1Ymazik0XpTplFU98gwBHGFCc2cJNq6gM5s16tmmPhbrt+y0V/dw2xsaHILm
9iq4nmbugfQCPjgPa2JyQnsNwJBpsoaQZuVyLObCc387L/byyc1rRZSAG9C1Lk/b
N7U4gbdQzJG/mfhrrYvEFfMl+lEWkdXDl4+JPO8KD5gf4bgmnwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFO11nhwuJoPtwv+pemrtPPBiTWiQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTRkODc5ZTQtMTQ3YS0z
MDBmLWIyMjgtZGQ4OGFmZjU5ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMhgEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAn0gmP+qjRA0KtoeJ5QXRVMnQK1dhjQ1fIwR04koWOaJ/HTJHjDZ9
+5IW7S/uCLa93MDwgKrOFt9pFU/km5ABYYvNuE0msn8ycBbqSgPSMpZ65yBYoTsW
Cu8BEPJtObual1UXfAgjz5RihLStLBo8BHqdln/qv2woDFJwe5btJfPS8O30N3JS
iiuCl+e39tiEAorNeYt66/qc+McFoAV0KbdBOkbotl6reL/hZlwGNDx+UcmV04r6
nHms5UQ2DTnuDyWmeSnp7Qw6l2Wh+kfg+sdBcxNZv/uhnAQ1fPyCn2Ta/fWW47/l
NZiq628Bwf0+zuVKr4znXw5zA+YUtBbEww==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:27 2025 by rpki-client