Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ea8c637-9ae9-3488-a658-61c2b150afaf.roa
File:                     3ea8c637-9ae9-3488-a658-61c2b150afaf.roa (raw, json)
Hash identifier:          jgybVgagdRkIrJNEtv7ZApICP16KOhY/m8XvEGq1E0w=
Subject key identifier:   77:28:CA:CF:4A:0F:3D:C7:A6:A8:81:BF:A2:97:85:15:E0:43:0D:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EB4ACF8D417E67527F3B2A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ea8c637-9ae9-3488-a658-61c2b150afaf.roa
Signing time:             Tue 20 May 2025 19:39:31 +0000
ROA not before:           Tue 20 May 2025 19:39:31 +0000
ROA not after:            Mon 18 Aug 2025 19:39:31 +0000
asID:                     6167
IP address blocks:        2600:1012:a125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:4a:cf:8d:41:7e:67:52:7f:3b:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 19:39:31 2025 GMT
            Not After : Aug 18 19:39:31 2025 GMT
        Subject: CN=464e5c33-7b32-4618-8b44-58b11928ae2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:fe:7b:84:50:ed:95:29:f1:7e:ae:9a:bc:
                    dc:72:cc:b4:ab:de:15:92:2e:43:4f:3a:2d:be:1d:
                    6c:60:b1:10:3a:35:df:3f:1e:f7:e2:fe:2d:6b:4b:
                    a7:04:e8:6c:b7:fe:2a:59:ce:c8:4b:bb:b6:0e:cd:
                    88:b8:b3:ed:0b:6c:7c:90:62:57:8b:5e:29:db:91:
                    02:c8:ed:89:56:e9:cc:33:18:92:f8:dd:60:ec:7b:
                    d0:87:82:27:72:d3:0f:d7:31:f1:01:22:bf:4b:df:
                    72:7c:4d:2c:9d:00:70:3f:0e:3d:81:07:f6:06:6a:
                    97:8f:ca:7c:8a:6a:b3:e2:e4:81:fb:4a:19:69:5a:
                    f7:05:3b:0c:6f:93:3c:d5:7a:dd:aa:ad:27:4e:dc:
                    15:21:55:d5:cb:65:4d:66:53:97:07:e5:49:65:bb:
                    2e:21:67:79:31:5d:c8:71:06:e4:5c:b5:77:3f:be:
                    44:be:c8:2b:67:e3:bc:a1:61:a2:9e:a4:6b:40:99:
                    2f:16:88:6f:e8:b7:5d:43:c5:e1:07:a1:72:f1:da:
                    85:d6:a3:90:23:3d:47:f4:9e:c0:3b:18:e4:d2:f5:
                    1d:63:ff:7a:df:ce:c8:75:b9:02:9a:91:d0:1b:88:
                    81:36:29:03:b5:15:2c:05:e2:40:6f:60:79:f6:c3:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:28:CA:CF:4A:0F:3D:C7:A6:A8:81:BF:A2:97:85:15:E0:43:0D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ea8c637-9ae9-3488-a658-61c2b150afaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:f4:f1:b7:5f:93:40:d9:6f:59:4d:3f:d3:b4:3d:0d:59:79:
         1c:83:2d:cd:62:66:d8:10:ca:63:7b:cc:2f:4f:88:ba:ce:08:
         a4:95:f2:37:53:0e:e1:8f:55:1a:7c:ed:13:db:27:14:6b:dc:
         45:20:41:5b:2f:49:4e:6c:1d:70:4a:31:3b:50:f9:71:22:25:
         b4:56:ec:be:0f:21:f8:93:39:bd:d9:9c:3d:6d:39:2f:85:50:
         b2:9c:9b:c6:71:d6:1b:2a:9b:e5:4d:df:04:1d:e3:b0:7c:90:
         22:d5:1a:52:65:c6:3e:31:fd:65:20:86:40:f1:f8:01:86:1a:
         da:ff:84:ce:7c:4c:42:ff:e8:91:37:09:1d:07:f6:22:06:40:
         04:d6:35:20:30:42:5e:4a:32:0d:08:e9:45:ec:ab:ca:5f:c1:
         79:f9:6a:61:c0:a7:06:64:59:03:30:66:5e:a6:2e:a7:c1:73:
         07:a6:04:a6:8d:09:39:8f:e2:d4:c4:ea:2c:80:68:4e:6f:ab:
         a0:23:cb:ec:ef:ea:4e:e0:34:6f:04:6d:b3:94:d6:b8:57:1b:
         a3:75:18:df:20:9e:0c:3d:d2:2b:29:c1:27:c8:99:2c:53:ee:
         15:c0:48:27:a4:9d:89:3a:f8:0c:03:f9:73:32:f5:e0:24:a4:
         f9:fc:c5:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnrSs+NQX5nUn87KgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMDE5MzkzMVoXDTI1MDgxODE5MzkzMVowLzEtMCsGA1UEAxMk
NDY0ZTVjMzMtN2IzMi00NjE4LThiNDQtNThiMTE5MjhhZTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM7+e4RQ7ZUp8X6umrzccsy0q94Vki5DTzot
vh1sYLEQOjXfPx734v4ta0unBOhst/4qWc7IS7u2Ds2IuLPtC2x8kGJXi14p25EC
yO2JVunMMxiS+N1g7HvQh4InctMP1zHxASK/S99yfE0snQBwPw49gQf2BmqXj8p8
imqz4uSB+0oZaVr3BTsMb5M81Xrdqq0nTtwVIVXVy2VNZlOXB+VJZbsuIWd5MV3I
cQbkXLV3P75EvsgrZ+O8oWGinqRrQJkvFohv6LddQ8XhB6Fy8dqF1qOQIz1H9J7A
Oxjk0vUdY/96387IdbkCmpHQG4iBNikDtRUsBeJAb2B59sPorQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHcoys9KDz3HpqiBv6KXhRXgQw14MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VhOGM2MzctOWFlOS0z
NDg4LWE2NTgtNjFjMmIxNTBhZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEqEl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK/08bdfk0DZb1lNP9O0PQ1ZeRyDLc1iZtgQymN7zC9PiLrOCKSV
8jdTDuGPVRp87RPbJxRr3EUgQVsvSU5sHXBKMTtQ+XEiJbRW7L4PIfiTOb3ZnD1t
OS+FULKcm8Zx1hsqm+VN3wQd47B8kCLVGlJlxj4x/WUghkDx+AGGGtr/hM58TEL/
6JE3CR0H9iIGQATWNSAwQl5KMg0I6UXsq8pfwXn5amHApwZkWQMwZl6mLqfBcwem
BKaNCTmP4tTE6iyAaE5vq6Ajy+zv6k7gNG8EbbOU1rhXG6N1GN8gngw90ispwSfI
mSxT7hXASCeknYk6+AwD+XMy9eAkpPn8xZM=
-----END CERTIFICATE-----
Generated at Wed Jul 9 22:09:28 2025 by rpki-client