Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/6169b585-41b2-30d6-ae52-279166e3b6b6.roa
File:                     6169b585-41b2-30d6-ae52-279166e3b6b6.roa (raw, json)
Hash identifier:          cIQUbi4iX4HeU88dfmvGnqBNNXgqQLMMGLXKqepSlfQ=
Subject key identifier:   22:BF:4B:7C:98:05:DB:AF:1A:A8:F0:18:54:E2:73:F1:C7:F4:56:1B
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584937D93A7F95FF5094303BCF40
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/6169b585-41b2-30d6-ae52-279166e3b6b6.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        64.93.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:3a:7f:95:ff:50:94:30:3b:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=2d1f6345-6483-4581-b7f5-49985f2788db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:d7:6c:8f:52:5c:38:77:4d:4d:18:ee:d6:
                    3e:ff:57:17:89:eb:b9:99:1c:dd:8a:c4:55:9a:d2:
                    c0:b7:03:79:61:a5:a6:ec:75:f8:4c:ef:53:55:06:
                    49:4f:5e:24:a1:ab:24:0c:6b:b5:e2:27:a7:4d:d7:
                    66:26:f7:14:bc:84:71:82:39:4f:b4:d5:58:5c:66:
                    ca:33:5e:81:28:58:bd:4a:95:a7:67:54:92:d9:df:
                    2e:b3:8f:b4:ef:7e:07:6b:79:c8:3e:ed:3f:4f:1e:
                    42:25:3b:3f:22:b2:fb:fb:60:25:d9:c5:fe:eb:39:
                    c0:47:49:fd:07:15:72:5c:25:ab:69:ba:75:f1:6d:
                    af:9a:08:e9:09:93:db:65:e8:6a:26:17:57:0d:dc:
                    22:58:eb:e4:ff:1c:71:74:87:72:ea:b7:79:94:7e:
                    bb:5b:71:91:55:55:b4:90:bf:38:b4:68:d8:97:9c:
                    e1:0e:5c:b8:9e:32:6d:aa:4e:9b:2b:8e:be:d2:18:
                    15:d9:ec:cc:36:5f:4a:29:5e:cd:4b:60:be:2a:19:
                    f2:82:43:f7:4f:20:be:3f:db:91:cc:11:40:9e:12:
                    37:23:2d:fe:aa:fb:33:2d:e6:e3:f1:bf:02:a7:fd:
                    cf:9e:c5:94:f1:8e:08:b4:8d:65:12:45:07:53:3f:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BF:4B:7C:98:05:DB:AF:1A:A8:F0:18:54:E2:73:F1:C7:F4:56:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/6169b585-41b2-30d6-ae52-279166e3b6b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:4f:1b:64:34:9e:1b:be:45:52:01:07:d8:b2:23:a8:bb:9b:
         63:04:d0:b3:23:57:4f:e6:b1:e0:50:0c:41:df:de:e4:82:07:
         82:c5:08:25:a8:52:e0:22:66:48:03:74:3d:25:fd:f3:b6:cc:
         34:c7:9e:33:6a:94:d8:3e:34:95:bd:fc:c3:2d:18:8d:dd:36:
         a1:32:7c:93:20:ba:51:74:11:04:70:68:bb:eb:76:0d:5d:53:
         8b:d7:62:f0:8b:4f:47:6c:ed:4f:a9:81:63:dd:70:90:aa:66:
         99:fe:f8:9e:c7:72:69:ff:42:c6:d4:0f:3b:0d:ec:43:28:9c:
         8e:e7:08:90:30:ac:f4:78:69:69:f0:9d:3f:1b:ae:f4:b7:21:
         89:1a:32:6c:77:51:38:47:11:23:a3:27:96:a9:69:87:91:07:
         42:7e:eb:3c:65:5b:c8:2e:e2:62:66:6c:2c:be:c8:d5:5b:e0:
         77:04:8a:4f:ce:ab:9f:c3:37:d0:cb:5d:c7:f7:f4:b1:f1:0d:
         d2:dd:15:58:ea:fa:34:69:42:d5:7f:c0:84:0c:3c:df:12:05:
         bd:89:4d:3b:4b:70:f0:95:30:09:ad:ba:08:07:ea:ae:dc:69:
         3c:cf:9f:41:4a:38:be:cc:44:01:d4:b6:e9:f1:11:b7:7c:95:
         67:0c:b3:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32Tp/lf9QlDA7z0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjljNmExOWUtYTgzYy00M2FkLThkMTAtNjhkYWViMTYw
MDMzMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
MmQxZjYzNDUtNjQ4My00NTgxLWI3ZjUtNDk5ODVmMjc4OGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPjXbI9SXDh3TU0Y7tY+/1cXieu5mRzdisRV
mtLAtwN5YaWm7HX4TO9TVQZJT14koaskDGu14ienTddmJvcUvIRxgjlPtNVYXGbK
M16BKFi9SpWnZ1SS2d8us4+0734Ha3nIPu0/Tx5CJTs/IrL7+2Al2cX+6znAR0n9
BxVyXCWrabp18W2vmgjpCZPbZehqJhdXDdwiWOvk/xxxdIdy6rd5lH67W3GRVVW0
kL84tGjYl5zhDly4njJtqk6bK46+0hgV2ezMNl9KKV7NS2C+KhnygkP3TyC+P9uR
zBFAnhI3Iy3+qvszLebj8b8Cp/3PnsWU8Y4ItI1lEkUHUz/nnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCK/S3yYBduvGqjwGFTic/HH9FYbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2
YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRhZWIxNjAwMzMvNjE2OWI1ODUtNDFiMi0z
MGQ2LWFlNTItMjc5MTY2ZTNiNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjljNmExOWUtYTgzYy00M2FkLThk
MTAtNjhkYWViMTYwMDMzLzI5YzZhMTllLWE4M2MtNDNhZC04ZDEwLTY4ZGFlYjE2
MDAzMy5jcmwwHwYDVR0jBBgwFoAURYuDipgToB+X1z11nxV01t29atEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yOWM2YTE5ZS1hODNjLTQzYWQtOGQxMC02OGRh
ZWIxNjAwMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQF1UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1PG2Q0nhu+RVIBB9iyI6i7m2ME0LMjV0/mseBQDEHf3uSCB4LFCCWo
UuAiZkgDdD0l/fO2zDTHnjNqlNg+NJW9/MMtGI3dNqEyfJMgulF0EQRwaLvrdg1d
U4vXYvCLT0ds7U+pgWPdcJCqZpn++J7Hcmn/QsbUDzsN7EMonI7nCJAwrPR4aWnw
nT8brvS3IYkaMmx3UThHESOjJ5apaYeRB0J+6zxlW8gu4mJmbCy+yNVb4HcEik/O
q5/DN9DLXcf39LHxDdLdFVjq+jRpQtV/wIQMPN8SBb2JTTtLcPCVMAmtuggH6q7c
aTzPn0FKOL7MRAHUtunxEbd8lWcMs/c=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:20 2025 by rpki-client