Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa
File:                     dba30138-3d5e-38b5-91a7-e87672ea0f44.roa (raw, json)
Hash identifier:          5fF/GeIA7sJP7cMIijyeCAf4oz3bIiw0l75gAlJokyI=
Subject key identifier:   DC:8B:C0:77:48:54:A6:B6:C9:DA:B8:1E:73:32:63:51:F6:D8:44:1E
Certificate issuer:       /CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
Certificate serial:       010D0C9F43285849E2252D84F6571C155454C400
Authority key identifier: 9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     33194
IP address blocks:        2620:10:a000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:2d:84:f6:57:1c:15:54:54:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fb495fa-b5b2-4d47-aab0-bb476ca61963
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=969d9231-73e1-4b39-b46d-2bda1bd3b738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:35:2a:c8:79:5b:e1:be:7c:ec:eb:19:b1:
                    85:6e:0a:f9:69:30:5a:8c:93:99:dc:fa:2e:60:7c:
                    91:d7:64:a6:c7:c1:13:5c:40:fb:43:4e:3c:7d:31:
                    1d:4b:65:25:02:ba:a1:af:05:92:bb:a8:24:25:5a:
                    67:e0:7d:f7:c6:13:47:6e:6f:37:4d:59:9a:02:5d:
                    74:c6:26:33:f2:63:b3:46:7d:ca:47:78:1e:e0:19:
                    5f:0b:cf:12:e0:e8:e9:82:f9:40:27:5b:7c:e5:7a:
                    52:f4:e5:31:f2:7c:a9:65:86:ec:0c:03:a4:ce:21:
                    e7:80:d9:bd:7f:bd:ad:c1:85:b4:4f:99:51:c3:9a:
                    e4:be:ce:77:a9:93:3f:7a:5f:15:1d:1b:2f:8f:95:
                    4b:ae:34:47:89:f8:1c:0e:9e:0a:aa:a9:05:c8:c1:
                    1c:73:52:37:09:02:1e:a8:55:9f:00:ea:78:82:6b:
                    6e:44:a9:bc:e6:58:8f:a5:00:95:a2:12:2d:e6:c3:
                    19:7a:e4:85:98:d7:53:1b:79:d9:7d:27:7c:c7:58:
                    65:c5:e0:15:2c:e2:10:71:69:d2:ef:17:c6:08:ed:
                    5b:6b:47:b1:e4:62:be:82:91:08:b0:31:ad:a3:62:
                    c2:07:cb:19:c3:cc:8a:f0:ff:9e:13:23:b2:97:0a:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8B:C0:77:48:54:A6:B6:C9:DA:B8:1E:73:32:63:51:F6:D8:44:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/dba30138-3d5e-38b5-91a7-e87672ea0f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963/2fb495fa-b5b2-4d47-aab0-bb476ca61963.crl

            X509v3 Authority Key Identifier:
                keyid:9C:27:42:85:58:D4:D6:AA:7D:F7:C5:8B:92:6C:36:9D:A4:85:7F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2fb495fa-b5b2-4d47-aab0-bb476ca61963.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:b9:c1:ec:11:52:24:98:bd:db:00:b2:cb:53:f5:e9:29:9a:
         6c:da:68:6e:1c:08:08:55:1b:9f:53:1d:bf:d7:19:da:4d:ab:
         0d:40:6b:fc:80:b4:ce:da:b4:b7:c9:bc:77:c4:65:ec:9d:08:
         8f:06:48:66:f1:ad:69:be:80:9f:31:46:23:e4:bf:58:49:00:
         0b:4f:1f:55:19:f9:6e:f5:f4:09:1e:d8:ec:4d:c1:28:c8:ad:
         23:da:02:80:ce:63:0b:ea:08:84:e5:71:0f:85:5d:f6:2c:4c:
         db:18:c5:37:3c:98:8a:57:15:cc:9d:3e:97:cf:8b:7d:2a:18:
         c7:a0:43:99:b5:e7:32:bc:60:74:0b:9a:a6:36:5d:61:22:f4:
         57:a9:e3:59:8a:5b:52:42:3c:6f:25:26:ba:da:c7:79:4c:7b:
         17:7d:7e:98:47:aa:e8:66:1c:72:6a:4c:6d:79:2d:f6:bd:2e:
         d7:68:00:0d:1d:64:b9:ef:95:18:77:06:93:69:24:b7:85:d2:
         9b:60:c8:4e:52:2f:74:cd:8f:0c:f9:4f:0d:09:c2:ea:45:95:
         49:1e:85:01:f7:0d:35:26:f1:a9:61:b2:82:ca:88:28:5b:df:
         05:98:70:73:60:94:c0:1c:29:e5:46:23:2c:c4:0b:c0:d9:4f:
         63:df:f7:f1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEniJS2E9lccFVRUxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZiNDk1ZmEtYjViMi00ZDQ3LWFhYjAtYmI0NzZjYTYx
OTYzMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
OTY5ZDkyMzEtNzNlMS00YjM5LWI0NmQtMmJkYTFiZDNiNzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorU1Ksh5W+G+fOzrGbGFbgr5aTBajJOZ3Pou
YHyR12Smx8ETXED7Q048fTEdS2UlArqhrwWSu6gkJVpn4H33xhNHbm83TVmaAl10
xiYz8mOzRn3KR3ge4BlfC88S4OjpgvlAJ1t85XpS9OUx8nypZYbsDAOkziHngNm9
f72twYW0T5lRw5rkvs53qZM/el8VHRsvj5VLrjRHifgcDp4KqqkFyMEcc1I3CQIe
qFWfAOp4gmtuRKm85liPpQCVohIt5sMZeuSFmNdTG3nZfSd8x1hlxeAVLOIQcWnS
7xfGCO1ba0ex5GK+gpEIsDGto2LCB8sZw8yK8P+eEyOylwq0fQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNyLwHdIVKa2ydq4HnMyY1H22EQeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZmI0
OTVmYS1iNWIyLTRkNDctYWFiMC1iYjQ3NmNhNjE5NjMvZGJhMzAxMzgtM2Q1ZS0z
OGI1LTkxYTctZTg3NjcyZWEwZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmZiNDk1ZmEtYjViMi00ZDQ3LWFh
YjAtYmI0NzZjYTYxOTYzLzJmYjQ5NWZhLWI1YjItNGQ0Ny1hYWIwLWJiNDc2Y2E2
MTk2My5jcmwwHwYDVR0jBBgwFoAUnCdChVjU1qp998WLkmw2naSFf5QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZmI0OTVmYS1iNWIyLTRkNDctYWFiMC1iYjQ3
NmNhNjE5NjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAEKAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMa5wewRUiSYvdsAsstT9ekpmmzaaG4cCAhVG59THb/XGdpNqw1A
a/yAtM7atLfJvHfEZeydCI8GSGbxrWm+gJ8xRiPkv1hJAAtPH1UZ+W719Ake2OxN
wSjIrSPaAoDOYwvqCITlcQ+FXfYsTNsYxTc8mIpXFcydPpfPi30qGMegQ5m15zK8
YHQLmqY2XWEi9Fep41mKW1JCPG8lJrrax3lMexd9fphHquhmHHJqTG15Lfa9Ltdo
AA0dZLnvlRh3BpNpJLeF0ptgyE5SL3TNjwz5Tw0JwupFlUkehQH3DTUm8alhsoLK
iChb3wWYcHNglMAcKeVGIyzEC8DZT2Pf9/E=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:23 2025 by rpki-client