Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99a61848-9ea4-39ea-baf9-42556b7a4649.roa
File:                     99a61848-9ea4-39ea-baf9-42556b7a4649.roa (raw, json)
Hash identifier:          TKfRn+VDy90HphoSDdHNpCmVunrv5o4hsqAzGvKVtCI=
Subject key identifier:   CA:6A:CA:45:7A:F4:85:0C:54:65:AD:E4:FF:CA:C0:34:79:CB:9D:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B4BB93D9B9DAA5720CA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99a61848-9ea4-39ea-baf9-42556b7a4649.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1004:b160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:4b:b9:3d:9b:9d:aa:57:20:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=fae2f030-c47d-4256-bdb0-e0e30657f8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:74:b7:76:64:89:b8:26:c0:a5:98:1f:d3:
                    b8:19:fb:43:9f:f9:9d:8d:36:f0:03:e1:53:73:a2:
                    c3:eb:40:a4:f2:6d:e3:55:f8:10:a8:bc:b6:0b:22:
                    49:7b:fc:cf:dc:de:23:9c:c6:7a:7d:0f:f7:d6:7f:
                    26:3b:10:0d:31:8a:e1:d5:05:52:32:6b:df:56:15:
                    01:b4:ff:34:71:49:89:73:48:50:a1:f2:79:f8:e6:
                    cd:bd:61:cd:fc:fa:8d:b5:ef:47:10:28:66:62:22:
                    f5:9e:2f:7b:2d:e2:c2:3a:70:1e:2d:9d:4b:01:0c:
                    4b:fb:42:d4:4c:79:57:f8:7a:1d:f5:84:dd:a9:7f:
                    eb:7a:cb:76:43:ae:e9:df:9b:b3:61:c1:23:d7:86:
                    4c:5d:2e:a8:b4:3f:c5:fd:a4:ba:37:95:6d:b4:fc:
                    00:63:eb:89:d6:76:87:53:9d:f5:fd:0b:4f:49:29:
                    28:0c:90:98:80:49:97:72:33:0a:83:29:9d:05:1c:
                    53:5d:55:ca:d0:1a:a8:75:24:82:1f:db:09:2c:b5:
                    39:fb:9c:b7:f0:c5:48:af:78:a0:60:01:ef:f0:74:
                    51:f4:9f:28:74:51:b7:89:f7:06:a5:89:ba:7f:08:
                    f0:7a:6e:8b:37:09:67:1c:5a:7b:d4:bb:21:54:a4:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6A:CA:45:7A:F4:85:0C:54:65:AD:E4:FF:CA:C0:34:79:CB:9D:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99a61848-9ea4-39ea-baf9-42556b7a4649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:31:5c:f4:6f:04:b4:af:f2:b8:a1:43:eb:51:2f:00:ff:93:
         ad:49:ca:f8:0a:00:a7:04:5f:1a:ce:0c:b3:f3:90:ce:af:62:
         93:62:38:d1:39:3c:50:a0:49:63:bd:83:dc:de:0c:83:60:07:
         d8:7d:51:0a:b0:b3:da:07:cb:f1:b5:49:06:ea:9c:32:26:bd:
         ee:c6:53:95:4b:f1:37:94:d1:6d:fb:d8:eb:fc:43:12:8b:fa:
         78:b2:76:c2:90:28:59:46:60:c6:02:1d:3b:03:c7:00:2a:32:
         c6:21:03:c2:78:ff:e9:bd:f6:3d:aa:4f:a0:e4:b1:b3:c2:c2:
         15:75:43:23:08:47:94:3b:19:ed:5e:11:29:04:9f:c8:be:ec:
         b8:58:19:e4:1b:d6:72:27:29:33:37:2b:5b:88:47:ba:97:9d:
         a7:5e:a9:9b:1f:e7:f0:e0:77:c0:e2:f0:57:2a:f0:28:b8:6d:
         f3:5e:fa:76:93:26:1d:df:65:64:21:ca:30:65:68:c5:ab:09:
         c0:93:2e:31:22:09:1e:07:ed:e1:b2:08:04:61:ac:f1:3e:2c:
         54:db:de:e6:a8:d5:80:0f:8d:ad:60:7b:c2:ad:36:13:73:25:
         46:da:e3:21:94:10:ce:85:6e:99:0f:5c:7e:6a:d2:3d:10:6c:
         35:74:3e:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0u5PZudqlcgygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
ZmFlMmYwMzAtYzQ3ZC00MjU2LWJkYjAtZTBlMzA2NTdmOGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02t0t3ZkibgmwKWYH9O4GftDn/mdjTbwA+FT
c6LD60Ck8m3jVfgQqLy2CyJJe/zP3N4jnMZ6fQ/31n8mOxANMYrh1QVSMmvfVhUB
tP80cUmJc0hQofJ5+ObNvWHN/PqNte9HEChmYiL1ni97LeLCOnAeLZ1LAQxL+0LU
THlX+Hod9YTdqX/rest2Q67p35uzYcEj14ZMXS6otD/F/aS6N5VttPwAY+uJ1naH
U531/QtPSSkoDJCYgEmXcjMKgymdBRxTXVXK0BqodSSCH9sJLLU5+5y38MVIr3ig
YAHv8HRR9J8odFG3ifcGpYm6fwjwem6LNwlnHFp71LshVKSgDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMpqykV69IUMVGWt5P/KwDR5y539MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTlhNjE4NDgtOWVhNC0z
OWVhLWJhZjktNDI1NTZiN2E0NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLFg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHcxXPRvBLSv8rihQ+tRLwD/k61JyvgKAKcEXxrODLPzkM6vYpNi
ONE5PFCgSWO9g9zeDINgB9h9UQqws9oHy/G1SQbqnDImve7GU5VL8TeU0W372Ov8
QxKL+niydsKQKFlGYMYCHTsDxwAqMsYhA8J4/+m99j2qT6DksbPCwhV1QyMIR5Q7
Ge1eESkEn8i+7LhYGeQb1nInKTM3K1uIR7qXnadeqZsf5/Dgd8Di8Fcq8Ci4bfNe
+naTJh3fZWQhyjBlaMWrCcCTLjEiCR4H7eGyCARhrPE+LFTb3uao1YAPja1ge8Kt
NhNzJUba4yGUEM6FbpkPXH5q0j0QbDV0Pq8=
-----END CERTIFICATE-----
Generated at Wed Jul 2 06:45:39 2025 by rpki-client