Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d40a8d32-a894-34fe-ac33-7676e053f614.roa
File:                     d40a8d32-a894-34fe-ac33-7676e053f614.roa (raw, json)
Hash identifier:          /UFnBDhn+5hLgQSH6yr+Zn8YHUm3pv0WioVTnkIU99o=
Subject key identifier:   47:37:60:6B:95:7B:44:BC:69:E2:33:72:59:65:AC:A2:F7:CA:E1:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA04E945C4DD0EAEC739C
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d40a8d32-a894-34fe-ac33-7676e053f614.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1014:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a0:4e:94:5c:4d:d0:ea:ec:73:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=bf6f643c-6031-4e61-8193-8359ba0ee759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:ae:3e:65:36:44:63:3a:48:01:0b:93:e4:
                    60:db:9b:05:6a:1a:47:96:72:fe:d8:7d:65:35:ec:
                    13:3f:bc:be:02:6b:4b:f8:c3:f3:ca:a2:12:a4:b6:
                    77:43:be:19:36:b2:e8:06:00:a6:c9:19:57:29:b6:
                    2c:9f:02:b2:cf:27:73:21:dd:bb:51:d3:53:90:20:
                    c4:fd:43:66:b2:3f:4c:11:d7:09:2e:ac:60:8a:c9:
                    3e:c9:87:93:8c:e0:e0:69:17:3b:20:61:33:0f:fb:
                    e9:66:a9:28:26:1e:a8:78:23:5a:a9:e1:5f:29:83:
                    86:27:10:25:28:28:5c:e1:2c:96:ed:9e:08:e6:88:
                    5c:f1:2e:23:3c:20:e1:d9:38:68:4d:d4:6f:db:c4:
                    8c:a5:74:ba:38:70:1b:a4:c9:96:f8:b5:ee:33:7a:
                    fe:aa:f1:48:64:fe:26:ee:5d:b7:e2:80:a8:df:2c:
                    c7:98:50:aa:8c:3d:04:a0:41:b2:e4:23:24:77:f3:
                    4f:bd:a9:c8:dc:ac:bc:24:77:56:3d:32:f1:cb:c8:
                    fd:d3:f7:3a:4f:aa:26:22:7a:f5:de:5e:6c:a0:9f:
                    2f:a2:ed:47:0b:34:0e:21:d2:82:a2:60:ff:87:87:
                    67:6e:4e:9e:28:96:5b:8c:4d:3b:81:e0:76:05:da:
                    68:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:37:60:6B:95:7B:44:BC:69:E2:33:72:59:65:AC:A2:F7:CA:E1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d40a8d32-a894-34fe-ac33-7676e053f614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b5:26:3a:f7:d6:fa:de:78:54:23:fd:5e:2f:74:1b:0a:76:
         e3:ea:b2:04:cf:9f:ac:74:f3:6b:0f:ae:f6:08:ee:47:a5:3a:
         b8:7b:66:2c:36:cf:2c:c4:99:49:69:6c:74:40:6a:8a:70:62:
         fc:fb:df:ed:1c:ac:67:65:88:d7:70:7e:c4:f2:16:8a:2b:6d:
         6f:61:b2:e1:b9:a0:2d:1f:ed:4d:f1:aa:96:5a:4f:6f:ba:65:
         57:43:49:f9:f7:10:39:68:19:da:7b:b7:f7:6d:3c:fb:e7:c5:
         69:9e:2a:9c:c8:a9:bb:9c:6a:62:51:dc:d0:32:e4:b8:18:87:
         00:d1:55:1a:17:1e:81:11:b7:62:40:13:0c:91:d5:eb:ad:fb:
         b4:6b:15:97:9c:f6:56:c7:fe:c3:bd:dc:98:5d:dc:e2:79:7e:
         79:22:19:29:4e:fe:e2:ff:5b:d1:74:fb:76:df:e0:f4:07:14:
         bd:50:48:dc:05:5e:7a:98:f8:13:f4:b9:22:5e:43:17:1b:d7:
         40:7d:d4:75:78:7e:3b:22:e8:c7:cd:b0:a9:ec:ab:be:ea:d2:
         d9:66:21:99:17:2e:f2:9b:95:b1:fc:02:c7:fe:70:5d:f9:36:
         e0:09:1c:dc:31:a8:de:07:3f:e4:2b:57:1b:9c:b9:28:76:45:
         60:76:18:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/qBOlFxN0Orsc5wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
YmY2ZjY0M2MtNjAzMS00ZTYxLTgxOTMtODM1OWJhMGVlNzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumWuPmU2RGM6SAELk+Rg25sFahpHlnL+2H1l
NewTP7y+AmtL+MPzyqISpLZ3Q74ZNrLoBgCmyRlXKbYsnwKyzydzId27UdNTkCDE
/UNmsj9MEdcJLqxgisk+yYeTjODgaRc7IGEzD/vpZqkoJh6oeCNaqeFfKYOGJxAl
KChc4SyW7Z4I5ohc8S4jPCDh2ThoTdRv28SMpXS6OHAbpMmW+LXuM3r+qvFIZP4m
7l234oCo3yzHmFCqjD0EoEGy5CMkd/NPvanI3Ky8JHdWPTLxy8j90/c6T6omInr1
3l5soJ8vou1HCzQOIdKComD/h4dnbk6eKJZbjE07geB2BdpoqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEc3YGuVe0S8aeIzclllrKL3yuGxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQwYThkMzItYTg5NC0z
NGZlLWFjMzMtNzY3NmUwNTNmNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFKAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ61Jjr31vreeFQj/V4vdBsKduPqsgTPn6x082sPrvYI7kelOrh7
Ziw2zyzEmUlpbHRAaopwYvz73+0crGdliNdwfsTyFoorbW9hsuG5oC0f7U3xqpZa
T2+6ZVdDSfn3EDloGdp7t/dtPPvnxWmeKpzIqbucamJR3NAy5LgYhwDRVRoXHoER
t2JAEwyR1eut+7RrFZec9lbH/sO93Jhd3OJ5fnkiGSlO/uL/W9F0+3bf4PQHFL1Q
SNwFXnqY+BP0uSJeQxcb10B91HV4fjsi6MfNsKnsq77q0tlmIZkXLvKblbH8Asf+
cF35NuAJHNwxqN4HP+QrVxucuSh2RWB2GA8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:57 2025 by rpki-client