Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d71770b8-1889-3d1a-b66f-9fc7c3a1c959.roa
File:                     d71770b8-1889-3d1a-b66f-9fc7c3a1c959.roa (raw, json)
Hash identifier:          EhxZ/EmmczGwx9BbSbVYjiVBTWdQpKbgA3q0oU+0lnk=
Subject key identifier:   FF:34:3D:A2:4A:08:32:A4:00:76:9B:E6:62:F1:69:5B:95:1C:33:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FEA5AB3127FC969271CF40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d71770b8-1889-3d1a-b66f-9fc7c3a1c959.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        2600:1011:d010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:a5:ab:31:27:fc:96:92:71:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=c2c798d7-9f28-47fa-89e0-7bd8cc5a0b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a2:b1:00:ca:95:a4:06:31:90:93:1e:3e:7e:
                    3e:0c:a1:63:c4:8a:c7:c1:a2:3d:ea:28:88:b2:73:
                    0a:36:75:67:3c:a2:7c:b2:f6:72:8e:82:95:7c:8c:
                    29:1f:c5:74:e1:c6:0b:f1:36:27:54:08:77:4f:63:
                    53:34:e2:d6:d0:98:8e:3b:7f:b7:62:d1:35:59:47:
                    88:a2:e0:27:cd:37:42:26:bf:b5:88:f1:f1:f9:d3:
                    fa:5d:57:c2:a5:49:7d:b7:e1:26:9d:29:de:1c:50:
                    a0:25:b5:e5:77:ed:69:d4:69:45:51:98:74:47:3c:
                    a8:c3:82:85:7d:b9:10:ac:6c:76:59:99:10:be:3e:
                    69:c9:a0:1b:f7:68:0c:27:61:a9:13:58:1c:6f:14:
                    00:e2:e5:af:53:23:2b:61:bf:ce:59:ee:79:32:7d:
                    c6:ae:9b:cd:4f:65:e3:14:df:b6:df:c1:c8:d6:e8:
                    43:62:3d:6e:30:72:af:af:ea:bf:e0:7b:24:aa:9e:
                    ab:24:23:0f:78:15:60:26:08:43:eb:2d:a0:e2:85:
                    67:57:b7:65:41:ce:48:59:54:a6:c2:f6:9d:22:d5:
                    6d:70:88:a8:98:d7:ab:f8:28:e5:de:43:0f:2a:55:
                    b9:49:68:51:31:24:31:5d:f9:09:22:0f:ab:33:1e:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:34:3D:A2:4A:08:32:A4:00:76:9B:E6:62:F1:69:5B:95:1C:33:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d71770b8-1889-3d1a-b66f-9fc7c3a1c959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:d010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7c:7a:4d:93:e8:da:ba:8f:f9:73:d2:3c:9d:21:9b:92:5f:
         01:95:35:97:fe:06:e0:ce:88:a3:94:85:19:f9:27:74:ba:7d:
         04:56:77:86:77:bf:e9:ad:94:d2:40:95:9a:03:8b:24:0d:83:
         d9:ad:d5:55:91:d5:71:fa:23:99:27:8a:aa:08:23:c7:72:e1:
         4c:20:57:45:c3:e1:c2:f1:bf:57:68:8f:d9:30:3f:22:b1:8b:
         1d:4f:95:57:f3:ec:bc:64:6d:93:35:55:1c:49:5b:59:93:a6:
         43:f7:68:1d:16:b3:5f:f2:29:ae:7e:ec:9b:20:b2:f9:78:5b:
         9b:d6:fd:ff:75:41:c8:2a:4d:e8:fc:65:e3:ad:98:8a:51:21:
         16:27:fd:2c:8f:cd:fd:33:16:cf:11:9d:75:4f:7f:3b:c3:fd:
         6d:9e:e6:e6:23:e2:2f:04:e2:1c:8e:41:1a:b7:ae:fb:e4:58:
         f4:6e:7c:e5:31:b1:3c:e9:ff:9f:ea:75:f6:23:ce:78:53:ac:
         55:c3:ae:06:f2:c8:42:d8:d0:8f:cc:88:a5:23:e8:b3:9b:05:
         0e:0d:da:61:6d:54:0c:d7:a7:8d:10:a3:c2:93:ab:e4:a3:bc:
         e9:a2:37:57:80:cb:f6:1b:33:c8:95:c0:aa:56:19:d8:a0:15:
         68:2d:76:a6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElJ/qWrMSf8lpJxz0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk
YzJjNzk4ZDctOWYyOC00N2ZhLTg5ZTAtN2JkOGNjNWEwYjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKKxAMqVpAYxkJMePn4+DKFjxIrHwaI96iiI
snMKNnVnPKJ8svZyjoKVfIwpH8V04cYL8TYnVAh3T2NTNOLW0JiOO3+3YtE1WUeI
ouAnzTdCJr+1iPHx+dP6XVfCpUl9t+EmnSneHFCgJbXld+1p1GlFUZh0Rzyow4KF
fbkQrGx2WZkQvj5pyaAb92gMJ2GpE1gcbxQA4uWvUyMrYb/OWe55Mn3GrpvNT2Xj
FN+238HI1uhDYj1uMHKvr+q/4Hskqp6rJCMPeBVgJghD6y2g4oVnV7dlQc5IWVSm
wvadItVtcIiomNer+Cjl3kMPKlW5SWhRMSQxXfkJIg+rMx4GUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP80PaJKCDKkAHab5mLxaVuVHDODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDcxNzcwYjgtMTg4OS0z
ZDFhLWI2NmYtOWZjN2MzYTFjOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQEdAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC98ek2T6Nq6j/lz0jydIZuSXwGVNZf+BuDOiKOUhRn5J3S6fQRW
d4Z3v+mtlNJAlZoDiyQNg9mt1VWR1XH6I5kniqoII8dy4UwgV0XD4cLxv1doj9kw
PyKxix1PlVfz7LxkbZM1VRxJW1mTpkP3aB0Ws1/yKa5+7Jsgsvl4W5vW/f91Qcgq
Tej8ZeOtmIpRIRYn/SyPzf0zFs8RnXVPfzvD/W2e5uYj4i8E4hyOQRq3rvvkWPRu
fOUxsTzp/5/qdfYjznhTrFXDrgbyyELY0I/MiKUj6LObBQ4N2mFtVAzXp40Qo8KT
q+SjvOmiN1eAy/YbM8iVwKpWGdigFWgtdqY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:29:50 2025 by rpki-client