Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c8f83b5-4dbf-3e71-9590-dc38c7b6f7ab.roa
File:                     0c8f83b5-4dbf-3e71-9590-dc38c7b6f7ab.roa (raw, json)
Hash identifier:          9cJ/9CwhhjaH70dE+RhK2uWpQZ9If/rXTTG8t5OgPw8=
Subject key identifier:   74:59:48:B5:E7:AD:EB:50:6A:54:E7:DD:C0:F2:42:FE:EA:D0:84:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847C4AA0E31937180CBD07150C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c8f83b5-4dbf-3e71-9590-dc38c7b6f7ab.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     6167
IP address blocks:        2600:100f:a010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:0e:31:93:71:80:cb:d0:71:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=3dda9395-f679-41cd-ae8c-788ca666e00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:c7:05:06:69:14:68:80:fc:e1:17:45:31:
                    76:c0:62:dc:7f:9e:f7:e4:06:9e:e6:97:c1:3f:e3:
                    c2:e0:80:19:f4:43:e3:71:d2:7f:15:b1:4e:bc:43:
                    08:84:a4:50:0c:8b:dd:19:7c:b4:fb:52:9d:e9:b2:
                    4d:f1:67:26:b9:c2:0a:a6:2a:c6:77:8b:c3:95:b7:
                    92:f9:73:a8:99:55:84:73:f4:e8:29:e7:67:38:01:
                    fb:43:90:bb:08:2e:29:74:9e:ca:41:42:d1:e9:4c:
                    f6:1a:1e:1e:69:74:46:fb:f4:32:7f:6e:c3:01:0c:
                    89:29:1c:a9:66:d5:81:72:34:af:6d:3d:d2:99:cd:
                    a8:8d:1c:2e:21:97:8c:c2:a6:0c:e5:b2:f1:86:72:
                    a3:2f:4f:cc:6e:51:ee:3b:5a:53:52:9b:8c:c0:b5:
                    d0:6a:bc:45:40:69:22:50:96:0c:c5:7b:db:ac:d8:
                    90:5a:18:d6:65:50:5a:4f:7b:d9:e6:6f:3c:32:0b:
                    02:13:b6:1c:14:23:22:d1:8a:c5:e2:85:c8:ee:3e:
                    61:ad:7d:3b:21:4e:ec:80:00:d4:ae:a9:05:0b:1f:
                    a7:3b:50:36:46:6b:56:12:b3:d4:56:d3:c5:10:2b:
                    9b:a6:c6:da:af:cc:10:57:17:f1:ea:61:74:7d:92:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:59:48:B5:E7:AD:EB:50:6A:54:E7:DD:C0:F2:42:FE:EA:D0:84:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0c8f83b5-4dbf-3e71-9590-dc38c7b6f7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:82:68:ab:ce:35:31:07:c0:48:91:46:3c:c5:b7:ea:42:76:
         77:66:51:e0:0f:94:3c:b6:8d:a1:a3:55:16:c4:e4:7a:90:46:
         9c:49:2f:d4:38:04:02:36:a1:93:ba:f1:b8:f4:b0:95:3b:7f:
         8e:1c:c2:d9:e6:16:aa:e3:25:26:75:3a:e6:e4:e2:2d:82:2c:
         f8:63:31:0a:57:e6:7b:a5:87:6d:13:9d:f4:0d:f5:40:2d:ed:
         11:85:1c:36:96:be:94:b4:bf:5f:76:5a:07:ab:b2:b1:39:7e:
         f7:89:84:d2:23:61:e1:13:8b:82:e3:5f:48:10:98:aa:86:86:
         32:1d:0b:8d:fd:c2:46:75:f4:76:05:6a:86:e7:f9:6d:7f:7b:
         f0:58:ab:fa:90:6f:fd:85:f7:3b:1d:bb:dc:23:9d:f3:49:0d:
         a0:8c:f6:0a:90:4d:f4:ad:1f:df:6d:b0:ea:2b:36:01:7c:93:
         20:a8:b6:b0:08:38:29:a4:c9:c2:6f:04:5f:da:8d:ef:8a:93:
         fd:7c:4c:4c:02:10:4e:e0:5a:c2:50:2b:e2:dc:a1:30:a2:71:
         24:61:77:bd:a7:52:f7:92:06:03:6b:a4:52:2a:bb:39:76:43:
         6f:e1:a7:43:c8:90:e5:80:4e:fb:91:56:dc:10:dc:b4:a7:d7:
         ca:24:bc:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfEqg4xk3GAy9BxUMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTEwNDE0MDA0OFoXDTI1MDIwMjE0MDA0OFowLzEtMCsGA1UEAxMk
M2RkYTkzOTUtZjY3OS00MWNkLWFlOGMtNzg4Y2E2NjZlMDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCjHBQZpFGiA/OEXRTF2wGLcf5735Aae5pfB
P+PC4IAZ9EPjcdJ/FbFOvEMIhKRQDIvdGXy0+1Kd6bJN8WcmucIKpirGd4vDlbeS
+XOomVWEc/ToKednOAH7Q5C7CC4pdJ7KQULR6Uz2Gh4eaXRG+/Qyf27DAQyJKRyp
ZtWBcjSvbT3Smc2ojRwuIZeMwqYM5bLxhnKjL0/MblHuO1pTUpuMwLXQarxFQGki
UJYMxXvbrNiQWhjWZVBaT3vZ5m88MgsCE7YcFCMi0YrF4oXI7j5hrX07IU7sgADU
rqkFCx+nO1A2RmtWErPUVtPFECubpsbar8wQVxfx6mF0fZKYkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHRZSLXnretQalTn3cDyQv7q0IRUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGM4ZjgzYjUtNGRiZi0z
ZTcxLTk1OTAtZGMzOGM3YjZmN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQD6AQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJKCaKvONTEHwEiRRjzFt+pCdndmUeAPlDy2jaGjVRbE5HqQRpxJ
L9Q4BAI2oZO68bj0sJU7f44cwtnmFqrjJSZ1Oubk4i2CLPhjMQpX5nulh20TnfQN
9UAt7RGFHDaWvpS0v192WgersrE5fveJhNIjYeETi4LjX0gQmKqGhjIdC439wkZ1
9HYFaobn+W1/e/BYq/qQb/2F9zsdu9wjnfNJDaCM9gqQTfStH99tsOorNgF8kyCo
trAIOCmkycJvBF/aje+Kk/18TEwCEE7gWsJQK+LcoTCicSRhd72nUveSBgNrpFIq
uzl2Q2/hp0PIkOWATvuRVtwQ3LSn18okvFA=
-----END CERTIFICATE-----