Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa
File:                     dee5b4c9-16a9-3873-8941-c417a9236e9f.roa (raw, json)
Hash identifier:          EWsNyYpFiH75KY4S3n+jx6JcQEWNimQLzQmEU7STlOI=
Subject key identifier:   8D:BF:86:03:30:9B:0F:72:93:83:17:AD:0F:11:77:B5:86:CD:6C:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848A400ED7F3AFF6736E04BB200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:100d:b170::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:ed:7f:3a:ff:67:36:e0:4b:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=5c138556-d3c7-4e42-9f42-2879c6144b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:67:cd:20:76:d9:80:ba:43:d8:83:24:ad:
                    d7:6b:89:a0:74:a3:fa:0c:88:e9:e6:48:a9:94:4d:
                    1f:7c:4e:bd:51:13:f4:3e:4a:3f:ca:6b:e9:4b:94:
                    f2:55:55:4c:eb:7f:50:18:33:ad:4f:ab:ef:83:46:
                    7e:ed:ec:86:5c:4c:f1:67:97:86:3e:c2:9a:5f:70:
                    02:3b:ab:97:fa:23:a6:6c:64:17:85:9d:ed:bc:3a:
                    6d:f2:a8:5d:9f:1b:70:38:11:72:10:cd:ef:17:cb:
                    7a:fc:7c:11:d4:05:6b:b2:3f:5b:ab:8a:1f:4d:df:
                    21:d4:c5:7f:e3:d2:75:22:fe:90:17:f0:36:21:f7:
                    b1:f2:8a:df:a7:05:62:66:b8:59:db:b9:65:e5:c6:
                    1c:1a:38:6d:7c:e9:32:a4:a2:92:85:86:99:2e:f0:
                    49:a7:1e:b6:66:d0:9a:1f:b9:43:5c:6e:a4:c7:40:
                    c3:8c:cd:24:34:76:d9:20:da:7e:cb:51:86:7b:fc:
                    56:b0:a6:f9:85:a5:9e:d5:03:42:b2:5d:b4:70:b3:
                    3d:14:9b:6b:0d:de:3b:f0:f8:9b:4a:89:3f:4f:a2:
                    2d:a5:7c:57:f2:74:f1:e6:9d:25:84:8a:f0:bc:62:
                    b6:19:26:0e:77:88:d8:44:35:96:9d:fc:3f:b5:50:
                    7c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BF:86:03:30:9B:0F:72:93:83:17:AD:0F:11:77:B5:86:CD:6C:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b170::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7b:db:56:f3:ff:19:fc:27:d5:83:81:58:bc:38:8c:a1:55:
         4d:92:11:23:34:9d:26:e3:03:27:94:28:b1:83:39:79:9d:06:
         d8:61:ed:8a:83:de:38:43:fa:66:e5:ef:0e:13:55:40:61:7e:
         b6:42:e1:3e:0f:83:30:17:0b:83:d2:0e:76:fb:ed:54:08:f1:
         fc:67:58:04:c3:15:54:02:b4:19:ff:3f:22:4b:de:f0:24:33:
         05:31:5a:2a:b9:68:67:39:56:5b:1d:67:84:81:8a:16:eb:90:
         f1:5d:fc:7e:62:01:5c:39:c4:18:87:b0:8c:8e:87:d4:bb:21:
         d6:62:93:26:23:22:87:11:64:5f:78:0b:f2:4e:b1:9b:f6:cc:
         e9:84:d6:31:3b:2c:cf:8b:88:6e:a0:12:c3:03:3f:cd:fa:79:
         6f:7e:6a:b2:84:ab:3b:12:bf:84:14:1b:a4:45:df:d7:c9:01:
         3a:8f:d8:95:66:80:25:d0:32:8b:ef:bd:be:49:7f:2b:40:3a:
         ec:12:4a:aa:c8:02:55:f2:26:52:41:95:95:d9:53:ec:28:fa:
         e7:ce:31:3f:cb:f8:0f:98:05:39:55:a0:cc:df:0a:9e:09:a4:
         89:77:c8:26:02:14:84:9e:3a:91:a9:6f:13:4a:e4:b7:ea:27:
         80:0b:5d:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEikAO1/Ov9nNuBLsgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
NWMxMzg1NTYtZDNjNy00ZTQyLTlmNDItMjg3OWM2MTQ0YjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhtnzSB22YC6Q9iDJK3Xa4mgdKP6DIjp5kip
lE0ffE69URP0Pko/ymvpS5TyVVVM639QGDOtT6vvg0Z+7eyGXEzxZ5eGPsKaX3AC
O6uX+iOmbGQXhZ3tvDpt8qhdnxtwOBFyEM3vF8t6/HwR1AVrsj9bq4ofTd8h1MV/
49J1Iv6QF/A2Ifex8orfpwViZrhZ27ll5cYcGjhtfOkypKKShYaZLvBJpx62ZtCa
H7lDXG6kx0DDjM0kNHbZINp+y1GGe/xWsKb5haWe1QNCsl20cLM9FJtrDd478Pib
Sok/T6ItpXxX8nTx5p0lhIrwvGK2GSYOd4jYRDWWnfw/tVB8nQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI2/hgMwmw9yk4MXrQ8Rd7WGzWzQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGVlNWI0YzktMTZhOS0z
ODczLTg5NDEtYzQxN2E5MjM2ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQDbFw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHN721bz/xn8J9WDgVi8OIyhVU2SESM0nSbjAyeUKLGDOXmdBthh
7YqD3jhD+mbl7w4TVUBhfrZC4T4PgzAXC4PSDnb77VQI8fxnWATDFVQCtBn/PyJL
3vAkMwUxWiq5aGc5VlsdZ4SBihbrkPFd/H5iAVw5xBiHsIyOh9S7IdZikyYjIocR
ZF94C/JOsZv2zOmE1jE7LM+LiG6gEsMDP836eW9+arKEqzsSv4QUG6RF39fJATqP
2JVmgCXQMovvvb5JfytAOuwSSqrIAlXyJlJBlZXZU+wo+ufOMT/L+A+YBTlVoMzf
Cp4JpIl3yCYCFISeOpGpbxNK5LfqJ4ALXdU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:40 2025 by rpki-client