Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa
File:                     924bc74d-b046-30c2-b4cc-123603abad90.roa (raw, json)
Hash identifier:          bKWts3L8q4rIW0uYZuNtoXx7xcbGsLDRqv7PY+Q2t8c=
Subject key identifier:   06:43:A7:09:F5:14:3B:BE:61:46:43:45:E5:41:2D:E0:92:16:84:52
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F43285849203C140A7343288E4ECF8060
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2602:f98b:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:14:0a:73:43:28:8e:4e:cf:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=c382f929-e2ac-40b3-9938-9fd3e7f2d3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:dc:00:31:60:94:2d:d9:c9:72:8d:17:7f:
                    cf:f5:ec:8c:95:4a:14:41:d1:b8:91:95:03:02:90:
                    65:8f:f1:20:3c:6a:64:5b:12:5e:a6:9a:6b:40:d2:
                    a3:71:cd:48:ac:af:1e:b4:87:64:c8:54:ad:57:97:
                    04:a9:23:91:b9:b7:7f:48:61:38:8d:5c:25:ef:2f:
                    60:d7:3a:de:38:06:58:fd:f8:a3:b0:e0:6e:b9:df:
                    f3:50:b4:c4:e6:4b:2f:16:d1:3a:43:98:a7:5e:d4:
                    6e:7a:fb:16:3f:fc:6e:d9:54:50:1e:5f:cf:4e:15:
                    d0:9e:c9:48:58:97:d6:f8:9b:7e:31:16:02:cd:c5:
                    32:ec:69:38:ba:8f:5e:30:14:45:ad:5f:c6:3f:f2:
                    7e:18:3f:09:4d:e1:75:e0:6d:6f:ec:e5:c3:e5:5d:
                    cc:ac:70:c0:db:ee:e7:c4:72:87:c5:a8:75:55:99:
                    32:f0:85:33:c1:b3:b9:f1:75:87:5a:9f:4d:16:27:
                    3d:82:5c:52:23:7c:ea:6c:8e:59:78:dd:96:3e:37:
                    44:94:03:94:a4:a9:04:77:42:31:ca:a2:43:d6:a1:
                    88:a4:fd:ac:ed:4f:93:2c:7d:75:1e:9a:a7:40:8a:
                    d0:34:e6:4b:20:e2:07:3e:a8:ef:82:e0:8a:ac:84:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:43:A7:09:F5:14:3B:BE:61:46:43:45:E5:41:2D:E0:92:16:84:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/924bc74d-b046-30c2-b4cc-123603abad90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98b:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:37:75:65:19:2b:46:e8:9d:b8:a3:f6:98:31:17:64:91:d2:
         28:31:bc:d4:e4:2f:0d:72:3e:9b:e2:73:aa:9d:3e:ea:9b:64:
         1f:fc:e9:e2:d1:c7:3a:d6:88:0f:36:c9:1f:a4:71:26:cc:9a:
         53:b4:c9:cf:da:84:11:9e:77:b0:a5:2b:96:ac:56:98:57:46:
         06:20:c2:bb:4a:11:ce:7d:c3:21:71:81:a4:c8:d1:a9:18:6a:
         c1:05:34:90:32:e8:a2:b4:ae:29:cb:19:fb:76:68:c9:ff:e7:
         64:ca:5f:90:44:63:51:1a:46:ec:dd:e2:9e:a1:25:17:58:ee:
         1a:03:44:09:eb:69:4c:86:67:28:55:a9:de:01:4b:11:a5:2c:
         9b:ce:99:06:d6:56:5a:95:55:8b:93:a3:1d:92:e5:04:2a:5e:
         9e:2c:cd:f1:8a:f4:35:b1:fb:2b:2d:60:61:9f:c3:31:64:3a:
         47:dd:55:5b:06:af:26:8f:d4:9d:f4:81:90:77:60:e0:9f:83:
         b3:6b:43:4a:de:42:7d:88:eb:77:fb:59:46:04:52:9f:63:96:
         d1:f9:cf:58:6b:0f:da:d5:b0:1b:2b:dd:3a:4c:a8:5c:51:be:
         87:5d:b4:66:5b:fd:c9:98:b9:9a:3e:a9:52:0d:c2:90:7e:a0:
         c9:d1:f9:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkgPBQKc0Mojk7PgGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0
N2Q5MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
YzM4MmY5MjktZTJhYy00MGIzLTk5MzgtOWZkM2U3ZjJkM2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3ncADFglC3ZyXKNF3/P9eyMlUoUQdG4kZUD
ApBlj/EgPGpkWxJeppprQNKjcc1IrK8etIdkyFStV5cEqSORubd/SGE4jVwl7y9g
1zreOAZY/fijsOBuud/zULTE5ksvFtE6Q5inXtRuevsWP/xu2VRQHl/PThXQnslI
WJfW+Jt+MRYCzcUy7Gk4uo9eMBRFrV/GP/J+GD8JTeF14G1v7OXD5V3MrHDA2+7n
xHKHxah1VZky8IUzwbO58XWHWp9NFic9glxSI3zqbI5ZeN2WPjdElAOUpKkEd0Ix
yqJD1qGIpP2s7U+TLH11HpqnQIrQNOZLIOIHPqjvguCKrIRMqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAZDpwn1FDu+YUZDReVBLeCSFoRSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4
YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvOTI0YmM3NGQtYjA0Ni0z
MGMyLWI0Y2MtMTIzNjAzYWJhZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1
ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh
NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy
MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL5iwAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIc3dWUZK0bonbij9pgxF2SR0igxvNTkLw1yPpvic6qdPuqbZB/8
6eLRxzrWiA82yR+kcSbMmlO0yc/ahBGed7ClK5asVphXRgYgwrtKEc59wyFxgaTI
0akYasEFNJAy6KK0rinLGft2aMn/52TKX5BEY1EaRuzd4p6hJRdY7hoDRAnraUyG
ZyhVqd4BSxGlLJvOmQbWVlqVVYuTox2S5QQqXp4szfGK9DWx+ystYGGfwzFkOkfd
VVsGryaP1J30gZB3YOCfg7NrQ0reQn2I63f7WUYEUp9jltH5z1hrD9rVsBsr3TpM
qFxRvoddtGZb/cmYuZo+qVINwpB+oMnR+RA=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:30:18 2025 by rpki-client