Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5dce83-fa4d-3045-8aa3-0692804be1ae.roa
File:                     db5dce83-fa4d-3045-8aa3-0692804be1ae.roa (raw, json)
Hash identifier:          P/N8mWM13bC3FVbOn+Y0UmDHQY1056D1/2e+fzV05bg=
Subject key identifier:   FD:17:F9:AE:9D:F8:73:83:B2:42:7C:B8:39:AB:E6:9B:05:3D:E1:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C245958EC16AF7ECD4B6100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5dce83-fa4d-3045-8aa3-0692804be1ae.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1003:a410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:59:58:ec:16:af:7e:cd:4b:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=6fc0d7dd-4e0e-4e24-9e41-d17f09f291b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:2f:ca:0c:39:43:f7:e7:68:6e:26:18:4a:
                    31:d9:70:31:fa:59:36:3f:5b:8b:d4:c6:7f:72:c6:
                    1f:eb:51:cb:1c:a6:d8:52:c2:94:04:e5:95:3f:b6:
                    85:7a:70:32:45:d6:e7:ba:2f:8b:30:5d:12:32:a9:
                    8a:87:aa:f3:6c:9d:20:14:d4:5b:e8:13:b9:2f:d5:
                    b9:67:cd:a8:89:2f:fb:c2:70:91:3b:ff:b1:79:2b:
                    b2:51:e6:52:24:39:63:58:cf:63:ea:ee:e8:f7:f3:
                    cb:6c:50:d6:c6:cb:da:fc:ed:bb:ec:09:16:3a:e7:
                    cf:5a:46:57:c2:6c:0b:96:58:ce:22:e1:07:70:c4:
                    d2:d9:1e:02:73:41:89:d1:0e:38:63:04:72:60:c9:
                    21:6c:fa:09:c2:74:3c:c8:a8:7f:23:fe:31:43:a2:
                    a2:6c:cb:d8:b8:cd:34:dc:06:df:19:af:67:4b:e4:
                    69:13:3d:c1:49:b6:d3:41:e2:6a:21:95:5b:ce:1c:
                    44:6b:2e:1d:e9:82:63:21:32:54:fd:36:21:79:a2:
                    70:6f:c5:74:06:0c:34:16:98:35:37:e4:68:bf:be:
                    4c:0b:a9:22:48:29:a8:f3:9f:1d:7f:87:ec:84:6e:
                    91:52:e1:e0:17:72:75:cd:e3:9a:f4:a7:93:5f:2d:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:17:F9:AE:9D:F8:73:83:B2:42:7C:B8:39:AB:E6:9B:05:3D:E1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5dce83-fa4d-3045-8aa3-0692804be1ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a410::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:74:cb:73:24:68:d9:4a:2f:c0:56:c8:d6:98:f8:a5:93:55:
         c6:64:c1:6c:92:bf:86:a8:9a:9d:7c:5d:4e:54:19:a0:0e:01:
         39:ca:14:ab:e9:64:30:a8:24:7b:68:28:87:54:01:59:b7:a4:
         81:88:d3:4c:c7:e3:16:c9:48:28:4c:f2:1b:1b:fd:68:71:94:
         d9:02:15:64:22:86:ec:6e:4f:5a:49:9a:34:da:76:c4:f2:9d:
         ef:50:6c:f0:2c:fd:79:21:ca:d0:0b:ab:8b:03:3f:1e:98:c6:
         ef:f1:f7:8f:4b:49:a1:95:15:4b:04:2d:40:7f:ba:8f:07:e0:
         cd:97:bb:8b:dd:e1:b5:d5:ba:ba:61:21:a4:f2:ef:0d:5f:40:
         fb:a0:a8:5a:92:da:05:23:70:c2:7d:75:df:a2:a1:4d:12:b3:
         58:13:58:90:18:de:8e:ff:e4:d3:de:4f:a9:38:b0:56:42:de:
         20:ef:62:83:e6:3f:b0:27:c1:35:01:a5:ba:2b:4f:65:02:66:
         b9:54:3d:5b:4a:34:e8:cf:14:f8:37:f4:99:a7:dc:25:55:9d:
         e3:85:87:79:4c:10:a8:0d:ef:06:f7:23:90:20:da:11:6d:17:
         d4:bf:d3:40:64:f7:e7:77:3c:f9:5b:ba:bc:ce:2b:16:19:bb:
         fb:de:78:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJFlY7Bavfs1LYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
NmZjMGQ3ZGQtNGUwZS00ZTI0LTllNDEtZDE3ZjA5ZjI5MWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKovygw5Q/fnaG4mGEox2XAx+lk2P1uL1MZ/
csYf61HLHKbYUsKUBOWVP7aFenAyRdbnui+LMF0SMqmKh6rzbJ0gFNRb6BO5L9W5
Z82oiS/7wnCRO/+xeSuyUeZSJDljWM9j6u7o9/PLbFDWxsva/O277AkWOufPWkZX
wmwLlljOIuEHcMTS2R4Cc0GJ0Q44YwRyYMkhbPoJwnQ8yKh/I/4xQ6KibMvYuM00
3AbfGa9nS+RpEz3BSbbTQeJqIZVbzhxEay4d6YJjITJU/TYheaJwb8V0Bgw0Fpg1
N+Rov75MC6kiSCmo858df4fshG6RUuHgF3J1zeOa9KeTXy3hOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP0X+a6d+HODskJ8uDmr5psFPeGjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1ZGNlODMtZmE0ZC0z
MDQ1LThhYTMtMDY5MjgwNGJlMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQA6QQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADJ0y3MkaNlKL8BWyNaY+KWTVcZkwWySv4aomp18XU5UGaAOATnK
FKvpZDCoJHtoKIdUAVm3pIGI00zH4xbJSChM8hsb/WhxlNkCFWQihuxuT1pJmjTa
dsTyne9QbPAs/XkhytALq4sDPx6Yxu/x949LSaGVFUsELUB/uo8H4M2Xu4vd4bXV
urphIaTy7w1fQPugqFqS2gUjcMJ9dd+ioU0Ss1gTWJAY3o7/5NPeT6k4sFZC3iDv
YoPmP7AnwTUBpborT2UCZrlUPVtKNOjPFPg39Jmn3CVVneOFh3lMEKgN7wb3I5Ag
2hFtF9S/00Bk9+d3PPlburzOKxYZu/veeJs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:57 2025 by rpki-client