Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23b171d0-06c6-3b47-8d8b-559f85a5649d.roa
File:                     23b171d0-06c6-3b47-8d8b-559f85a5649d.roa (raw, json)
Hash identifier:          07M8RkNlVC/3ec5aNaPNbHWMrfR30kMY4lDuNrBLDuI=
Subject key identifier:   8B:9E:4E:E9:3A:62:84:AC:F9:DA:0F:51:F9:CE:83:02:EE:65:18:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400E1F88D1934CCBB8F9D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23b171d0-06c6-3b47-8d8b-559f85a5649d.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1004:b200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:e1:f8:8d:19:34:cc:bb:8f:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=f230eade-03ba-46a1-9ff2-76db7f71468b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1e:79:7d:de:0b:55:32:f0:bd:80:69:b6:4f:
                    a8:9b:94:c8:db:05:fd:29:e8:c3:aa:33:2b:b8:2c:
                    8a:4c:cc:ce:43:36:94:b2:76:48:19:00:7f:3a:e5:
                    08:cf:00:a4:7f:b5:ef:7c:d6:2f:df:a8:5c:60:e8:
                    29:86:e4:63:7f:30:e4:b0:16:6b:33:c4:16:74:37:
                    0a:e9:da:50:2e:82:a2:4e:8f:45:89:5b:cc:32:8f:
                    f7:25:cc:60:a5:82:fc:bf:b1:db:04:4f:81:ab:ff:
                    2d:41:08:bc:3d:92:82:1c:e6:e9:d3:4b:5a:63:5f:
                    b4:2c:4d:97:d4:2f:f3:9c:af:5e:49:21:49:39:82:
                    02:c6:a7:1d:b7:36:e5:df:a9:85:55:1f:f9:8b:4f:
                    8a:e4:9e:0a:e2:09:c6:70:22:dc:cb:b3:e0:16:34:
                    bb:42:9e:4f:af:54:cb:97:50:8d:13:28:79:12:b7:
                    2d:d9:6a:fd:60:d2:ad:2f:80:08:b7:da:d8:06:de:
                    a1:94:f8:f4:50:5b:43:ee:0b:78:66:f4:f3:78:06:
                    a2:e1:58:d7:8d:c2:17:4e:48:b9:a1:21:58:5a:ff:
                    2a:d2:7f:3b:f7:9c:7b:19:ec:9a:e2:d0:db:43:67:
                    2a:27:d5:82:9c:45:ec:02:1f:95:17:f8:d4:1f:84:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9E:4E:E9:3A:62:84:AC:F9:DA:0F:51:F9:CE:83:02:EE:65:18:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23b171d0-06c6-3b47-8d8b-559f85a5649d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:38:34:be:c4:4a:48:9a:68:3b:be:13:20:cb:7e:95:66:24:
         4d:7f:37:dd:3a:d0:b0:8c:40:f9:cd:6c:78:6b:01:99:83:ca:
         7e:70:f8:1b:cc:5e:4b:f9:44:fd:33:fe:58:d8:43:2c:81:c8:
         b7:b4:33:08:a8:d7:99:4e:ef:34:d2:23:c6:a2:3e:af:25:a9:
         a2:d1:b9:e6:92:a3:c4:f4:82:09:81:d0:2f:97:c1:c0:e4:17:
         2c:bb:63:ea:c9:fa:86:44:4e:22:ab:29:8e:28:21:7b:85:5c:
         b8:51:4c:8c:d0:70:a2:ef:19:76:2e:f9:79:ba:0f:98:7f:fd:
         c9:08:3f:49:1a:f6:5f:7b:11:c2:cf:0c:a5:26:78:af:15:c4:
         61:f7:69:b3:25:49:5d:08:fd:d4:23:fa:bb:5e:0d:48:8c:94:
         96:de:88:65:a4:fc:d6:be:88:4d:50:78:52:c7:9b:28:57:c8:
         68:10:7b:34:27:e5:6f:9d:9b:7e:3d:67:b1:74:a8:44:35:63:
         de:5c:ed:28:13:e4:b8:95:93:71:03:d7:fa:a1:c4:bf:9a:ea:
         64:6a:34:c1:83:83:8e:eb:d5:26:30:c7:f8:48:7a:09:68:46:
         9e:f2:aa:98:c5:f1:28:a3:71:b0:b1:f0:0c:a3:52:32:3f:96:
         68:1d:58:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOH4jRk0zLuPnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
ZjIzMGVhZGUtMDNiYS00NmExLTlmZjItNzZkYjdmNzE0NjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR55fd4LVTLwvYBptk+om5TI2wX9KejDqjMr
uCyKTMzOQzaUsnZIGQB/OuUIzwCkf7XvfNYv36hcYOgphuRjfzDksBZrM8QWdDcK
6dpQLoKiTo9FiVvMMo/3JcxgpYL8v7HbBE+Bq/8tQQi8PZKCHObp00taY1+0LE2X
1C/znK9eSSFJOYICxqcdtzbl36mFVR/5i0+K5J4K4gnGcCLcy7PgFjS7Qp5Pr1TL
l1CNEyh5Erct2Wr9YNKtL4AIt9rYBt6hlPj0UFtD7gt4ZvTzeAai4VjXjcIXTki5
oSFYWv8q0n8795x7Geya4tDbQ2cqJ9WCnEXsAh+VF/jUH4TFgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIueTuk6YoSs+doPUfnOgwLuZRjCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjNiMTcxZDAtMDZjNi0z
YjQ3LThkOGItNTU5Zjg1YTU2NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABs4NL7ESkiaaDu+EyDLfpVmJE1/N9060LCMQPnNbHhrAZmDyn5w
+BvMXkv5RP0z/ljYQyyByLe0Mwio15lO7zTSI8aiPq8lqaLRueaSo8T0ggmB0C+X
wcDkFyy7Y+rJ+oZETiKrKY4oIXuFXLhRTIzQcKLvGXYu+Xm6D5h//ckIP0ka9l97
EcLPDKUmeK8VxGH3abMlSV0I/dQj+rteDUiMlJbeiGWk/Na+iE1QeFLHmyhXyGgQ
ezQn5W+dm349Z7F0qEQ1Y95c7SgT5LiVk3ED1/qhxL+a6mRqNMGDg47r1SYwx/hI
egloRp7yqpjF8SijcbCx8AyjUjI/lmgdWC4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:32 2025 by rpki-client