Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c34e9008-894b-3d6b-8ebf-b5e510252d2d.roa
File:                     c34e9008-894b-3d6b-8ebf-b5e510252d2d.roa (raw, json)
Hash identifier:          sQ9wL035fahHZndxVf2I5RcM59bdAG4dzVWIMK7TdOQ=
Subject key identifier:   E5:ED:0C:1A:CE:B1:1C:0D:B7:32:1C:B1:99:86:A1:22:6A:14:DD:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC424CFF58C9E7B70FC7380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c34e9008-894b-3d6b-8ebf-b5e510252d2d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        2601:246:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:24:cf:f5:8c:9e:7b:70:fc:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=dc65ba80-a251-4e84-91ae-e764b948d57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:72:91:70:6a:40:66:04:4c:43:b1:04:cc:
                    fa:1d:df:4b:98:fa:d5:5b:a7:5d:2c:ff:80:ff:0f:
                    7a:4f:1e:61:3e:b0:a7:ac:e9:a5:8f:25:52:50:eb:
                    11:4e:66:48:df:e4:43:8e:76:93:9e:b3:70:96:79:
                    7e:b3:4b:b5:c0:39:43:90:8f:ce:4a:d3:c5:77:b5:
                    2f:3d:95:2f:90:19:fe:72:ed:8e:79:95:54:83:2b:
                    90:eb:53:5b:59:e2:82:99:25:b3:10:e9:c2:00:49:
                    90:c9:89:a2:4d:cc:c8:d1:5a:ec:d4:78:93:c1:dd:
                    2b:97:3b:f2:24:da:d6:14:b8:49:d3:23:c6:72:e3:
                    dd:b6:18:48:ce:36:bd:c8:de:cc:87:5c:3a:01:48:
                    1a:5e:a9:cc:1d:ec:96:a4:2c:cc:58:ca:7c:e4:4c:
                    12:c0:b6:10:b0:61:d8:c1:7e:1c:b7:aa:1d:4e:92:
                    a1:fb:f2:7d:7b:f6:1d:96:f0:e4:ff:92:c5:e4:00:
                    72:f5:23:a5:30:66:c4:0d:71:2e:f5:76:17:6e:47:
                    90:ed:b9:b6:64:22:fa:1c:25:a9:1b:61:92:7d:a2:
                    ba:89:75:64:23:4d:b8:fb:c2:45:02:92:e8:1d:94:
                    76:1c:8f:cf:95:ca:ae:04:16:74:d8:ba:23:77:c7:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:0C:1A:CE:B1:1C:0D:B7:32:1C:B1:99:86:A1:22:6A:14:DD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c34e9008-894b-3d6b-8ebf-b5e510252d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:246:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:dc:66:ed:a2:86:10:31:3e:44:23:a6:f6:83:16:01:2b:
         46:c1:c3:e7:44:e5:98:01:00:d9:54:14:0e:3e:17:45:cb:18:
         7e:12:fc:56:3b:2f:67:7c:93:6b:d8:7b:97:95:b2:f7:72:6a:
         b2:7e:7e:68:81:ce:4d:8c:85:2d:ba:ad:9b:09:03:e7:5b:af:
         3a:52:a9:8a:a5:00:cd:58:54:b3:ac:3a:ed:88:68:a2:27:ed:
         07:e0:ee:c9:1e:7a:53:49:61:8b:30:08:7d:38:a4:fa:9a:ec:
         5e:3b:ad:15:71:d6:ec:27:40:b3:43:a2:20:d5:3c:67:2c:79:
         e7:4a:4e:7a:55:1d:39:1a:87:34:2e:20:50:94:93:10:71:5e:
         aa:09:e0:d2:7e:09:68:24:89:ab:09:41:c7:0b:e1:ec:4b:00:
         3d:61:ea:e7:ae:8a:7b:e2:9f:02:04:e1:07:28:77:af:f2:6f:
         5a:be:82:f4:50:06:f0:26:94:ad:d5:37:09:0f:b2:0a:78:9a:
         b4:a6:d0:0c:6d:e4:4c:98:e8:1e:07:78:a5:96:6a:65:54:2c:
         9b:66:ac:d0:ae:f6:6c:f5:73:0e:e3:92:15:a4:fe:a3:8d:13:
         f1:68:74:06:47:1d:dc:be:6e:67:26:24:44:7d:d5:dc:8a:7b:
         9d:8d:ee:55
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWErsxCTP9Yyee3D8c4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZGM2NWJhODAtYTI1MS00ZTg0LTkxYWUtZTc2NGI5NDhkNTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ5ykXBqQGYETEOxBMz6Hd9LmPrVW6ddLP+A
/w96Tx5hPrCnrOmljyVSUOsRTmZI3+RDjnaTnrNwlnl+s0u1wDlDkI/OStPFd7Uv
PZUvkBn+cu2OeZVUgyuQ61NbWeKCmSWzEOnCAEmQyYmiTczI0Vrs1HiTwd0rlzvy
JNrWFLhJ0yPGcuPdthhIzja9yN7Mh1w6AUgaXqnMHeyWpCzMWMp85EwSwLYQsGHY
wX4ct6odTpKh+/J9e/YdlvDk/5LF5ABy9SOlMGbEDXEu9XYXbkeQ7bm2ZCL6HCWp
G2GSfaK6iXVkI024+8JFApLoHZR2HI/PlcquBBZ02Lojd8dS8QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOXtDBrOsRwNtzIcsZmGoSJqFN3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzM0ZTkwMDgtODk0Yi0z
ZDZiLThlYmYtYjVlNTEwMjUyZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgECRkAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAM2/cZu2ihhAxPkQjpvaDFgErRsHD50TlmAEA2VQUDj4XRcsYfhL8
VjsvZ3yTa9h7l5Wy93Jqsn5+aIHOTYyFLbqtmwkD51uvOlKpiqUAzVhUs6w67Yho
oiftB+DuyR56U0lhizAIfTik+prsXjutFXHW7CdAs0OiINU8Zyx550pOelUdORqH
NC4gUJSTEHFeqgng0n4JaCSJqwlBxwvh7EsAPWHq566Ke+KfAgThByh3r/JvWr6C
9FAG8CaUrdU3CQ+yCniatKbQDG3kTJjoHgd4pZZqZVQsm2as0K72bPVzDuOSFaT+
o40T8Wh0Bkcd3L5uZyYkRH3V3Ip7nY3uVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:04:01 2025 by rpki-client