Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba7ba024-0d4d-3246-869e-71f3206b28f9.roa
File:                     ba7ba024-0d4d-3246-869e-71f3206b28f9.roa (raw, json)
Hash identifier:          T/JfdTvjWfG3uHKTE7XnknUVRNAw8TxX3VvUG5eAJgw=
Subject key identifier:   5F:5A:CF:59:68:CB:65:CB:7D:D6:10:4E:8E:C0:9E:EC:9C:51:86:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFCD33CB933804F3DD05F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba7ba024-0d4d-3246-869e-71f3206b28f9.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     22909
IP address blocks:        2603:2844:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:d3:3c:b9:33:80:4f:3d:d0:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=53ea7ece-6e8e-48da-8516-5c9f19d11b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:ee:ab:c3:be:4d:4c:bf:a2:8d:e6:2a:be:
                    42:2c:fd:2e:f2:cf:d0:61:a1:1b:9e:37:80:a6:7d:
                    47:a9:bf:27:32:58:da:2d:65:f7:44:df:4f:e3:66:
                    83:95:12:73:90:b2:6a:83:f4:63:ad:46:ae:2f:b1:
                    99:10:72:86:07:e6:f8:67:c9:7a:54:26:b6:40:8f:
                    91:e5:64:66:ff:48:b3:eb:c4:42:1b:24:f2:ca:4d:
                    71:ed:c8:36:01:1b:5d:54:6d:ff:a9:12:71:fb:b2:
                    87:46:48:31:84:bd:4f:5f:d1:6a:98:68:f1:09:94:
                    31:ff:bb:bb:79:ad:cc:53:63:05:50:4c:cb:40:97:
                    81:d8:7b:e3:fd:e7:27:85:49:94:e1:6c:49:7a:5d:
                    15:ca:90:4a:ac:53:ef:54:f2:fe:bd:81:57:4e:49:
                    28:0f:da:b7:9a:b2:a3:ad:e7:5e:66:3c:8e:0b:ff:
                    88:84:fc:81:4d:59:b3:dd:ef:ac:03:5b:d0:93:cc:
                    8f:ec:33:9a:14:0f:17:3f:ce:8c:9c:17:77:16:42:
                    66:9e:a3:d8:3a:71:be:3d:85:21:65:bd:bc:7d:3a:
                    76:88:ec:f7:e5:09:f6:9b:d8:11:aa:01:51:3a:5e:
                    5f:2c:13:06:fb:04:28:0d:80:5a:86:4e:d6:27:ef:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:CF:59:68:CB:65:CB:7D:D6:10:4E:8E:C0:9E:EC:9C:51:86:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba7ba024-0d4d-3246-869e-71f3206b28f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2844:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:05:40:7e:0d:ad:33:cf:1a:73:4a:b5:b9:69:f5:fb:53:
         3f:17:13:b0:5a:e0:63:e1:b1:81:07:3d:14:79:5a:04:1c:45:
         47:b3:9c:92:d8:c6:d7:28:32:69:65:7f:45:d4:01:e6:89:46:
         92:77:6e:14:16:92:17:e8:e8:d1:a5:26:84:f8:6a:ce:20:41:
         dd:f7:e6:cb:2c:2f:8e:88:ad:4e:1d:c8:50:94:f4:12:0f:17:
         88:00:2c:4d:fa:be:19:38:06:6e:a3:2f:22:9f:c1:71:f7:bf:
         fa:fe:3a:a7:07:95:cc:4d:7d:fd:05:c9:bb:17:3f:cc:a2:fe:
         ed:5e:ab:8f:a3:9a:b9:2d:83:4f:68:75:e4:88:dc:5f:12:b1:
         e3:55:98:c2:10:e8:78:e4:d9:9d:01:e9:68:a3:c1:d6:2c:a0:
         6b:cd:9a:6c:90:a2:b0:2c:47:fc:97:d2:79:12:ae:59:8f:fe:
         a3:f3:65:d3:07:fe:07:b0:a2:1e:1b:f1:3d:ad:ec:04:62:af:
         6e:1a:fe:d2:b7:be:03:c3:0f:e8:4a:30:05:25:d8:b9:20:46:
         5b:87:78:e3:a1:11:17:e6:a7:9e:3e:a5:78:cf:ab:f7:fd:2f:
         fa:a1:98:8c:41:b4:2f:10:18:3e:eb:a7:95:32:94:c7:8a:d3:
         48:1b:64:73
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpc/NM8uTOATz3QX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
NTNlYTdlY2UtNmU4ZS00OGRhLTg1MTYtNWM5ZjE5ZDExYjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOnuq8O+TUy/oo3mKr5CLP0u8s/QYaEbnjeA
pn1Hqb8nMljaLWX3RN9P42aDlRJzkLJqg/RjrUauL7GZEHKGB+b4Z8l6VCa2QI+R
5WRm/0iz68RCGyTyyk1x7cg2ARtdVG3/qRJx+7KHRkgxhL1PX9FqmGjxCZQx/7u7
ea3MU2MFUEzLQJeB2Hvj/ecnhUmU4WxJel0VypBKrFPvVPL+vYFXTkkoD9q3mrKj
redeZjyOC/+IhPyBTVmz3e+sA1vQk8yP7DOaFA8XP86MnBd3FkJmnqPYOnG+PYUh
Zb28fTp2iOz35Qn2m9gRqgFROl5fLBMG+wQoDYBahk7WJ+/3tQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF9az1loy2XLfdYQTo7AnuycUYZBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE3YmEwMjQtMGQ0ZC0z
MjQ2LTg2OWUtNzFmMzIwNmIyOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMoREAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAa5AFQH4NrTPPGnNKtblp9ftTPxcTsFrgY+GxgQc9FHlaBBxFR7Oc
ktjG1ygyaWV/RdQB5olGknduFBaSF+jo0aUmhPhqziBB3ffmyywvjoitTh3IUJT0
Eg8XiAAsTfq+GTgGbqMvIp/Bcfe/+v46pweVzE19/QXJuxc/zKL+7V6rj6OauS2D
T2h15IjcXxKx41WYwhDoeOTZnQHpaKPB1iyga82abJCisCxH/JfSeRKuWY/+o/Nl
0wf+B7CiHhvxPa3sBGKvbhr+0re+A8MP6EowBSXYuSBGW4d446ERF+annj6leM+r
9/0v+qGYjEG0LxAYPuunlTKUx4rTSBtkcw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:25:51 2025 by rpki-client