Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d085a8b-c77a-3c87-ae86-43ba2eb42dff.roa
File:                     4d085a8b-c77a-3c87-ae86-43ba2eb42dff.roa (raw, json)
Hash identifier:          +Hl3hTyUMjNH3lFSAjRkHqKfQ6bx3ANTiboRFF5jkHw=
Subject key identifier:   28:01:99:79:DF:8A:FB:FA:E6:55:71:E6:E8:A6:9A:82:6F:A8:35:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B1481642AC60BDEDE1200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d085a8b-c77a-3c87-ae86-43ba2eb42dff.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1002:b110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:14:81:64:2a:c6:0b:de:de:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=3a27ef74-a5e2-4b94-b948-5c67f487e599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:0c:21:a9:99:e4:6e:c8:ce:0d:1c:77:c4:
                    52:5f:16:38:e8:55:ae:99:0c:90:03:6f:35:b1:de:
                    97:29:96:c7:3d:e5:46:1e:69:c2:99:e6:09:8a:03:
                    5d:4b:73:3f:03:95:d5:8e:37:be:bd:03:8a:f2:6c:
                    d6:3b:13:23:97:63:6f:2c:be:43:0a:54:2c:a3:b5:
                    50:b7:e9:f0:8f:8a:40:92:46:c2:71:9a:de:85:e4:
                    7d:0a:d5:cd:f5:97:ed:76:55:e2:44:08:85:2e:03:
                    58:7a:c0:b1:42:49:f2:1d:f4:08:66:67:a7:c3:b5:
                    bf:2b:8d:ea:cb:8b:58:d3:43:54:59:16:59:ea:3b:
                    31:34:0a:ae:48:bd:a0:0a:14:8a:58:65:ae:1e:df:
                    c0:75:d4:1a:82:af:d0:1f:0e:83:e9:67:7e:72:4e:
                    77:8c:09:a0:c9:47:2e:be:85:c4:b8:d8:fc:20:f3:
                    00:4b:ad:e7:1a:11:7c:88:35:2e:91:7e:ca:ed:34:
                    a2:e0:3f:61:d5:f5:ab:af:0a:8a:9d:34:5b:01:72:
                    fd:8d:4b:75:cb:80:83:16:4a:c2:d7:db:94:c4:83:
                    33:67:2f:2c:31:5f:9e:f8:09:88:e3:6e:db:02:14:
                    8e:fe:12:5a:a0:81:45:28:b3:16:da:d5:8e:d1:c9:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:01:99:79:DF:8A:FB:FA:E6:55:71:E6:E8:A6:9A:82:6F:A8:35:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d085a8b-c77a-3c87-ae86-43ba2eb42dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:23:a7:8d:3a:ff:3e:2a:38:f8:7b:d3:d4:4d:f3:8a:69:
         61:f5:3a:34:8b:a0:0a:ec:25:64:6e:bf:8f:3e:bb:cc:4d:ee:
         90:e3:7f:2c:40:c3:f3:19:cb:5d:42:aa:87:17:9f:78:07:bc:
         1c:d5:f5:ab:60:0f:fd:01:d9:97:aa:fb:2d:c3:46:9f:93:03:
         dc:20:75:43:48:eb:69:fd:81:25:e6:62:94:d9:25:69:6b:1d:
         68:71:d6:ec:1d:ff:1d:c8:5c:53:d4:dd:6d:28:dd:c6:69:35:
         b6:fc:51:d4:e9:66:7c:8e:70:a9:d2:b6:ac:4d:91:3e:9b:61:
         4d:3d:c4:a4:52:6b:48:a2:e6:bd:fa:af:69:c4:36:c7:f3:5f:
         ac:07:8d:65:6d:77:95:6c:24:6c:ba:41:1c:d1:4a:60:9e:6c:
         56:bf:8a:f1:f7:ca:c3:fe:7a:ff:b7:54:68:ca:80:19:b0:fd:
         fe:96:75:30:05:3c:23:1e:c1:b3:34:10:53:4f:48:2c:47:a0:
         f1:34:f3:c6:c9:95:d5:db:e7:fc:33:01:89:be:3d:63:2e:9d:
         1f:c1:55:bd:2b:68:a2:24:90:9f:bc:49:3d:d1:04:43:2f:0b:
         ad:fd:0e:0a:63:39:f8:cb:14:4b:01:b0:4a:4e:e5:cf:f8:76:
         e2:80:e7:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7exSBZCrGC97eEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
M2EyN2VmNzQtYTVlMi00Yjk0LWI5NDgtNWM2N2Y0ODdlNTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE0MIamZ5G7Izg0cd8RSXxY46FWumQyQA281
sd6XKZbHPeVGHmnCmeYJigNdS3M/A5XVjje+vQOK8mzWOxMjl2NvLL5DClQso7VQ
t+nwj4pAkkbCcZreheR9CtXN9ZftdlXiRAiFLgNYesCxQknyHfQIZmenw7W/K43q
y4tY00NUWRZZ6jsxNAquSL2gChSKWGWuHt/AddQagq/QHw6D6Wd+ck53jAmgyUcu
voXEuNj8IPMAS63nGhF8iDUukX7K7TSi4D9h1fWrrwqKnTRbAXL9jUt1y4CDFkrC
19uUxIMzZy8sMV+e+AmI427bAhSO/hJaoIFFKLMW2tWO0ckGpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCgBmXnfivv65lVx5uimmoJvqDVOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGQwODVhOGItYzc3YS0z
Yzg3LWFlODYtNDNiYTJlYjQyZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQArEQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGdvI6eNOv8+Kjj4e9PUTfOKaWH1OjSLoArsJWRuv48+u8xN7pDj
fyxAw/MZy11CqocXn3gHvBzV9atgD/0B2Zeq+y3DRp+TA9wgdUNI62n9gSXmYpTZ
JWlrHWhx1uwd/x3IXFPU3W0o3cZpNbb8UdTpZnyOcKnStqxNkT6bYU09xKRSa0ii
5r36r2nENsfzX6wHjWVtd5VsJGy6QRzRSmCebFa/ivH3ysP+ev+3VGjKgBmw/f6W
dTAFPCMewbM0EFNPSCxHoPE088bJldXb5/wzAYm+PWMunR/BVb0raKIkkJ+8ST3R
BEMvC639DgpjOfjLFEsBsEpO5c/4duKA52g=
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:40:27 2025 by rpki-client