Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f69f858-130b-3737-9cd3-772f072eebfb.roa
File:                     4f69f858-130b-3737-9cd3-772f072eebfb.roa (raw, json)
Hash identifier:          jo0qVCTj9mVrnKUsPe/NNTjDq9x8Q670YSnzNzwyF/8=
Subject key identifier:   69:7B:A5:19:A8:0E:EA:AB:3F:15:33:46:BE:7F:81:46:D0:B2:80:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290AB2ED6C940B976AD50E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f69f858-130b-3737-9cd3-772f072eebfb.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100d:be0c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ab:2e:d6:c9:40:b9:76:ad:50:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=8f172c34-0210-41ca-8a4a-cd8377d78ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:c6:51:7a:f7:79:be:54:56:7f:5c:fd:bc:
                    b2:c8:1c:cc:9b:52:7a:fd:d2:db:bd:d9:1b:a3:92:
                    24:8d:e0:e8:6b:a0:9c:10:5a:11:4e:90:50:44:fa:
                    51:49:c0:1d:bb:cf:9d:77:42:0c:22:85:08:4d:d2:
                    d4:e7:4d:40:4e:8f:d1:d1:ce:4d:02:ac:73:e7:73:
                    78:44:24:dc:2b:ee:61:1f:bb:8d:7f:55:c7:47:e6:
                    39:43:d8:d6:38:21:89:ad:bb:67:0a:52:5d:bb:10:
                    48:3b:ba:21:b5:fe:e9:63:5f:13:35:5d:41:67:33:
                    95:6a:dc:fc:6f:6a:8e:4e:51:05:41:86:d1:e4:49:
                    ae:bf:21:17:e0:ee:e9:10:f6:e4:bb:f5:a2:5f:c0:
                    68:b2:32:58:d3:4b:cb:90:d4:21:7f:ff:fd:80:24:
                    0e:67:82:f6:35:b8:8b:1b:48:6a:2a:61:4e:c8:89:
                    32:6a:99:a2:e4:66:ba:5c:46:e1:f6:d6:44:66:f0:
                    83:72:97:b0:30:3d:26:ea:b3:05:7d:ef:1e:15:e2:
                    20:05:af:7d:1f:e6:9d:66:e5:11:82:bb:7c:9a:8d:
                    b8:15:2b:1b:a7:d9:d2:09:65:7a:c6:c8:9d:fa:be:
                    20:f1:89:db:63:fe:35:88:b6:cc:f0:df:de:f1:30:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7B:A5:19:A8:0E:EA:AB:3F:15:33:46:BE:7F:81:46:D0:B2:80:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f69f858-130b-3737-9cd3-772f072eebfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:be0c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cc:9a:d6:a4:55:2a:f3:d7:bc:65:dd:ff:d9:9d:c7:fc:14:
         f6:d9:30:62:6d:fe:53:51:3f:cc:87:b4:f2:c9:d6:e2:a2:89:
         fc:59:a0:be:d4:da:a0:2a:75:23:b0:84:50:d0:e0:38:5a:14:
         94:60:95:81:4d:1c:c9:be:4f:a3:b9:59:35:0f:82:5a:0a:de:
         3a:2a:3a:9c:75:43:2d:5c:00:b9:d4:49:b6:24:2a:56:e5:ec:
         b1:72:f7:23:cf:11:c7:3c:ea:40:61:0f:7e:53:90:54:b7:37:
         14:fb:fd:4a:eb:57:dc:11:0b:cd:b2:97:2f:d3:a3:1e:dc:0a:
         da:18:20:ab:d3:fa:c6:72:4e:19:e6:13:0e:a7:fe:f9:76:13:
         88:ca:e2:f8:44:be:2d:c9:28:72:a0:d6:bd:6a:e3:3f:23:2b:
         91:80:5b:52:da:cb:94:36:34:ab:64:bc:74:d6:be:8b:5f:77:
         4f:71:66:8d:25:f9:9c:f6:b0:e9:13:e9:0c:e7:6a:2e:2f:33:
         95:9a:9e:6e:a8:a3:86:b1:79:5d:c5:da:04:de:ac:e8:09:78:
         99:32:27:7d:3c:26:a6:28:b8:4f:3a:9c:46:f0:5d:de:b6:56:
         c3:f1:7f:94:69:61:20:d1:27:a5:61:73:f7:1c:6e:13:13:09:
         34:9a:ff:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikKsu1slAuXatUOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
OGYxNzJjMzQtMDIxMC00MWNhLThhNGEtY2Q4Mzc3ZDc4YWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuHGUXr3eb5UVn9c/byyyBzMm1J6/dLbvdkb
o5IkjeDoa6CcEFoRTpBQRPpRScAdu8+dd0IMIoUITdLU501ATo/R0c5NAqxz53N4
RCTcK+5hH7uNf1XHR+Y5Q9jWOCGJrbtnClJduxBIO7ohtf7pY18TNV1BZzOVatz8
b2qOTlEFQYbR5EmuvyEX4O7pEPbku/WiX8BosjJY00vLkNQhf//9gCQOZ4L2NbiL
G0hqKmFOyIkyapmi5Ga6XEbh9tZEZvCDcpewMD0m6rMFfe8eFeIgBa99H+adZuUR
grt8mo24FSsbp9nSCWV6xsid+r4g8YnbY/41iLbM8N/e8TCiiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGl7pRmoDuqrPxUzRr5/gUbQsoCvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGY2OWY4NTgtMTMwYi0z
NzM3LTljZDMtNzcyZjA3MmVlYmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDb4M
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFrMmtakVSrz17xl3f/Zncf8FPbZMGJt/lNRP8yHtPLJ1uKiifxZ
oL7U2qAqdSOwhFDQ4DhaFJRglYFNHMm+T6O5WTUPgloK3joqOpx1Qy1cALnUSbYk
Klbl7LFy9yPPEcc86kBhD35TkFS3NxT7/UrrV9wRC82yly/Tox7cCtoYIKvT+sZy
ThnmEw6n/vl2E4jK4vhEvi3JKHKg1r1q4z8jK5GAW1Lay5Q2NKtkvHTWvotfd09x
Zo0l+Zz2sOkT6Qznai4vM5Wanm6oo4axeV3F2gTerOgJeJkyJ308JqYouE86nEbw
Xd62VsPxf5RpYSDRJ6Vhc/ccbhMTCTSa/4s=
-----END CERTIFICATE-----
Generated at Wed Jul 9 21:50:40 2025 by rpki-client