Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d4040b4-7778-327c-9e53-5aec7ad49cbc.roa
File:                     8d4040b4-7778-327c-9e53-5aec7ad49cbc.roa (raw, json)
Hash identifier:          vjcGU5+3OrZFC4M1QlB64kIeFFlBxYfp+4QLt7V4rR4=
Subject key identifier:   42:11:4C:FF:93:74:FE:7A:6F:67:CE:F4:DE:DE:DD:04:7B:D8:3E:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4B6E6FEE75B3586EDF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d4040b4-7778-327c-9e53-5aec7ad49cbc.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:b0e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4b:6e:6f:ee:75:b3:58:6e:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=8c0b5a95-eb08-463b-a458-12627f8f43e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:ac:dd:e5:7a:80:f1:5d:65:85:1a:cf:0b:
                    d8:8d:d8:88:5d:a1:3c:77:fa:a3:86:af:65:dc:ae:
                    b2:4a:59:c1:fe:38:5f:25:fb:15:d0:b9:df:b4:a0:
                    90:9e:1f:26:57:f5:b4:e0:30:71:05:f8:95:56:a1:
                    d3:6b:e3:24:9c:8c:fa:48:13:a8:19:33:9e:29:85:
                    21:1e:44:04:28:48:1c:d6:29:51:2a:38:a6:47:c3:
                    1e:97:4d:cb:f2:e5:3a:8e:30:d6:76:44:3d:ee:00:
                    33:e5:a8:70:69:bc:b5:00:96:96:59:81:d4:7e:c7:
                    57:14:fd:cc:c2:10:2f:b8:19:50:8d:99:e0:cd:dc:
                    92:31:f0:af:21:c9:26:19:6c:b8:35:71:66:cc:be:
                    2a:58:3b:2d:6b:05:8b:36:1c:d6:5c:64:dd:ec:5f:
                    e4:59:fc:b8:d8:08:f8:2e:36:40:1e:d2:99:1d:6c:
                    60:fb:85:3a:bd:0c:e1:52:9e:8b:4e:94:ad:95:dd:
                    34:5a:76:12:06:46:e5:c2:dc:f9:b4:67:33:23:3a:
                    53:90:71:bc:36:5b:29:75:b3:e1:68:8d:e1:68:3e:
                    75:d0:8c:cd:78:fe:33:b5:9e:f6:7c:0c:a1:f9:95:
                    59:7b:d4:9b:eb:ed:17:89:ec:21:40:6b:b3:4a:ff:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:11:4C:FF:93:74:FE:7A:6F:67:CE:F4:DE:DE:DD:04:7B:D8:3E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d4040b4-7778-327c-9e53-5aec7ad49cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:5a:51:cf:b6:f2:c4:ce:6e:35:93:4b:b6:3f:bc:e1:21:
         54:60:13:42:db:fb:68:0f:0a:83:a0:7d:eb:1a:23:35:94:32:
         88:e2:12:9b:0d:3d:65:dc:87:07:e2:85:a7:5d:af:a9:38:ef:
         03:ca:54:64:a6:9a:b3:35:83:c1:20:45:f2:dc:44:5e:11:6f:
         9d:77:de:ac:ea:6e:97:45:72:ab:7b:50:ed:b4:7a:86:d8:40:
         fb:79:f0:30:e3:c9:27:73:d2:82:fc:a9:4e:de:8a:e1:85:46:
         17:5b:0e:39:b8:65:0f:aa:e6:31:3b:15:1e:8f:9a:6e:cb:3c:
         26:94:29:a6:cb:04:63:04:9e:ee:5a:03:96:bc:68:1f:21:ae:
         61:6c:28:59:c3:09:95:b4:0a:9e:bd:b0:ab:cd:a1:66:c8:7d:
         f1:6e:af:9d:9b:c0:ae:82:89:da:34:68:8f:87:02:60:f6:b9:
         1b:7b:03:34:6c:4f:d5:bb:84:f7:9a:e0:86:ee:16:3b:ee:76:
         ec:80:10:33:6b:07:36:e4:57:52:9e:ad:1f:5c:80:5d:ae:2d:
         94:60:d2:5d:0e:04:95:67:b7:f2:de:8d:5d:4b:c2:54:c2:4c:
         a4:a5:41:b9:d3:d0:96:62:5c:2c:0b:8b:39:bc:96:ad:7f:c3:
         96:e4:24:bb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0tub+51s1hu34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
OGMwYjVhOTUtZWIwOC00NjNiLWE0NTgtMTI2MjdmOGY0M2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u2s3eV6gPFdZYUazwvYjdiIXaE8d/qjhq9l
3K6ySlnB/jhfJfsV0LnftKCQnh8mV/W04DBxBfiVVqHTa+MknIz6SBOoGTOeKYUh
HkQEKEgc1ilRKjimR8Mel03L8uU6jjDWdkQ97gAz5ahwaby1AJaWWYHUfsdXFP3M
whAvuBlQjZngzdySMfCvIckmGWy4NXFmzL4qWDstawWLNhzWXGTd7F/kWfy42Aj4
LjZAHtKZHWxg+4U6vQzhUp6LTpStld00WnYSBkblwtz5tGczIzpTkHG8NlspdbPh
aI3haD510IzNeP4ztZ72fAyh+ZVZe9Sb6+0XiewhQGuzSv/JFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEIRTP+TdP56b2fO9N7e3QR72D6KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGQ0MDQwYjQtNzc3OC0z
MjdjLTllNTMtNWFlYzdhZDQ5Y2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLDg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADp9WlHPtvLEzm41k0u2P7zhIVRgE0Lb+2gPCoOgfesaIzWUMoji
EpsNPWXchwfihaddr6k47wPKVGSmmrM1g8EgRfLcRF4Rb5133qzqbpdFcqt7UO20
eobYQPt58DDjySdz0oL8qU7eiuGFRhdbDjm4ZQ+q5jE7FR6Pmm7LPCaUKabLBGME
nu5aA5a8aB8hrmFsKFnDCZW0Cp69sKvNoWbIffFur52bwK6Cido0aI+HAmD2uRt7
AzRsT9W7hPea4IbuFjvuduyAEDNrBzbkV1KerR9cgF2uLZRg0l0OBJVnt/LejV1L
wlTCTKSlQbnT0JZiXCwLizm8lq1/w5bkJLs=
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:12:08 2025 by rpki-client