Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9eb9d2db-a69f-3d65-a1c2-a32dc9867939.roa
File:                     9eb9d2db-a69f-3d65-a1c2-a32dc9867939.roa (raw, json)
Hash identifier:          Ry2RJS0jVshc0HnwBKOUIHfA6ZxM2pOpMiEjdwTYOzA=
Subject key identifier:   0C:F4:F3:18:F6:49:E0:3E:3E:54:8D:84:1A:9F:18:D8:5B:CB:31:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C1423FC82619171F6480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9eb9d2db-a69f-3d65-a1c2-a32dc9867939.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100b:b0c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c1:42:3f:c8:26:19:17:1f:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=479aab2a-eb6e-475f-bc8d-d2897e6c85b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:bb:42:48:4f:9b:5f:0a:7c:a7:28:c7:af:
                    0c:3d:42:45:f4:46:47:47:4d:f6:c1:ee:eb:5e:75:
                    57:5f:b3:cc:57:89:c8:76:ef:24:40:a9:f0:d1:a9:
                    14:7f:f0:4b:15:96:9b:4e:fc:11:a5:ca:06:37:0d:
                    30:f8:bc:20:31:34:8d:c2:fe:03:24:c3:41:86:06:
                    f9:a0:81:3b:01:66:14:0e:17:05:09:68:63:c6:48:
                    1b:ee:82:40:8b:f1:be:a0:3a:d6:7d:99:25:a8:6f:
                    e2:28:e6:cd:6f:5a:5d:c2:32:c3:98:10:d3:1a:33:
                    e1:6f:ef:6f:d9:ca:73:2b:38:f7:3a:3f:76:2d:45:
                    60:18:8c:76:b2:f9:d4:d6:a2:a4:d5:c7:a2:de:6e:
                    58:44:cf:85:73:89:18:ef:b7:67:7d:ac:c7:e3:f1:
                    be:2d:1f:22:82:cf:e8:e1:27:3b:1b:4c:f9:52:30:
                    75:66:5f:1e:f9:6f:91:22:92:3a:86:72:ac:07:c8:
                    a7:6e:07:9e:a3:ad:2a:f1:8b:97:8e:96:d4:63:5b:
                    55:ce:e9:70:f2:00:57:71:b9:11:10:8f:02:3c:b7:
                    3c:a4:16:2d:41:fb:09:c5:7b:e8:eb:2c:01:7c:24:
                    9b:aa:bb:79:e5:0a:2a:28:1f:d4:89:0e:4f:4f:31:
                    e6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F4:F3:18:F6:49:E0:3E:3E:54:8D:84:1A:9F:18:D8:5B:CB:31:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9eb9d2db-a69f-3d65-a1c2-a32dc9867939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b0c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:73:93:f7:79:a8:e5:06:d2:e0:57:44:a6:7f:29:ba:80:
         dd:d2:70:1b:b2:cd:b8:d2:7c:ee:d9:a2:6f:90:17:58:34:42:
         f4:0c:e2:d8:7f:ee:e0:f8:18:6e:0f:bb:7a:7f:1d:8d:07:6c:
         93:36:f9:d4:3a:5f:d6:15:94:f8:ac:9f:e3:fb:fe:9b:df:d9:
         0b:ec:28:85:3d:36:7b:d3:8e:e8:85:a3:4b:2d:3e:7c:08:ba:
         ce:aa:8d:d2:87:eb:c9:82:73:27:2e:7d:41:63:f5:2a:99:4b:
         69:69:1e:89:a7:35:43:d3:c8:a7:d9:8c:a3:09:87:e6:7a:a6:
         a1:b2:f6:6e:8e:e3:ce:a5:37:24:02:fc:b0:6d:e1:d9:41:8f:
         cf:fb:fe:a8:d3:83:60:89:41:81:ca:38:23:c9:49:4e:80:5b:
         1f:9a:ea:92:e0:5b:55:d9:15:7d:11:7e:65:79:19:f2:ca:ea:
         46:63:97:cd:c9:47:75:98:55:de:e1:8b:ba:b1:dd:6a:ff:aa:
         4e:65:09:34:3b:01:1d:c5:58:1b:49:24:7b:6f:75:67:cf:f6:
         94:66:40:be:a7:5f:7b:1a:49:15:73:53:95:b8:89:f4:b3:12:
         f2:e2:31:d7:85:14:74:c0:11:4d:ae:f2:4b:32:b3:58:c4:97:
         1b:28:a6:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikMFCP8gmGRcfZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
NDc5YWFiMmEtZWI2ZS00NzVmLWJjOGQtZDI4OTdlNmM4NWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0e7QkhPm18KfKcox68MPUJF9EZHR032we7r
XnVXX7PMV4nIdu8kQKnw0akUf/BLFZabTvwRpcoGNw0w+LwgMTSNwv4DJMNBhgb5
oIE7AWYUDhcFCWhjxkgb7oJAi/G+oDrWfZklqG/iKObNb1pdwjLDmBDTGjPhb+9v
2cpzKzj3Oj92LUVgGIx2svnU1qKk1cei3m5YRM+Fc4kY77dnfazH4/G+LR8igs/o
4Sc7G0z5UjB1Zl8e+W+RIpI6hnKsB8inbgeeo60q8YuXjpbUY1tVzulw8gBXcbkR
EI8CPLc8pBYtQfsJxXvo6ywBfCSbqrt55QoqKB/UiQ5PTzHmHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAz08xj2SeA+PlSNhBqfGNhbyzFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWViOWQyZGItYTY5Zi0z
ZDY1LWExYzItYTMyZGM5ODY3OTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQC7DA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACzIc5P3eajlBtLgV0Smfym6gN3ScBuyzbjSfO7Zom+QF1g0QvQM
4th/7uD4GG4Pu3p/HY0HbJM2+dQ6X9YVlPisn+P7/pvf2QvsKIU9NnvTjuiFo0st
PnwIus6qjdKH68mCcycufUFj9SqZS2lpHomnNUPTyKfZjKMJh+Z6pqGy9m6O486l
NyQC/LBt4dlBj8/7/qjTg2CJQYHKOCPJSU6AWx+a6pLgW1XZFX0RfmV5GfLK6kZj
l83JR3WYVd7hi7qx3Wr/qk5lCTQ7AR3FWBtJJHtvdWfP9pRmQL6nX3saSRVzU5W4
ifSzEvLiMdeFFHTAEU2u8ksys1jElxsopng=
-----END CERTIFICATE-----
Generated at Wed Jul 9 19:55:02 2025 by rpki-client