Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ccab32-6ec5-32f0-b8bc-aee48b06abaf.roa
File:                     27ccab32-6ec5-32f0-b8bc-aee48b06abaf.roa (raw, json)
Hash identifier:          VT0FZ9WVQVNNmuwahbG+VZJuFXwEDqce3rkVptNgRgs=
Subject key identifier:   BC:0D:A1:85:1A:45:E0:97:F5:F9:5A:44:D3:8C:80:9F:6B:A2:61:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B44D315F4D2D62A376A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ccab32-6ec5-32f0-b8bc-aee48b06abaf.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1000:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:44:d3:15:f4:d2:d6:2a:37:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=dc59d047-76e7-435f-b5b2-65fc0ae10406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:87:f2:ea:79:22:95:0b:0f:80:b4:c9:15:42:
                    f3:74:a4:66:da:97:43:69:44:df:ab:b0:37:71:dc:
                    d2:36:ad:27:b5:7b:fb:15:c7:0b:bc:dc:81:b3:23:
                    15:79:7e:b2:33:79:0d:a5:ae:c7:17:c2:76:1a:0b:
                    b2:78:42:d3:3a:e8:9c:88:34:1a:a8:d7:c7:af:e7:
                    b1:d2:cc:b3:e8:a8:f8:19:e8:f0:7f:23:c9:c1:f4:
                    30:3e:83:1f:32:84:8d:2d:e8:8a:12:eb:40:26:80:
                    b4:c7:d2:11:31:1b:c5:fd:ee:11:27:9d:0d:6d:97:
                    34:77:f8:77:e6:c4:75:e8:a0:7d:cb:b1:bb:a9:88:
                    93:60:48:23:19:04:c8:56:0c:9f:ad:31:7f:e1:dc:
                    ae:4b:0d:98:16:e3:18:6f:8d:2e:f5:73:99:37:be:
                    60:94:aa:f3:83:8f:77:36:b1:10:78:9f:42:1c:77:
                    01:d9:64:a4:12:0d:06:d1:8a:84:28:fa:b5:4d:a1:
                    52:9b:15:a4:8b:7a:0e:ca:60:a5:73:d4:1d:3f:25:
                    8b:1f:da:6a:c2:27:99:84:33:d1:ad:5b:9e:c8:b2:
                    e5:ac:ef:4e:eb:b0:71:65:df:36:52:85:90:79:eb:
                    bd:46:22:cf:63:45:9c:d2:a0:73:42:cd:2c:b2:96:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0D:A1:85:1A:45:E0:97:F5:F9:5A:44:D3:8C:80:9F:6B:A2:61:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27ccab32-6ec5-32f0-b8bc-aee48b06abaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:05:14:ea:2e:b2:f7:cb:1a:43:ab:4f:aa:6b:97:8c:10:
         77:6f:85:b2:97:2a:26:31:70:0d:11:a1:5a:5e:42:07:83:4d:
         6e:96:80:29:da:29:d1:d4:c2:e7:ae:ca:79:ae:3e:b4:c5:61:
         14:75:15:b4:e0:75:e1:8e:ba:f5:fa:3e:21:dc:a1:65:59:61:
         5d:d1:53:27:97:eb:23:02:2e:3f:00:d3:fc:27:05:c2:f8:89:
         f3:93:00:6c:eb:d0:2f:ca:5a:09:46:56:0e:fd:28:07:c9:79:
         eb:8a:19:81:1f:ed:0a:81:41:31:fd:56:e6:05:00:dd:10:cc:
         30:3b:42:7c:af:fb:6e:4d:de:c2:ce:ef:30:3c:bf:72:cc:63:
         a2:cc:63:5a:4a:1f:d0:49:45:14:3a:6f:96:4a:ed:d5:36:46:
         cf:3b:89:af:4b:42:7d:6b:d7:53:83:1a:01:5e:c7:8e:76:b9:
         6d:8f:c5:8d:e6:b4:be:5f:31:3d:26:96:b6:2d:90:4b:7b:62:
         b4:29:83:14:b8:82:7a:4a:ec:dd:55:e8:72:7e:d1:19:31:a4:
         8e:38:87:fd:e6:c0:83:3c:14:1d:3d:71:8d:90:17:ea:d1:ac:
         1b:c1:89:ec:7b:15:d7:3a:eb:d8:e4:91:3b:26:e9:30:4b:d0:
         e1:63:2d:e9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0TTFfTS1io3aoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
ZGM1OWQwNDctNzZlNy00MzVmLWI1YjItNjVmYzBhZTEwNDA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkofy6nkilQsPgLTJFULzdKRm2pdDaUTfq7A3
cdzSNq0ntXv7FccLvNyBsyMVeX6yM3kNpa7HF8J2GguyeELTOuiciDQaqNfHr+ex
0syz6Kj4GejwfyPJwfQwPoMfMoSNLeiKEutAJoC0x9IRMRvF/e4RJ50NbZc0d/h3
5sR16KB9y7G7qYiTYEgjGQTIVgyfrTF/4dyuSw2YFuMYb40u9XOZN75glKrzg493
NrEQeJ9CHHcB2WSkEg0G0YqEKPq1TaFSmxWki3oOymClc9QdPyWLH9pqwieZhDPR
rVueyLLlrO9O67BxZd82UoWQeeu9RiLPY0Wc0qBzQs0sspaA6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLwNoYUaReCX9flaRNOMgJ9romG6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjdjY2FiMzItNmVjNS0z
MmYwLWI4YmMtYWVlNDhiMDZhYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAPAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAARLBRTqLrL3yxpDq0+qa5eMEHdvhbKXKiYxcA0RoVpeQgeDTW6W
gCnaKdHUwueuynmuPrTFYRR1FbTgdeGOuvX6PiHcoWVZYV3RUyeX6yMCLj8A0/wn
BcL4ifOTAGzr0C/KWglGVg79KAfJeeuKGYEf7QqBQTH9VuYFAN0QzDA7Qnyv+25N
3sLO7zA8v3LMY6LMY1pKH9BJRRQ6b5ZK7dU2Rs87ia9LQn1r11ODGgFex452uW2P
xY3mtL5fMT0mlrYtkEt7YrQpgxS4gnpK7N1V6HJ+0RkxpI44h/3mwIM8FB09cY2Q
F+rRrBvBiex7Fdc669jkkTsm6TBL0OFjLek=
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:23:29 2025 by rpki-client