Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3011da89-cb07-33f9-8d4d-852e323ef83c.roa
File:                     3011da89-cb07-33f9-8d4d-852e323ef83c.roa (raw, json)
Hash identifier:          7MZ2iN1Jpy6xFczEvlir8sOgzpdKx1dtRKUd9wH/IY0=
Subject key identifier:   1F:9A:18:25:8F:81:4A:2E:2B:AA:1A:33:05:A4:12:4D:01:6C:32:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE0313D3CBC3324C1EC5F8500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3011da89-cb07-33f9-8d4d-852e323ef83c.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2603:20ce:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:3d:3c:bc:33:24:c1:ec:5f:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=cb1e3b4d-1908-4513-a5bc-00111f6f8a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:91:59:e5:1c:07:7b:c3:df:7f:41:db:d2:
                    08:52:2a:a7:be:9c:1b:44:58:38:3d:2d:5c:3a:a4:
                    90:85:18:63:20:b7:f8:b8:58:de:24:c8:68:ce:63:
                    5b:8c:1a:27:dc:7b:d9:a2:97:95:dd:69:ce:22:e6:
                    1e:77:8d:c4:bd:c0:32:d2:fe:e1:d8:4d:e3:70:57:
                    43:39:c5:e7:3a:95:bc:75:8b:e1:83:3f:ac:5c:b4:
                    c1:c6:b4:96:e4:02:1d:eb:ab:77:9f:6a:b3:b0:72:
                    5e:22:39:0c:aa:3d:e1:be:19:18:19:6b:06:3e:34:
                    ec:ee:2f:1d:47:4e:63:bc:50:5c:10:0a:20:9e:61:
                    4b:19:83:e5:0f:8e:a3:63:dd:77:27:0f:b2:de:fe:
                    4e:97:c0:42:57:30:c9:bb:da:6d:26:6c:0b:a2:36:
                    f2:07:e3:90:13:da:bf:6f:d7:28:f7:d8:66:c3:29:
                    0a:10:f5:4a:71:31:98:36:43:ae:7d:9a:b8:87:bf:
                    a4:eb:42:a3:be:9d:d9:1f:07:6d:66:e0:f2:6e:51:
                    5c:bb:77:cd:55:63:53:4d:6b:cf:19:40:e2:95:3b:
                    65:b9:43:7d:0f:03:c7:86:48:ef:c0:fc:c2:4d:39:
                    b6:45:3f:f8:3e:54:d8:ca:bc:67:6c:b5:d5:04:66:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9A:18:25:8F:81:4A:2E:2B:AA:1A:33:05:A4:12:4D:01:6C:32:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3011da89-cb07-33f9-8d4d-852e323ef83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:20ce:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:41:a7:e6:5d:60:4e:c0:a0:43:4f:0b:0b:6f:cc:e9:00:3a:
         60:9d:e7:3d:c7:f3:65:c8:f9:b0:40:79:5f:14:f6:1b:87:e4:
         ff:ab:1c:0c:5c:ae:3a:87:0d:cd:20:d6:cf:94:d2:c1:9f:1f:
         c0:60:bc:d5:18:b9:1b:6f:fe:98:be:1c:f4:f2:1a:43:78:4b:
         35:72:bb:01:5e:f5:af:87:55:db:58:e1:70:6b:f3:71:44:d0:
         9c:82:b2:72:45:1b:42:2e:d3:d0:4f:04:34:4e:95:10:c6:fb:
         bb:df:8c:9b:bd:9d:4e:55:f1:02:ff:e1:1e:3c:07:55:27:e1:
         57:bb:e5:b7:a5:0f:4d:cb:3f:f3:a4:d8:d8:20:3d:52:7b:81:
         da:76:6b:80:48:84:82:25:ad:e5:43:02:9e:06:0c:ba:86:7e:
         e7:42:fc:4d:ba:e4:d0:11:02:bf:d5:0b:5a:8f:94:19:d9:d2:
         30:13:f4:ee:96:fe:5a:50:ef:27:7a:9f:87:fc:45:6a:08:04:
         e2:d6:11:73:72:1e:14:6b:67:86:a9:0b:b0:f8:af:21:45:71:
         7e:7d:4d:44:24:e3:cd:2a:2a:48:44:b8:5d:03:6e:ef:3e:69:
         be:41:21:5c:10:bf:9a:ae:01:0b:ab:67:1d:82:7b:b3:eb:1f:
         51:93:7a:ad
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErgMT08vDMkwexfhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
Y2IxZTNiNGQtMTkwOC00NTEzLWE1YmMtMDAxMTFmNmY4YTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7KRWeUcB3vD339B29IIUiqnvpwbRFg4PS1c
OqSQhRhjILf4uFjeJMhozmNbjBon3HvZopeV3WnOIuYed43EvcAy0v7h2E3jcFdD
OcXnOpW8dYvhgz+sXLTBxrSW5AId66t3n2qzsHJeIjkMqj3hvhkYGWsGPjTs7i8d
R05jvFBcEAognmFLGYPlD46jY913Jw+y3v5Ol8BCVzDJu9ptJmwLojbyB+OQE9q/
b9co99hmwykKEPVKcTGYNkOufZq4h7+k60Kjvp3ZHwdtZuDyblFcu3fNVWNTTWvP
GUDilTtluUN9DwPHhkjvwPzCTTm2RT/4PlTYyrxnbLXVBGZ3QQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB+aGCWPgUouK6oaMwWkEk0BbDITMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzAxMWRhODktY2IwNy0z
M2Y5LThkNGQtODUyZTMyM2VmODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgzoAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEA0kGn5l1gTsCgQ08LC2/M6QA6YJ3nPcfzZcj5sEB5XxT2G4fk/6sc
DFyuOocNzSDWz5TSwZ8fwGC81Ri5G2/+mL4c9PIaQ3hLNXK7AV71r4dV21jhcGvz
cUTQnIKyckUbQi7T0E8ENE6VEMb7u9+Mm72dTlXxAv/hHjwHVSfhV7vlt6UPTcs/
86TY2CA9UnuB2nZrgEiEgiWt5UMCngYMuoZ+50L8Tbrk0BECv9ULWo+UGdnSMBP0
7pb+WlDvJ3qfh/xFaggE4tYRc3IeFGtnhqkLsPivIUVxfn1NRCTjzSoqSES4XQNu
7z5pvkEhXBC/mq4BC6tnHYJ7s+sfUZN6rQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:34:13 2025 by rpki-client