Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/a3636781-2d3c-3865-ae28-ce8113377e9f.roa
File:                     a3636781-2d3c-3865-ae28-ce8113377e9f.roa (raw, json)
Hash identifier:          38+qbbQEUHuHHO9IQIQ3AsrS1De66pWhHSCI4yDNKsc=
Subject key identifier:   30:94:32:02:BE:D7:16:AC:B9:CE:67:DF:FC:D5:3B:89:E3:DA:8D:53
Certificate issuer:       /CN=253f385b-feb4-4b22-9447-502d6e3a69ac
Certificate serial:       010D0C9F43285849C3A363E9FB212B832E041B80
Authority key identifier: 91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/a3636781-2d3c-3865-ae28-ce8113377e9f.roa
Signing time:             Tue 06 May 2025 14:45:40 +0000
ROA not before:           Tue 06 May 2025 14:45:40 +0000
ROA not after:            Mon 04 Aug 2025 14:45:40 +0000
asID:                     401081
IP address blocks:        2604:ae0:140::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:a3:63:e9:fb:21:2b:83:2e:04:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253f385b-feb4-4b22-9447-502d6e3a69ac
        Validity
            Not Before: May  6 14:45:40 2025 GMT
            Not After : Aug  4 14:45:40 2025 GMT
        Subject: CN=e238471b-7d44-47d6-9f80-f16b9b2a5ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:2e:62:f2:cb:df:52:92:a0:18:9f:e5:8a:
                    bb:c8:21:09:6a:1a:41:2c:23:9b:e3:97:4a:68:d5:
                    13:21:75:2e:a9:c3:75:c1:1f:bd:d5:e1:82:11:07:
                    3f:e8:f6:02:b4:12:1a:8b:18:2c:bc:78:37:11:af:
                    8d:58:08:c1:d2:28:85:dc:5e:ba:11:73:38:bb:08:
                    b2:c1:be:25:37:25:8f:8b:89:4b:2b:40:84:be:29:
                    10:d8:2a:0b:2b:34:ec:e5:01:d6:29:25:9a:84:72:
                    0e:97:f8:49:dc:35:f1:93:d1:b0:f5:6c:79:cd:30:
                    ce:73:16:42:4f:9b:d5:35:e7:45:d9:21:55:97:5e:
                    1a:00:31:77:02:d4:ce:89:84:22:a0:84:41:33:30:
                    ec:b7:52:0d:cb:52:fe:59:2b:18:ff:45:fb:2d:c8:
                    4a:99:af:f2:36:71:73:bd:40:dc:51:5d:75:19:28:
                    08:b6:a7:fd:57:e1:29:83:0e:94:83:53:55:a6:7f:
                    2a:42:0e:e2:b5:d2:87:bd:85:76:46:ee:30:86:c2:
                    45:3d:46:32:42:08:cc:96:ce:55:1e:da:94:61:78:
                    4b:8b:83:89:33:26:19:5c:9a:24:63:75:30:47:9d:
                    bf:4f:ba:f9:56:bc:d2:e9:ea:83:fb:ba:66:ba:71:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:94:32:02:BE:D7:16:AC:B9:CE:67:DF:FC:D5:3B:89:E3:DA:8D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/a3636781-2d3c-3865-ae28-ce8113377e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl

            X509v3 Authority Key Identifier:
                keyid:91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ae0:140::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:3a:1e:06:df:46:e0:20:2b:fe:38:81:05:51:8a:c8:87:
         25:76:cc:df:bc:33:64:4c:c3:21:7a:8e:13:53:70:93:f4:52:
         c0:fe:4b:b9:17:60:af:fc:a4:0d:2f:79:da:20:1c:bb:07:40:
         96:34:ff:cc:a2:aa:02:18:81:e3:3b:c2:e8:5e:3c:c5:d3:8a:
         95:41:0f:77:ac:12:90:c7:c8:7b:a6:6a:1a:31:d8:e2:e0:49:
         27:29:12:80:45:44:33:7d:32:e8:8a:7b:c5:09:78:89:e6:3b:
         c3:50:27:16:c6:1f:b8:a1:c7:ab:85:23:ca:00:b4:d4:8e:77:
         27:ec:b2:5e:c6:8d:6b:b0:c2:a8:f3:e8:e8:42:d9:16:14:bd:
         d5:6a:28:e0:b1:57:33:7d:a8:e5:ad:e0:73:69:2d:b3:25:b8:
         3a:b0:49:2b:17:7f:99:67:ba:b7:38:57:a0:0a:3e:34:b7:94:
         af:88:c5:5b:ff:ce:ae:3e:a5:2d:a3:f1:d4:3c:58:a1:ee:29:
         12:5f:25:fd:91:e5:dd:4d:6a:57:4c:20:67:82:44:11:4c:07:
         4a:70:a9:9e:9d:79:f4:de:0c:65:7b:b3:ae:6a:c5:79:77:e1:
         de:93:0e:7d:9b:37:9c:49:3e:7c:6a:72:e7:c1:f2:57:1f:68:
         6f:6b:4e:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnDo2Pp+yErgy4EG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzZjM4NWItZmViNC00YjIyLTk0NDctNTAyZDZlM2E2
OWFjMB4XDTI1MDUwNjE0NDU0MFoXDTI1MDgwNDE0NDU0MFowLzEtMCsGA1UEAxMk
ZTIzODQ3MWItN2Q0NC00N2Q2LTlmODAtZjE2YjliMmE1ZWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmYuYvLL31KSoBif5Yq7yCEJahpBLCOb45dK
aNUTIXUuqcN1wR+91eGCEQc/6PYCtBIaixgsvHg3Ea+NWAjB0iiF3F66EXM4uwiy
wb4lNyWPi4lLK0CEvikQ2CoLKzTs5QHWKSWahHIOl/hJ3DXxk9Gw9Wx5zTDOcxZC
T5vVNedF2SFVl14aADF3AtTOiYQioIRBMzDst1INy1L+WSsY/0X7LchKma/yNnFz
vUDcUV11GSgItqf9V+Epgw6Ug1NVpn8qQg7itdKHvYV2Ru4whsJFPUYyQgjMls5V
HtqUYXhLi4OJMyYZXJokY3UwR52/T7r5VrzS6eqD+7pmunEsuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDCUMgK+1xasuc5n3/zVO4nj2o1TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNm
Mzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJkNmUzYTY5YWMvYTM2MzY3ODEtMmQzYy0z
ODY1LWFlMjgtY2U4MTEzMzc3ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjUzZjM4NWItZmViNC00YjIyLTk0
NDctNTAyZDZlM2E2OWFjLzI1M2YzODViLWZlYjQtNGIyMi05NDQ3LTUwMmQ2ZTNh
NjlhYy5jcmwwHwYDVR0jBBgwFoAUkUpN/2Rq2ifzR3KSCn3ur07uzf8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNmMzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJk
NmUzYTY5YWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgQK4AFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABr7Oh4G30bgICv+OIEFUYrIhyV2zN+8M2RMwyF6jhNTcJP0UsD+
S7kXYK/8pA0vedogHLsHQJY0/8yiqgIYgeM7wuhePMXTipVBD3esEpDHyHumahox
2OLgSScpEoBFRDN9MuiKe8UJeInmO8NQJxbGH7ihx6uFI8oAtNSOdyfssl7GjWuw
wqjz6OhC2RYUvdVqKOCxVzN9qOWt4HNpLbMluDqwSSsXf5lnurc4V6AKPjS3lK+I
xVv/zq4+pS2j8dQ8WKHuKRJfJf2R5d1NaldMIGeCRBFMB0pwqZ6defTeDGV7s65q
xXl34d6TDn2bN5xJPnxqcufB8lcfaG9rThM=
-----END CERTIFICATE-----
Generated at Tue May 13 11:20:21 2025 by rpki-client