Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8dad86-d214-3178-9bf2-b5f13e06c48b.roa
File:                     cc8dad86-d214-3178-9bf2-b5f13e06c48b.roa (raw, json)
Hash identifier:          Hf/6BvAJYKE4Cc/KjbG7KsT0I+r2G5gxmyTjs0wUeHs=
Subject key identifier:   D6:30:96:4C:69:67:FB:D9:D2:8B:DD:7B:DA:18:40:11:DC:57:6B:F5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218439F08903C6C560BEC980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8dad86-d214-3178-9bf2-b5f13e06c48b.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2607:f160:8800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:39:f0:89:03:c6:c5:60:be:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=2edc1d2d-de57-4dec-b39a-a92e716187c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:9d:05:54:0c:6a:9f:10:a3:62:71:dd:9b:
                    1d:3d:24:56:7c:df:de:d0:67:52:23:8c:e5:5e:0f:
                    5e:f1:b6:d5:8d:56:bd:a1:58:fa:0c:d4:6a:54:1e:
                    a1:9b:fe:d3:fb:75:38:05:a9:8d:0e:30:68:ea:f7:
                    cf:62:a8:62:f7:9c:5e:4c:75:20:60:f7:59:8b:ce:
                    10:1b:fc:2f:6c:80:62:3a:3f:56:c1:f1:3f:f2:61:
                    8b:b8:f5:83:0c:59:c5:cd:32:b1:9a:03:a5:f2:c5:
                    6b:31:bc:22:95:15:11:9a:cd:96:bb:83:1b:df:b5:
                    d4:67:34:0b:22:fb:80:ee:dc:fa:0c:be:a3:5c:20:
                    13:62:e9:e5:ab:09:9f:1d:99:7a:28:1a:e1:b5:21:
                    6f:b2:93:00:87:7c:d5:0d:4b:57:cd:c8:ba:c4:10:
                    d6:09:b2:69:d7:eb:13:92:01:1b:db:ba:30:6a:4f:
                    9d:8d:8f:8b:89:fb:27:3d:80:b0:7b:45:7b:41:ea:
                    c4:79:24:1e:29:9f:47:3e:2e:95:75:d5:d7:26:56:
                    c2:61:31:50:f5:27:57:84:c0:e8:d6:4b:84:31:59:
                    a8:38:83:55:18:cc:d3:bc:56:22:ad:aa:34:ed:fa:
                    d5:7f:49:20:26:e9:a2:60:c0:1b:61:69:99:0a:41:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:30:96:4C:69:67:FB:D9:D2:8B:DD:7B:DA:18:40:11:DC:57:6B:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8dad86-d214-3178-9bf2-b5f13e06c48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:8800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:61:ff:57:98:18:58:20:94:da:2c:87:a3:33:5e:0b:45:6c:
         39:c7:d5:df:99:c8:c5:20:dd:c7:73:8e:b9:e5:2b:0a:1c:ff:
         23:6b:9b:8e:87:26:9e:44:1f:08:80:e0:f6:89:18:e1:0e:2b:
         2d:e9:b4:e1:17:36:a0:5c:fe:86:7c:45:a0:da:ec:ab:f3:6e:
         4c:0e:b4:2b:fd:b9:a4:5b:56:dd:05:dc:ad:a3:e8:7b:6e:25:
         52:38:2c:08:b0:f1:56:83:5a:ca:29:ed:73:2b:e9:e0:9d:ab:
         d5:e4:69:58:f0:0f:a8:28:59:97:58:93:59:50:9e:94:18:ed:
         f5:0e:b1:59:0c:44:57:d3:ec:34:0e:c4:e8:87:30:b4:bf:55:
         64:59:ca:d7:f8:90:7a:7c:2f:11:99:14:73:d2:70:e9:54:97:
         61:27:3d:25:d2:37:e2:2f:af:a9:e5:60:89:76:d9:73:0c:69:
         93:99:ee:6f:87:37:ab:f7:a5:61:1c:c6:f1:5e:bd:2a:dd:8c:
         ba:1f:61:60:30:70:b8:1e:ee:0b:19:51:58:2f:45:8d:ce:b3:
         87:f8:c0:92:c3:bd:2c:8f:75:8d:25:15:71:19:31:98:2c:ee:
         3f:a9:ee:f3:79:75:bf:ba:08:4d:75:d6:8e:c0:49:0f:7e:59:
         2c:46:ea:57
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkhhDnwiQPGxWC+yYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
MmVkYzFkMmQtZGU1Ny00ZGVjLWIzOWEtYTkyZTcxNjE4N2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkmdBVQMap8Qo2Jx3ZsdPSRWfN/e0GdSI4zl
Xg9e8bbVjVa9oVj6DNRqVB6hm/7T+3U4BamNDjBo6vfPYqhi95xeTHUgYPdZi84Q
G/wvbIBiOj9WwfE/8mGLuPWDDFnFzTKxmgOl8sVrMbwilRURms2Wu4Mb37XUZzQL
IvuA7tz6DL6jXCATYunlqwmfHZl6KBrhtSFvspMAh3zVDUtXzci6xBDWCbJp1+sT
kgEb27owak+djY+LifsnPYCwe0V7QerEeSQeKZ9HPi6VddXXJlbCYTFQ9SdXhMDo
1kuEMVmoOINVGMzTvFYirao07frVf0kgJumiYMAbYWmZCkF/EQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNYwlkxpZ/vZ0ovde9oYQBHcV2v1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2M4ZGFkODYtZDIxNC0z
MTc4LTliZjItYjVmMTNlMDZjNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfxYIgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnWH/V5gYWCCU2iyHozNeC0VsOcfV35nIxSDdx3OOueUrChz/I2ub
jocmnkQfCIDg9okY4Q4rLem04Rc2oFz+hnxFoNrsq/NuTA60K/25pFtW3QXcraPo
e24lUjgsCLDxVoNayintcyvp4J2r1eRpWPAPqChZl1iTWVCelBjt9Q6xWQxEV9Ps
NA7E6IcwtL9VZFnK1/iQenwvEZkUc9Jw6VSXYSc9JdI34i+vqeVgiXbZcwxpk5nu
b4c3q/elYRzG8V69Kt2Muh9hYDBwuB7uCxlRWC9Fjc6zh/jAksO9LI91jSUVcRkx
mCzuP6nu83l1v7oITXXWjsBJD35ZLEbqVw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:38 2025 by rpki-client