Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/050e0b8e-2c2e-3d12-96f8-c1556d67a3b5.roa
File:                     050e0b8e-2c2e-3d12-96f8-c1556d67a3b5.roa (raw, json)
Hash identifier:          zW/RjT6p9DCCQB94PlDL3ydxX2HkT2NfvaTb8GtlQvc=
Subject key identifier:   48:51:91:B7:38:C3:6A:91:36:80:57:EB:D6:D1:B3:D0:CF:B0:FF:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245D4C76E0A630DEEE1340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/050e0b8e-2c2e-3d12-96f8-c1556d67a3b5.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1005:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:5d:4c:76:e0:a6:30:de:ee:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=f60c96d3-073f-4629-b7ba-0e210eb7becd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e8:31:fa:4c:8c:d4:b8:82:78:5d:68:5b:8b:
                    c8:a3:56:7c:24:07:e0:5e:37:cb:b0:4f:4a:e7:a7:
                    ce:3a:e3:e5:6b:c3:14:85:1c:ef:ee:2b:df:b9:90:
                    93:2a:d3:ad:da:e4:db:ed:62:f8:11:29:34:92:55:
                    a3:34:f7:0f:97:9d:08:1b:c8:41:e8:36:ad:2d:3b:
                    1d:d8:aa:94:9a:3b:21:2b:43:8d:94:e3:8e:a9:a5:
                    0e:d9:80:2d:b6:52:69:68:ad:dd:a4:ce:f8:46:00:
                    fe:35:ec:58:d1:92:50:55:51:08:e5:28:99:bc:4c:
                    69:31:51:af:54:12:ea:ce:6d:26:ee:32:5f:ad:65:
                    41:ee:da:85:bd:27:66:59:ae:a5:8c:43:6e:ee:71:
                    b5:af:83:dd:66:e1:6d:46:d9:d7:ca:21:03:92:52:
                    52:6f:41:f2:50:78:6f:33:29:f7:8e:85:a9:f6:cc:
                    ff:5b:08:df:7f:0a:d0:45:08:94:fc:54:01:99:09:
                    db:f5:84:1c:43:3e:1b:0b:82:87:9c:f9:7d:d0:fc:
                    94:e3:18:6b:90:89:33:11:d9:7e:38:50:39:94:24:
                    96:8f:04:af:4c:fc:03:ea:90:3b:47:27:39:91:9d:
                    3d:93:82:38:88:69:32:5c:5b:c0:61:64:29:9a:ee:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:91:B7:38:C3:6A:91:36:80:57:EB:D6:D1:B3:D0:CF:B0:FF:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/050e0b8e-2c2e-3d12-96f8-c1556d67a3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:0c:e4:97:3f:8e:ea:dc:6f:62:68:9b:fa:47:ce:ac:b8:
         d3:6c:cc:cc:4b:11:e5:0c:89:ca:74:3d:4d:d0:e9:35:75:f6:
         78:66:73:cb:b5:34:55:2c:0f:9f:51:3e:10:0e:86:65:ee:6f:
         66:ab:4b:f9:ef:a5:d2:ac:19:de:31:7a:9e:be:4d:2f:8f:fd:
         0a:b8:d5:50:b4:f6:da:af:7e:bb:ea:f7:a4:b6:2f:f7:7d:64:
         e6:6b:6c:a0:16:7e:20:0b:51:c7:f6:cc:ef:3b:f6:03:0e:b2:
         41:fd:54:ac:27:a5:9d:e6:91:ac:23:95:b9:a8:2b:df:80:0b:
         99:eb:47:a1:4c:be:22:97:62:24:65:59:98:c6:2e:a3:60:df:
         d8:87:1b:07:47:8c:09:39:7e:a6:8c:ed:1d:00:bc:63:95:5e:
         b1:54:71:26:87:03:dd:b1:ed:44:27:98:bc:a5:7a:83:5a:7f:
         c4:8b:58:64:a9:53:1d:83:63:b4:0a:13:7c:bd:b4:e6:13:11:
         bf:f7:22:dc:1b:8c:be:30:09:f8:46:c6:d7:5f:f1:3f:87:e7:
         a8:34:f9:58:c8:82:1e:fd:27:0e:71:68:23:b8:c1:87:90:60:
         96:bb:0c:fd:e8:e2:24:d8:51:8e:3d:aa:6a:f8:05:8d:31:3a:
         6b:4b:6d:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJF1MduCmMN7uE0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ZjYwYzk2ZDMtMDczZi00NjI5LWI3YmEtMGUyMTBlYjdiZWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOgx+kyM1LiCeF1oW4vIo1Z8JAfgXjfLsE9K
56fOOuPla8MUhRzv7ivfuZCTKtOt2uTb7WL4ESk0klWjNPcPl50IG8hB6DatLTsd
2KqUmjshK0ONlOOOqaUO2YAttlJpaK3dpM74RgD+NexY0ZJQVVEI5SiZvExpMVGv
VBLqzm0m7jJfrWVB7tqFvSdmWa6ljENu7nG1r4PdZuFtRtnXyiEDklJSb0HyUHhv
Myn3joWp9sz/WwjffwrQRQiU/FQBmQnb9YQcQz4bC4KHnPl90PyU4xhrkIkzEdl+
OFA5lCSWjwSvTPwD6pA7Ryc5kZ09k4I4iGkyXFvAYWQpmu5b/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEhRkbc4w2qRNoBX69bRs9DPsP9AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDUwZTBiOGUtMmMyZS0z
ZDEyLTk2ZjgtYzE1NTZkNjdhM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBfAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADf5DOSXP47q3G9iaJv6R86suNNszMxLEeUMicp0PU3Q6TV19nhm
c8u1NFUsD59RPhAOhmXub2arS/nvpdKsGd4xep6+TS+P/Qq41VC09tqvfrvq96S2
L/d9ZOZrbKAWfiALUcf2zO879gMOskH9VKwnpZ3mkawjlbmoK9+AC5nrR6FMviKX
YiRlWZjGLqNg39iHGwdHjAk5fqaM7R0AvGOVXrFUcSaHA92x7UQnmLyleoNaf8SL
WGSpUx2DY7QKE3y9tOYTEb/3ItwbjL4wCfhGxtdf8T+H56g0+VjIgh79Jw5xaCO4
wYeQYJa7DP3o4iTYUY49qmr4BY0xOmtLbWw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:19:55 2025 by rpki-client