Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea408325-316a-3b46-83e5-181e4849aaa8.roa
File:                     ea408325-316a-3b46-83e5-181e4849aaa8.roa (raw, json)
Hash identifier:          RpVVBwP6mduMedxDfBSv7kI3pggPrDr6O5gvUrbrarE=
Subject key identifier:   AD:97:F1:83:6B:0B:D1:85:02:D6:66:81:3A:D8:A0:5D:15:D5:E0:21
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218438996250915AF2A17980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea408325-316a-3b46-83e5-181e4849aaa8.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:805f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:38:99:62:50:91:5a:f2:a1:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=d30db22e-4706-4640-a1ab-74fed33b9631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:66:52:81:55:19:c0:76:14:f6:53:1f:f8:
                    56:08:29:c2:9d:10:db:14:d3:43:40:0f:bf:6c:75:
                    bd:9d:fa:bd:4b:a6:e7:13:d3:ac:6e:d3:ed:1d:ca:
                    a6:d7:7d:35:cb:2e:e6:50:0a:bf:e3:bc:87:8e:09:
                    cf:00:0d:1d:5f:7e:bd:2d:b5:ed:74:69:b1:e3:21:
                    46:f4:a1:b9:15:be:c2:f4:46:ac:30:79:22:77:52:
                    8b:7a:43:45:0d:8b:28:1b:e4:04:9e:49:d2:5a:1f:
                    c0:d6:6a:dc:64:8e:03:48:d8:2e:32:25:d9:92:78:
                    5a:3d:cc:37:7d:38:ca:75:e1:59:65:e4:ac:88:b2:
                    c9:96:40:4d:81:9f:7e:e3:32:67:d9:14:0d:2c:ea:
                    a2:f7:20:ff:80:ad:b1:e9:fd:09:8d:68:13:81:22:
                    3b:32:85:11:3f:0c:89:44:28:3b:d9:9f:74:f7:1c:
                    d0:d8:6b:97:df:8a:3c:6c:53:9c:09:91:d5:4f:19:
                    77:de:4c:2d:82:e9:af:9d:59:c9:ad:19:40:5e:16:
                    94:96:0d:69:b0:55:d5:83:10:36:f1:9a:bd:48:04:
                    28:1d:81:9b:74:7a:8c:dc:df:3e:66:b0:28:b2:59:
                    43:8d:7b:99:cc:e9:2e:22:a9:29:f3:86:9d:44:25:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:97:F1:83:6B:0B:D1:85:02:D6:66:81:3A:D8:A0:5D:15:D5:E0:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea408325-316a-3b46-83e5-181e4849aaa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:805f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:5c:2b:ff:19:e1:6d:de:27:73:58:27:a5:70:19:cf:d2:
         61:f4:51:8d:75:0d:2b:d6:7e:97:91:67:b7:55:75:4e:ad:28:
         39:00:07:d8:a7:dc:57:c9:61:47:d0:c0:b1:62:da:be:9c:e5:
         ab:26:9a:71:8f:60:80:61:e1:94:fc:0c:70:e7:5e:7e:89:f3:
         ca:cd:4c:3e:ed:de:df:d1:59:5f:cc:2f:ac:1a:18:55:2b:4a:
         8d:20:3c:0d:c8:ad:6a:7c:40:9f:d9:d5:97:51:e0:31:c2:38:
         f2:f1:6f:e7:c0:63:87:c8:ec:ba:40:b0:8d:07:fc:46:da:8f:
         4a:d9:f8:14:47:7e:ea:e2:7e:4f:9f:f3:e9:1e:88:fc:06:0d:
         0a:52:1b:b2:ba:15:9c:ff:f2:7b:90:9a:8b:c0:36:f3:6f:fb:
         fb:7a:df:e1:ed:5d:3f:10:cd:c0:4c:4b:65:5b:b9:93:62:1b:
         03:4c:5a:8c:2c:d3:73:e0:2c:c5:87:cd:07:61:26:24:d5:32:
         31:05:19:a4:6e:80:08:8b:74:a4:02:66:7f:55:3f:df:e1:82:
         9a:82:22:a6:9f:4b:b6:4b:d2:e7:a3:db:5b:d2:9f:42:f3:05:
         51:b5:b2:d3:06:34:0b:a9:b4:e0:d3:12:21:d2:8b:7f:84:cb:
         01:0f:82:45
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDiZYlCRWvKheYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZDMwZGIyMmUtNDcwNi00NjQwLWExYWItNzRmZWQzM2I5NjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QBmUoFVGcB2FPZTH/hWCCnCnRDbFNNDQA+/
bHW9nfq9S6bnE9OsbtPtHcqm1301yy7mUAq/47yHjgnPAA0dX369LbXtdGmx4yFG
9KG5Fb7C9EasMHkid1KLekNFDYsoG+QEnknSWh/A1mrcZI4DSNguMiXZknhaPcw3
fTjKdeFZZeSsiLLJlkBNgZ9+4zJn2RQNLOqi9yD/gK2x6f0JjWgTgSI7MoURPwyJ
RCg72Z909xzQ2GuX34o8bFOcCZHVTxl33kwtgumvnVnJrRlAXhaUlg1psFXVgxA2
8Zq9SAQoHYGbdHqM3N8+ZrAosllDjXuZzOkuIqkp84adRCW/7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK2X8YNrC9GFAtZmgTrYoF0V1eAhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWE0MDgzMjUtMzE2YS0z
YjQ2LTgzZTUtMTgxZTQ4NDlhYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEltXCv/GeFt3idzWCelcBnP0mH0UY11DSvWfpeRZ7dVdU6tKDkA
B9in3FfJYUfQwLFi2r6c5asmmnGPYIBh4ZT8DHDnXn6J88rNTD7t3t/RWV/ML6wa
GFUrSo0gPA3IrWp8QJ/Z1ZdR4DHCOPLxb+fAY4fI7LpAsI0H/Ebaj0rZ+BRHfuri
fk+f8+keiPwGDQpSG7K6FZz/8nuQmovANvNv+/t63+HtXT8QzcBMS2VbuZNiGwNM
Wows03PgLMWHzQdhJiTVMjEFGaRugAiLdKQCZn9VP9/hgpqCIqafS7ZL0uej21vS
n0LzBVG1stMGNAuptODTEiHSi3+EywEPgkU=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:16 2025 by rpki-client