Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c441474-4f8e-388c-8fac-8337cd8129d9.roa
File:                     3c441474-4f8e-388c-8fac-8337cd8129d9.roa (raw, json)
Hash identifier:          iNRjBDKgMf86+gOMrgEb6EVYHZ/CiyDM5Ga29HTy13I=
Subject key identifier:   CA:12:31:0A:C8:44:29:CA:98:86:A2:A3:D7:55:D5:07:A2:02:76:84
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2482C1B407775ED4DEFE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c441474-4f8e-388c-8fac-8337cd8129d9.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1000:d030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:82:c1:b4:07:77:5e:d4:de:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=90e1d08d-da55-4eb1-9c34-e0f49b04788f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:21:0e:88:f1:f1:94:99:de:df:cc:09:0e:
                    29:35:ae:cc:3f:af:c8:22:75:d1:da:3b:5a:bd:a4:
                    6a:0f:75:b2:27:42:03:e5:3d:86:06:71:59:2c:a1:
                    19:e4:de:31:96:2c:00:b0:2c:06:02:87:50:76:90:
                    c7:1a:18:fe:b6:2b:83:29:54:51:7f:f3:11:0f:74:
                    a9:56:a8:1e:fe:39:c1:10:44:3c:a6:8b:37:2e:93:
                    e7:23:cb:11:8d:9b:1f:a2:c9:0a:a2:13:43:43:ee:
                    a0:82:5f:8a:6c:64:c7:b9:c4:0c:89:2b:e1:98:12:
                    f7:e8:e7:d3:2b:27:78:fb:f7:5e:37:e1:4c:c2:af:
                    c3:47:8a:4e:56:de:95:5b:10:6a:0d:38:a8:94:ff:
                    be:ea:dd:90:99:92:ec:1f:64:6e:35:a5:9f:73:e6:
                    35:77:41:65:35:75:4f:15:f5:09:c5:a1:b6:75:77:
                    97:73:42:65:c1:39:f9:51:46:5d:1d:64:a5:ae:73:
                    cd:c8:1e:10:6b:21:d5:85:d5:21:a2:73:53:e9:7a:
                    72:02:47:b1:aa:aa:7a:95:5f:15:2e:39:fe:7c:42:
                    52:02:66:f2:6d:f1:35:ae:e1:7a:0e:b9:72:c6:09:
                    4f:e0:ff:87:00:bf:b6:92:5c:1c:b6:62:47:fd:24:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:12:31:0A:C8:44:29:CA:98:86:A2:A3:D7:55:D5:07:A2:02:76:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c441474-4f8e-388c-8fac-8337cd8129d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:d030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6a:a0:c0:08:16:24:8b:85:cc:03:7d:aa:05:54:69:6e:8b:
         b7:3a:a5:8d:f7:cd:3e:20:d9:d6:0e:a8:d5:cf:7a:90:f0:46:
         fa:9f:fd:f8:18:4b:61:92:59:3d:78:a3:ad:79:72:b6:0d:f4:
         35:89:6f:64:c6:8d:9a:4a:a0:b2:00:2f:f9:b2:fd:55:b6:f2:
         5f:33:1f:6a:08:55:25:58:50:5c:fd:a2:d5:2b:26:40:c6:68:
         b1:ea:33:c0:ee:1c:5d:ac:0c:a1:d3:e1:cb:20:6c:d3:b6:60:
         f4:eb:15:e0:9b:66:6f:c2:d5:9e:88:c9:ca:2a:9a:7d:01:ab:
         12:db:a7:25:48:d4:02:c7:29:dc:76:ac:4e:d4:f1:58:42:35:
         ca:5a:eb:24:75:fd:bf:dd:5f:10:d6:99:42:d1:bc:5b:02:bf:
         c5:e6:4c:5c:b9:81:aa:76:3a:d1:cf:63:d8:36:47:c2:48:98:
         a1:ac:01:eb:79:93:16:9c:55:70:14:13:c5:0a:23:8c:70:c4:
         b3:e4:68:bd:6d:a2:55:89:2c:e3:44:92:af:cf:e2:58:35:b3:
         bc:c3:82:35:4b:37:0d:79:52:ac:6b:0e:b7:38:3c:0b:37:7a:
         37:5f:eb:dd:83:af:79:30:39:53:43:2a:eb:a1:49:85:f6:e5:
         f8:68:a5:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJILBtAd3XtTe/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
OTBlMWQwOGQtZGE1NS00ZWIxLTljMzQtZTBmNDliMDQ3ODhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ0hDojx8ZSZ3t/MCQ4pNa7MP6/IInXR2jta
vaRqD3WyJ0ID5T2GBnFZLKEZ5N4xliwAsCwGAodQdpDHGhj+tiuDKVRRf/MRD3Sp
Vqge/jnBEEQ8pos3LpPnI8sRjZsfoskKohNDQ+6ggl+KbGTHucQMiSvhmBL36OfT
Kyd4+/deN+FMwq/DR4pOVt6VWxBqDTiolP++6t2QmZLsH2RuNaWfc+Y1d0FlNXVP
FfUJxaG2dXeXc0JlwTn5UUZdHWSlrnPNyB4QayHVhdUhonNT6XpyAkexqqp6lV8V
Ljn+fEJSAmbybfE1ruF6DrlyxglP4P+HAL+2klwctmJH/SSEnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMoSMQrIRCnKmIaio9dV1QeiAnaEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M0NDE0NzQtNGY4ZS0z
ODhjLThmYWMtODMzN2NkODEyOWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQANAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG9qoMAIFiSLhcwDfaoFVGlui7c6pY33zT4g2dYOqNXPepDwRvqf
/fgYS2GSWT14o615crYN9DWJb2TGjZpKoLIAL/my/VW28l8zH2oIVSVYUFz9otUr
JkDGaLHqM8DuHF2sDKHT4csgbNO2YPTrFeCbZm/C1Z6Iycoqmn0BqxLbpyVI1ALH
Kdx2rE7U8VhCNcpa6yR1/b/dXxDWmULRvFsCv8XmTFy5gap2OtHPY9g2R8JImKGs
Aet5kxacVXAUE8UKI4xwxLPkaL1tolWJLONEkq/P4lg1s7zDgjVLNw15UqxrDrc4
PAs3ejdf692Dr3kwOVNDKuuhSYX25fhopUI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:37:53 2025 by rpki-client