Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38f2926d-37e8-3dbb-8b38-39f2bdaf87ad.roa
File:                     38f2926d-37e8-3dbb-8b38-39f2bdaf87ad.roa (raw, json)
Hash identifier:          /lP8W33oBuCLOcIk8QAN2Ckj8Is88lhcyTQLeo7KHtE=
Subject key identifier:   70:2C:6A:3F:53:30:11:A1:D0:75:5F:B9:A1:DB:DB:5A:76:67:33:16
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C248A1ACB84DBECB34B8C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38f2926d-37e8-3dbb-8b38-39f2bdaf87ad.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1004:b248::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:8a:1a:cb:84:db:ec:b3:4b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=88350c66-58b5-4588-aa01-3e42a08a53af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:66:ea:bb:98:6d:cc:de:1d:5d:d7:ed:32:
                    7e:b4:99:d3:2f:2b:f9:91:47:f2:69:5c:80:9f:cc:
                    0c:68:84:95:83:92:89:7a:bd:b2:eb:b4:f0:4b:ba:
                    2b:15:68:ba:f9:0f:f4:07:8c:53:5e:db:00:50:5d:
                    27:69:c1:58:62:e3:c5:01:da:7f:bd:2d:6b:88:77:
                    6c:f9:9e:60:1e:ef:24:1d:e0:6f:a6:e6:55:74:4c:
                    3c:98:75:5f:dd:e0:12:94:db:f5:17:d8:55:04:b1:
                    65:e2:b4:2b:61:59:3e:28:da:6b:b1:5f:f9:ea:e4:
                    0b:90:14:8c:d4:2d:62:38:de:e3:da:fe:55:43:79:
                    28:82:c8:c0:0d:fd:c6:02:bb:8a:48:2e:a9:d9:03:
                    5e:84:b4:34:b6:90:7a:39:5a:26:b9:8a:68:2c:0d:
                    79:66:92:06:44:a5:73:fd:b7:23:c7:8c:1f:8f:1b:
                    ca:56:9a:32:96:a3:ec:62:2f:6d:33:95:2a:c4:a8:
                    0b:8e:51:55:d7:e7:2e:ba:f0:a5:73:41:1c:5c:80:
                    92:fb:e6:04:b9:4b:d8:bc:5d:4d:7e:40:e9:14:f6:
                    2b:ef:4d:61:24:67:15:3d:eb:e2:40:de:0f:ab:52:
                    45:7d:f9:f7:1e:15:92:53:de:f5:a6:47:5f:c2:e8:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2C:6A:3F:53:30:11:A1:D0:75:5F:B9:A1:DB:DB:5A:76:67:33:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38f2926d-37e8-3dbb-8b38-39f2bdaf87ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b248::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b5:2e:fa:d5:26:ad:21:de:3c:ea:23:e1:68:8e:2a:14:c4:
         09:4d:2b:a5:9f:1d:30:50:d4:7f:7f:b0:c0:5b:17:a1:5c:eb:
         38:2a:40:fd:1d:fe:f6:a5:85:15:cc:b1:12:83:f2:77:44:58:
         aa:75:83:64:3a:98:c7:35:da:99:96:11:c5:f8:37:03:8e:41:
         db:7e:5d:41:0f:b1:9b:c2:1a:d6:2b:d0:1f:3e:e9:2f:d2:34:
         d7:87:ba:07:42:ea:40:9a:b1:78:45:f0:03:46:4f:6f:48:d4:
         7d:bf:29:4d:d3:57:da:02:a0:2d:4f:e3:9c:4a:0b:de:82:07:
         b7:84:c7:93:42:cf:42:cd:8e:c8:de:ba:c1:d5:43:cb:11:19:
         ff:bd:f3:af:3f:a2:83:02:ed:a8:96:a6:fd:6e:f9:7d:9c:48:
         a0:8e:17:37:d7:23:1b:d5:e4:ac:97:51:09:48:89:cd:63:26:
         45:b5:30:49:f6:df:34:73:f9:01:6b:38:d4:ec:0d:c8:83:16:
         02:2b:91:3e:bc:91:8b:f0:2f:26:98:7f:f9:9e:ba:d1:f2:01:
         1d:3b:19:cd:ce:5f:4f:c8:ba:ec:c5:a4:75:58:a1:ff:4b:bf:
         a9:ff:46:27:02:e6:32:cf:6f:fc:a6:4c:de:43:37:e0:57:db:
         cf:0a:da:d0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIoay4Tb7LNLjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ODgzNTBjNjYtNThiNS00NTg4LWFhMDEtM2U0MmEwOGE1M2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjapm6ruYbczeHV3X7TJ+tJnTLyv5kUfyaVyA
n8wMaISVg5KJer2y67TwS7orFWi6+Q/0B4xTXtsAUF0nacFYYuPFAdp/vS1riHds
+Z5gHu8kHeBvpuZVdEw8mHVf3eASlNv1F9hVBLFl4rQrYVk+KNprsV/56uQLkBSM
1C1iON7j2v5VQ3kogsjADf3GAruKSC6p2QNehLQ0tpB6OVomuYpoLA15ZpIGRKVz
/bcjx4wfjxvKVpoylqPsYi9tM5UqxKgLjlFV1+cuuvClc0EcXICS++YEuUvYvF1N
fkDpFPYr701hJGcVPeviQN4Pq1JFffn3HhWSU971pkdfwujc4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHAsaj9TMBGh0HVfuaHb21p2ZzMWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzhmMjkyNmQtMzdlOC0z
ZGJiLThiMzgtMzlmMmJkYWY4N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQBLJI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJK1LvrVJq0h3jzqI+FojioUxAlNK6WfHTBQ1H9/sMBbF6Fc6zgq
QP0d/valhRXMsRKD8ndEWKp1g2Q6mMc12pmWEcX4NwOOQdt+XUEPsZvCGtYr0B8+
6S/SNNeHugdC6kCasXhF8ANGT29I1H2/KU3TV9oCoC1P45xKC96CB7eEx5NCz0LN
jsjeusHVQ8sRGf+9868/ooMC7aiWpv1u+X2cSKCOFzfXIxvV5KyXUQlIic1jJkW1
MEn23zRz+QFrONTsDciDFgIrkT68kYvwLyaYf/meutHyAR07Gc3OX0/IuuzFpHVY
of9Lv6n/RicC5jLPb/ymTN5DN+BX288K2tA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:48 2025 by rpki-client