Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42641b32-4b5b-387d-8f30-a2ec0d9a85fe.roa
File:                     42641b32-4b5b-387d-8f30-a2ec0d9a85fe.roa (raw, json)
Hash identifier:          4fysPTBYkb6Ojx/jZPDBXLZ78Yp5GnQhNJOxKemKW/o=
Subject key identifier:   23:FA:21:0B:ED:E7:33:11:A9:74:95:24:3B:C3:D6:A8:B2:91:E5:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24572C28096DC0D936CB60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42641b32-4b5b-387d-8f30-a2ec0d9a85fe.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1002:a120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:57:2c:28:09:6d:c0:d9:36:cb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=a246e021-f144-4043-b64e-a8605f57592b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:66:69:05:94:78:23:6c:9b:b3:ee:a2:21:
                    63:b5:6c:c2:13:8e:3e:2b:0a:cb:f5:78:10:52:a2:
                    4d:99:01:79:84:e2:a8:35:bc:7d:e4:4f:77:de:16:
                    52:f7:4c:f7:fa:a5:f5:1b:ec:00:aa:e0:14:16:2e:
                    22:7f:16:f8:de:d4:bd:a0:56:f9:05:3d:2c:ac:d7:
                    70:e1:2f:6c:1b:e1:a8:ad:85:92:1b:4e:b5:d0:f6:
                    7f:de:78:5a:ac:df:0c:55:84:3c:61:9a:db:89:64:
                    43:29:25:4a:23:96:73:1a:bf:d4:3f:43:c2:3b:cb:
                    ba:f6:be:57:90:76:3a:8e:78:b2:dc:fd:b6:e7:a7:
                    83:4c:10:a8:da:75:4d:64:ea:24:ee:fb:ae:2f:d5:
                    0c:f2:7e:8b:32:12:a0:e4:28:d0:66:33:7b:fb:76:
                    2b:e8:db:48:1f:44:34:e5:3e:81:24:88:be:2a:5e:
                    af:be:07:9d:5c:d5:74:cb:e5:71:d4:8e:22:b9:c4:
                    9c:34:e1:a0:7b:99:e6:f6:a2:e1:cd:ae:8d:26:7e:
                    1d:29:3d:f7:ea:bb:57:14:2e:ec:47:05:3a:96:78:
                    79:e1:ab:37:0c:79:e7:24:18:0a:c3:ca:86:2e:f8:
                    68:62:55:4e:c2:d0:63:2d:56:d7:56:02:5f:e5:52:
                    ba:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FA:21:0B:ED:E7:33:11:A9:74:95:24:3B:C3:D6:A8:B2:91:E5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/42641b32-4b5b-387d-8f30-a2ec0d9a85fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:84:7b:b9:cc:03:79:17:2e:4d:1b:c9:e2:71:8b:02:1b:7b:
         e4:db:bc:69:29:38:42:1e:88:5e:e9:c0:85:1f:15:3a:37:b8:
         22:d7:67:89:0c:18:ec:6e:0a:fd:d3:c6:71:b4:c8:8c:f3:a0:
         2c:f2:4b:db:e3:4b:a0:35:c0:47:02:8a:d6:45:e0:b6:c6:88:
         28:e3:05:27:6b:2c:63:0d:d3:c2:8c:fc:dd:81:2d:1f:40:6e:
         0f:69:ed:79:6f:a1:c8:1a:e0:97:44:40:e6:da:7a:2d:71:ce:
         bf:a8:b3:f6:d0:09:68:6a:5a:32:f2:4e:97:4d:52:09:f2:f9:
         f9:bd:eb:53:53:07:ee:d6:3e:39:7c:34:fb:9c:b8:08:93:74:
         f0:e1:01:b2:cf:2c:5f:29:79:ee:75:6f:3a:69:09:d8:e8:2b:
         95:e5:98:26:64:af:60:a7:d3:46:29:19:d0:f4:d5:a8:06:37:
         a1:fb:b9:c8:7c:8d:88:af:6e:cd:9c:c1:d2:02:a9:04:0b:6f:
         86:76:8e:23:10:88:3c:60:e2:75:1e:dd:50:d3:37:93:fb:4d:
         e5:1e:21:5e:d0:46:5f:89:f7:2f:c1:e8:8b:fa:b1:af:06:ba:
         d8:39:9b:5a:e9:58:a9:a4:9b:8d:f5:41:dc:00:5b:ae:78:58:
         9c:6c:ef:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJFcsKAltwNk2y2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
YTI0NmUwMjEtZjE0NC00MDQzLWI2NGUtYTg2MDVmNTc1OTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipNmaQWUeCNsm7PuoiFjtWzCE44+KwrL9XgQ
UqJNmQF5hOKoNbx95E933hZS90z3+qX1G+wAquAUFi4ifxb43tS9oFb5BT0srNdw
4S9sG+GorYWSG0610PZ/3nharN8MVYQ8YZrbiWRDKSVKI5ZzGr/UP0PCO8u69r5X
kHY6jniy3P2256eDTBCo2nVNZOok7vuuL9UM8n6LMhKg5CjQZjN7+3Yr6NtIH0Q0
5T6BJIi+Kl6vvgedXNV0y+Vx1I4iucScNOGge5nm9qLhza6NJn4dKT336rtXFC7s
RwU6lnh54as3DHnnJBgKw8qGLvhoYlVOwtBjLVbXVgJf5VK60wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCP6IQvt5zMRqXSVJDvD1qiykeXiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDI2NDFiMzItNGI1Yi0z
ODdkLThmMzAtYTJlYzBkOWE4NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAqEg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABSEe7nMA3kXLk0byeJxiwIbe+TbvGkpOEIeiF7pwIUfFTo3uCLX
Z4kMGOxuCv3TxnG0yIzzoCzyS9vjS6A1wEcCitZF4LbGiCjjBSdrLGMN08KM/N2B
LR9Abg9p7Xlvocga4JdEQObaei1xzr+os/bQCWhqWjLyTpdNUgny+fm961NTB+7W
Pjl8NPucuAiTdPDhAbLPLF8pee51bzppCdjoK5XlmCZkr2Cn00YpGdD01agGN6H7
uch8jYivbs2cwdICqQQLb4Z2jiMQiDxg4nUe3VDTN5P7TeUeIV7QRl+J9y/B6Iv6
sa8Gutg5m1rpWKmkm431QdwAW654WJxs70Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:55 2025 by rpki-client