Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4a2700f-e5ef-30e2-8bdf-21c141a75119.roa
File:                     d4a2700f-e5ef-30e2-8bdf-21c141a75119.roa (raw, json)
Hash identifier:          1sYIUpYi5niWgcBVX7ZtrQr+uvvSwIdgo5iaD63tgJo=
Subject key identifier:   17:96:3F:71:B9:74:B1:41:2A:7D:24:D7:72:3B:4B:57:D5:D3:3F:3C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400E4FA4FC6867F5F025A30
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4a2700f-e5ef-30e2-8bdf-21c141a75119.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100a:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:e4:fa:4f:c6:86:7f:5f:02:5a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=0dfcfa3d-8934-4001-9275-b724318e4554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:91:e7:a6:80:c7:02:d5:e3:7f:ed:4a:6b:
                    02:63:5b:59:5d:66:83:85:d0:17:04:ad:5a:a3:f3:
                    20:98:0e:9d:74:95:41:ae:b8:14:af:92:49:17:62:
                    ee:7b:3a:42:79:35:41:f8:37:5d:df:a4:b2:64:3c:
                    59:e6:35:b4:9d:9d:0c:9d:55:e3:18:60:5c:6d:0e:
                    93:ae:f3:63:04:d4:80:dd:75:0e:6c:35:2e:ae:db:
                    df:ec:a8:f2:70:7e:36:65:6f:20:0d:dc:34:eb:0c:
                    36:15:07:8d:12:35:7b:bb:3c:01:a0:05:69:10:9b:
                    6b:52:ed:ce:14:8f:82:a2:7a:48:27:59:02:f3:e5:
                    57:0e:f8:03:dd:a4:80:46:43:76:4d:0c:57:7f:fe:
                    71:85:f4:37:41:7e:01:a3:8d:a7:44:8a:1c:f9:69:
                    b0:37:12:36:16:76:f5:52:ad:f6:bb:7d:8c:51:b9:
                    67:10:a8:fa:3c:5e:0e:b8:98:12:99:bf:41:86:65:
                    c7:7f:e4:c6:c7:0f:7b:25:e9:b9:98:20:ba:38:c3:
                    c0:0b:96:89:6b:b9:c7:4a:6f:21:1d:cc:30:d4:31:
                    77:a8:3e:40:6d:ac:b6:79:7d:ad:c7:50:c5:d9:a5:
                    ef:9a:99:72:dd:0d:92:d3:97:1b:5c:17:25:74:8d:
                    29:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:96:3F:71:B9:74:B1:41:2A:7D:24:D7:72:3B:4B:57:D5:D3:3F:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4a2700f-e5ef-30e2-8bdf-21c141a75119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:5e:34:3a:74:05:5c:f2:75:ec:70:75:f0:d3:28:bf:39:46:
         bc:53:85:27:a1:38:0e:44:e3:27:ce:43:6c:39:b2:26:19:64:
         64:ed:29:3a:81:a0:9b:57:0b:e6:e6:9c:d6:11:ca:32:2a:1e:
         b4:b3:f4:8c:05:1c:24:b8:75:40:5b:a3:1f:a7:1c:4d:db:38:
         a9:a6:af:98:6f:d3:5d:a0:96:be:a4:10:a7:00:e1:68:09:2f:
         99:61:a1:a3:f6:cd:f4:40:d5:e0:e4:5d:38:ad:7f:8e:2d:43:
         10:87:93:6d:85:ae:99:de:b0:20:26:af:44:9e:12:74:94:ef:
         6a:3f:f1:15:f1:49:b1:d5:b2:b9:9b:05:e1:7c:9b:e1:30:8f:
         93:d1:c0:c8:7c:9a:d0:fc:bc:e9:63:b5:a1:16:db:35:ce:b0:
         7d:57:bf:c4:bb:3d:df:31:ee:75:ff:cc:72:e6:5c:c9:53:c3:
         25:c1:4b:76:bf:02:e5:9e:67:fa:17:67:78:dd:92:1b:e0:c2:
         9c:23:c7:03:b9:b6:ca:c8:b8:f7:cb:3e:db:ed:63:21:7c:57:
         21:d4:88:2d:92:1e:3c:2a:d7:4f:cf:3f:3f:31:72:19:c4:7d:
         16:46:f6:d8:c1:5a:4a:8d:29:df:bb:bb:3f:92:ee:20:0c:e8:
         f2:64:b8:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAOT6T8aGf18CWjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
MGRmY2ZhM2QtODkzNC00MDAxLTkyNzUtYjcyNDMxOGU0NTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF+R56aAxwLV43/tSmsCY1tZXWaDhdAXBK1a
o/MgmA6ddJVBrrgUr5JJF2LuezpCeTVB+Ddd36SyZDxZ5jW0nZ0MnVXjGGBcbQ6T
rvNjBNSA3XUObDUurtvf7KjycH42ZW8gDdw06ww2FQeNEjV7uzwBoAVpEJtrUu3O
FI+ConpIJ1kC8+VXDvgD3aSARkN2TQxXf/5xhfQ3QX4Bo42nRIoc+WmwNxI2Fnb1
Uq32u32MUblnEKj6PF4OuJgSmb9BhmXHf+TGxw97Jem5mCC6OMPAC5aJa7nHSm8h
Hcww1DF3qD5Abay2eX2tx1DF2aXvmply3Q2S05cbXBcldI0pSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBeWP3G5dLFBKn0k13I7S1fV0z88MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDRhMjcwMGYtZTVlZi0z
MGUyLThiZGYtMjFjMTQxYTc1MTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCpEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABNeNDp0BVzydexwdfDTKL85RrxThSehOA5E4yfOQ2w5siYZZGTt
KTqBoJtXC+bmnNYRyjIqHrSz9IwFHCS4dUBbox+nHE3bOKmmr5hv012glr6kEKcA
4WgJL5lhoaP2zfRA1eDkXTitf44tQxCHk22FrpnesCAmr0SeEnSU72o/8RXxSbHV
srmbBeF8m+Ewj5PRwMh8mtD8vOljtaEW2zXOsH1Xv8S7Pd8x7nX/zHLmXMlTwyXB
S3a/AuWeZ/oXZ3jdkhvgwpwjxwO5tsrIuPfLPtvtYyF8VyHUiC2SHjwq10/PPz8x
chnEfRZG9tjBWkqNKd+7uz+S7iAM6PJkuNc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:06:30 2025 by rpki-client