Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dded56b-9544-351d-8215-3913fa302786.roa
File:                     0dded56b-9544-351d-8215-3913fa302786.roa (raw, json)
Hash identifier:          obmLSZPsKDGGlFousk8rshZUv7pupGSW8umTWJOGauA=
Subject key identifier:   0A:8E:E5:1A:5E:70:9C:5B:74:46:A2:4D:50:3F:CB:55:7C:28:00:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D165215709C9B363DFB87A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dded56b-9544-351d-8215-3913fa302786.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     7016
IP address blocks:        2601:98b:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:21:57:09:c9:b3:63:df:b8:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=2fb3748d-2537-4ea5-a38e-580904b55642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:6e:cf:45:b9:52:a0:f5:cd:de:e3:0d:22:
                    cb:b7:8d:93:c5:82:60:45:30:09:72:9b:60:c5:99:
                    87:d1:ee:88:27:2c:b1:b7:22:39:bb:17:cd:75:96:
                    49:98:f0:39:fa:0a:d8:62:c1:58:2a:98:cb:bb:04:
                    bd:fe:76:e2:d2:81:41:f3:03:48:52:15:31:13:2b:
                    13:a6:92:02:90:ae:4b:67:2f:67:81:96:67:a5:2d:
                    23:6c:4f:7b:ec:a0:e6:72:36:22:02:7a:f0:a3:44:
                    78:5a:93:d7:e0:14:5c:5d:1e:df:8a:90:b0:77:c8:
                    b2:f9:47:0f:72:3d:32:dd:78:e1:9c:05:45:ef:b2:
                    f7:9e:2d:c3:18:43:80:12:82:de:1f:e7:8b:2a:61:
                    27:77:c5:e0:01:72:2d:6c:1b:f9:4c:aa:6a:47:15:
                    a0:ea:8c:49:91:ba:90:9f:bf:57:b7:85:75:d7:87:
                    cc:53:a7:51:ba:b7:f2:c1:75:36:c6:bd:eb:d4:26:
                    08:4b:dd:64:73:7d:f9:23:5d:90:65:e8:4c:e4:93:
                    f7:48:3a:4f:4f:d7:72:2c:ee:9b:2a:84:c0:52:8a:
                    4a:2f:a3:45:d2:e7:5d:cb:2c:d6:53:f1:3b:55:38:
                    91:9b:eb:b7:c1:04:a5:66:41:f6:e0:25:fe:fc:70:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8E:E5:1A:5E:70:9C:5B:74:46:A2:4D:50:3F:CB:55:7C:28:00:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dded56b-9544-351d-8215-3913fa302786.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:98b:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7b:f8:0d:b3:bf:d1:61:b1:5b:45:bc:20:64:5c:af:d5:fb:
         39:e2:73:4b:ea:68:52:65:b4:29:d5:ca:fa:c0:17:30:66:7e:
         0a:4d:94:6e:e7:6a:92:28:ff:8b:40:49:a2:e2:60:ac:50:e4:
         b8:80:e1:ce:db:0f:4d:c0:94:2e:d9:a8:df:d8:d1:84:d1:ca:
         8b:da:86:80:fa:65:32:e8:23:31:5b:06:6b:cf:f6:cf:d1:7f:
         3a:d9:c7:81:fb:97:92:86:36:ef:f8:de:7a:f8:50:cd:98:2e:
         cf:17:03:f0:be:54:e8:5a:88:d0:26:f3:12:bb:e7:ef:2a:63:
         6b:40:28:30:83:fb:c0:43:6a:c4:58:a6:e2:1f:c5:ef:38:61:
         0e:4e:52:5c:52:54:2c:d0:7d:c0:c2:7f:13:22:2a:fe:c0:48:
         a6:33:0b:c9:c1:ef:fe:5a:77:78:a8:11:f6:b8:a8:7a:05:0c:
         2e:c7:f2:2e:ff:3d:ae:63:d5:ec:9f:08:a8:bc:9c:86:9d:39:
         1a:52:3d:b7:73:bf:26:0b:34:6d:3c:b1:ac:e9:23:fa:54:ec:
         51:d0:d6:d5:4b:f6:50:80:64:65:a8:ee:bd:7d:c4:21:f8:e7:
         1c:57:e0:49:78:5e:a6:ff:11:13:7d:ca:1e:65:71:7f:d1:52:
         a8:ae:72:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnRZSFXCcmzY9+4egAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MmZiMzc0OGQtMjUzNy00ZWE1LWEzOGUtNTgwOTA0YjU1NjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+puz0W5UqD1zd7jDSLLt42TxYJgRTAJcptg
xZmH0e6IJyyxtyI5uxfNdZZJmPA5+grYYsFYKpjLuwS9/nbi0oFB8wNIUhUxEysT
ppICkK5LZy9ngZZnpS0jbE977KDmcjYiAnrwo0R4WpPX4BRcXR7fipCwd8iy+UcP
cj0y3XjhnAVF77L3ni3DGEOAEoLeH+eLKmEnd8XgAXItbBv5TKpqRxWg6oxJkbqQ
n79Xt4V114fMU6dRurfywXU2xr3r1CYIS91kc335I12QZehM5JP3SDpPT9dyLO6b
KoTAUopKL6NF0uddyyzWU/E7VTiRm+u3wQSlZkH24CX+/HCOEQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAqO5RpecJxbdEaiTVA/y1V8KACQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGRkZWQ1NmItOTU0NC0z
NTFkLTgyMTUtMzkxM2ZhMzAyNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEJi0Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAXnv4DbO/0WGxW0W8IGRcr9X7OeJzS+poUmW0KdXK+sAXMGZ+Ck2U
budqkij/i0BJouJgrFDkuIDhztsPTcCULtmo39jRhNHKi9qGgPplMugjMVsGa8/2
z9F/OtnHgfuXkoY27/jeevhQzZguzxcD8L5U6FqI0CbzErvn7ypja0AoMIP7wENq
xFim4h/F7zhhDk5SXFJULNB9wMJ/EyIq/sBIpjMLycHv/lp3eKgR9rioegUMLsfy
Lv89rmPV7J8IqLychp05GlI9t3O/Jgs0bTyxrOkj+lTsUdDW1Uv2UIBkZajuvX3E
IfjnHFfgSXhepv8RE33KHmVxf9FSqK5yEQ==
-----END CERTIFICATE-----
Generated at Mon May 12 12:53:34 2025 by rpki-client