Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/a3636781-2d3c-3865-ae28-ce8113377e9f.roa
File:                     a3636781-2d3c-3865-ae28-ce8113377e9f.roa (raw, json)
Hash identifier:          1baRS3IHae2uXQwWJJUAFOQEbPQwEW53BAsQMiquzfg=
Subject key identifier:   91:C3:9F:6B:01:71:76:09:34:06:FC:58:6C:45:64:84:80:9E:BC:7F
Certificate issuer:       /CN=253f385b-feb4-4b22-9447-502d6e3a69ac
Certificate serial:       010D0C9F4328584AA42B6D7EE343BD6C9BA94680
Authority key identifier: 91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/a3636781-2d3c-3865-ae28-ce8113377e9f.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     401081
IP address blocks:        2604:ae0:140::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:6d:7e:e3:43:bd:6c:9b:a9:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253f385b-feb4-4b22-9447-502d6e3a69ac
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=5d4314c8-ee9d-42e7-820d-c3d1e81f25dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:08:81:98:a7:cb:96:73:b7:e2:bb:8e:24:
                    77:20:f5:83:15:56:37:92:c4:9e:9b:91:36:f0:e8:
                    40:50:b3:31:26:03:98:4e:f5:9e:73:2b:b3:9a:99:
                    28:80:da:e9:4c:89:3d:e5:7b:52:7c:b9:b7:f9:48:
                    dd:ea:0c:4c:56:88:35:af:2f:6a:e1:89:83:10:94:
                    f5:a2:9d:9e:5a:c3:f8:64:8c:14:91:00:a6:79:47:
                    a1:bd:99:07:d9:f8:7c:04:f2:f6:2f:7a:fa:a8:9e:
                    67:b4:cc:9c:36:d7:7c:c9:f1:05:72:dd:29:bf:ab:
                    e4:a6:73:84:3e:37:c4:ed:97:df:bb:fd:62:87:df:
                    ca:f2:77:68:c5:e8:6e:56:e7:67:fa:c6:78:23:4e:
                    4d:a8:36:29:6b:3a:85:b8:0c:f1:61:db:cd:56:0b:
                    21:5a:0d:e0:9b:c8:ec:c8:94:f9:4e:bf:e0:18:a1:
                    ea:be:05:85:a3:b5:a9:f0:80:dc:35:f5:c3:d0:af:
                    74:7f:e0:d2:76:78:74:96:58:66:c0:4a:42:d0:9b:
                    4f:73:ef:5d:c8:27:fd:0a:9f:25:20:06:a1:b9:df:
                    07:46:fd:e2:86:27:d8:bb:2c:7a:b5:d3:f6:70:6a:
                    cc:73:0c:71:01:9e:28:9c:08:db:50:39:82:31:ad:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C3:9F:6B:01:71:76:09:34:06:FC:58:6C:45:64:84:80:9E:BC:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/a3636781-2d3c-3865-ae28-ce8113377e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl

            X509v3 Authority Key Identifier:
                keyid:91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ae0:140::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ab:8e:8c:b7:ce:3e:6b:b9:a0:92:25:bf:15:ef:cf:74:bb:
         ed:38:f2:a6:3e:e5:c3:54:ca:57:76:bb:d0:28:d9:62:b7:03:
         c9:8a:8b:73:2b:46:cc:c2:b6:96:03:4a:63:f6:e4:f6:84:8a:
         ab:0e:29:09:a3:df:cf:82:13:94:c4:c2:69:bf:e4:e3:ab:81:
         64:40:61:7f:73:58:dc:0a:73:e8:74:46:32:3a:b1:8f:12:10:
         26:10:be:c3:36:f0:4c:16:61:88:92:53:68:69:03:89:af:12:
         97:1f:92:0b:28:af:e7:fa:4a:24:c8:df:95:32:78:18:f9:48:
         8f:16:0a:4a:b4:ad:e0:0b:8d:7b:df:1f:bd:05:c2:7c:59:fe:
         51:d0:62:0b:5c:b9:8f:85:8e:1c:98:ed:b5:7e:b0:83:5b:71:
         e1:af:5f:76:90:d0:2c:dd:44:33:5c:3a:c2:8c:05:2b:87:a3:
         02:4b:e5:7a:af:85:12:21:03:aa:e0:26:48:73:50:42:36:f0:
         35:eb:e0:2d:52:0d:6b:7a:ee:af:44:1a:3d:81:b9:47:6f:b5:
         79:0a:b5:d8:78:00:04:e1:5b:7e:cf:e5:0d:76:0e:c4:87:57:
         e1:79:7d:e9:0d:da:55:ed:16:8e:6c:0c:b7:37:3a:66:0e:87:
         23:d8:e6:8e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqkK21+40O9bJupRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzZjM4NWItZmViNC00YjIyLTk0NDctNTAyZDZlM2E2
OWFjMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
NWQ0MzE0YzgtZWU5ZC00MmU3LTgyMGQtYzNkMWU4MWYyNWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ4IgZiny5Zzt+K7jiR3IPWDFVY3ksSem5E2
8OhAULMxJgOYTvWecyuzmpkogNrpTIk95XtSfLm3+Ujd6gxMVog1ry9q4YmDEJT1
op2eWsP4ZIwUkQCmeUehvZkH2fh8BPL2L3r6qJ5ntMycNtd8yfEFct0pv6vkpnOE
PjfE7Zffu/1ih9/K8ndoxehuVudn+sZ4I05NqDYpazqFuAzxYdvNVgshWg3gm8js
yJT5Tr/gGKHqvgWFo7Wp8IDcNfXD0K90f+DSdnh0llhmwEpC0JtPc+9dyCf9Cp8l
IAahud8HRv3ihifYuyx6tdP2cGrMcwxxAZ4onAjbUDmCMa2vBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJHDn2sBcXYJNAb8WGxFZISAnrx/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNm
Mzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJkNmUzYTY5YWMvYTM2MzY3ODEtMmQzYy0z
ODY1LWFlMjgtY2U4MTEzMzc3ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjUzZjM4NWItZmViNC00YjIyLTk0
NDctNTAyZDZlM2E2OWFjLzI1M2YzODViLWZlYjQtNGIyMi05NDQ3LTUwMmQ2ZTNh
NjlhYy5jcmwwHwYDVR0jBBgwFoAUkUpN/2Rq2ifzR3KSCn3ur07uzf8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNmMzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJk
NmUzYTY5YWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgQK4AFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACqrjoy3zj5ruaCSJb8V7890u+048qY+5cNUyld2u9Ao2WK3A8mK
i3MrRszCtpYDSmP25PaEiqsOKQmj38+CE5TEwmm/5OOrgWRAYX9zWNwKc+h0RjI6
sY8SECYQvsM28EwWYYiSU2hpA4mvEpcfkgsor+f6SiTI35UyeBj5SI8WCkq0reAL
jXvfH70FwnxZ/lHQYgtcuY+FjhyY7bV+sINbceGvX3aQ0CzdRDNcOsKMBSuHowJL
5XqvhRIhA6rgJkhzUEI28DXr4C1SDWt67q9EGj2BuUdvtXkKtdh4AAThW37P5Q12
DsSHV+F5fekN2lXtFo5sDLc3OmYOhyPY5o4=
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:23:24 2025 by rpki-client