Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4fa60a4-1cdb-31f8-a694-c8e539777897.roa
File:                     c4fa60a4-1cdb-31f8-a694-c8e539777897.roa (raw, json)
Hash identifier:          My7rHAV85sqbtE8opwNrlBJH6P/12nyOkoLnSKaDumQ=
Subject key identifier:   12:B7:96:36:A3:DF:97:F7:9B:4F:F9:A5:A5:76:A9:4F:76:CA:91:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B46CD6497AD31091FBA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4fa60a4-1cdb-31f8-a694-c8e539777897.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1001:b13c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:46:cd:64:97:ad:31:09:1f:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=91216a15-fc1d-4aa7-a2e2-8e629131d419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:dc:a8:f6:62:a9:bb:bc:ec:50:6d:99:1b:
                    33:ca:41:50:aa:65:b9:12:74:02:10:2d:ab:04:74:
                    46:93:28:d4:f1:1f:ef:3c:36:df:2a:7b:e1:60:63:
                    5a:4c:c3:8e:06:d3:c1:56:3d:b5:2b:cf:60:97:2b:
                    2f:b8:41:21:4b:1a:44:3e:5e:0a:09:27:9b:70:b7:
                    96:3c:82:23:50:3d:ac:b6:b7:9b:9a:fb:66:28:3d:
                    33:2c:ec:38:b4:3d:7c:0a:b6:a6:22:c4:d1:76:d9:
                    9e:63:23:02:21:17:f1:b9:fa:9e:b1:c4:ac:59:18:
                    98:c5:de:61:0c:93:7d:fb:aa:5e:12:12:3d:13:22:
                    02:0c:cd:b5:e3:80:d9:02:26:f3:1a:72:e2:c2:62:
                    ab:c4:e9:56:66:c9:dc:96:d5:d4:0b:87:92:87:e2:
                    39:63:2a:b7:17:1f:27:9b:4d:25:63:4d:df:d2:02:
                    81:33:77:64:d2:68:7a:32:bc:41:f1:3f:3e:c4:fa:
                    6b:4e:fc:0f:a2:ba:05:a2:a9:19:06:e7:a5:d4:01:
                    c7:a7:cd:a8:77:cb:61:11:64:7d:fd:c7:d6:61:cb:
                    aa:a7:dc:39:df:3a:4d:75:83:e5:53:75:48:4d:48:
                    6c:ea:cd:b4:c3:bd:00:55:6f:d5:53:1c:a7:b9:f3:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B7:96:36:A3:DF:97:F7:9B:4F:F9:A5:A5:76:A9:4F:76:CA:91:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4fa60a4-1cdb-31f8-a694-c8e539777897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b13c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:a3:e7:55:c4:f1:a5:a3:c7:df:b8:16:5e:7c:96:89:cc:
         83:b8:f4:6f:e9:f0:b8:d3:28:47:83:2a:c6:35:46:e4:ef:59:
         9a:be:9e:87:ed:51:09:b8:27:12:56:17:9b:a8:df:ca:14:9f:
         a0:14:ff:35:36:04:9c:67:67:e1:ff:e6:f0:fb:8e:aa:92:9c:
         b1:9d:08:39:92:ea:6d:5c:37:d6:ab:0b:94:c7:40:22:c6:82:
         bc:e6:e3:41:3c:db:0d:ed:f8:dd:92:b4:f7:75:7c:72:fe:ae:
         cf:f9:1b:9b:23:20:bb:3e:6e:b0:46:53:d6:76:4e:53:90:c3:
         be:bb:bf:37:29:ae:a1:4e:44:3f:8e:73:79:97:b7:50:ab:9b:
         a5:07:cc:f0:26:73:27:4a:15:05:86:86:8c:84:f7:d1:d2:34:
         bc:23:3b:b9:ab:07:3a:5c:9a:94:8c:e4:63:6e:16:e4:14:9e:
         d8:9c:c6:a5:6f:39:35:ed:e3:69:67:66:a6:5d:62:c9:6e:57:
         22:9d:1d:78:89:72:98:ad:65:c6:76:2b:dd:90:fb:13:15:3f:
         50:85:75:f5:72:d1:06:4c:81:9b:86:5b:bd:59:4c:52:37:40:
         da:9b:72:b1:0c:1f:2d:99:9f:22:68:72:f3:f4:bb:2e:e5:40:
         c1:69:58:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0bNZJetMQkfuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
OTEyMTZhMTUtZmMxZC00YWE3LWEyZTItOGU2MjkxMzFkNDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOrcqPZiqbu87FBtmRszykFQqmW5EnQCEC2r
BHRGkyjU8R/vPDbfKnvhYGNaTMOOBtPBVj21K89glysvuEEhSxpEPl4KCSebcLeW
PIIjUD2strebmvtmKD0zLOw4tD18CramIsTRdtmeYyMCIRfxufqescSsWRiYxd5h
DJN9+6peEhI9EyICDM2144DZAibzGnLiwmKrxOlWZsncltXUC4eSh+I5Yyq3Fx8n
m00lY03f0gKBM3dk0mh6MrxB8T8+xPprTvwPoroFoqkZBuel1AHHp82od8thEWR9
/cfWYcuqp9w53zpNdYPlU3VITUhs6s20w70AVW/VUxynufMR5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBK3ljaj35f3m0/5paV2qU92ypErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRmYTYwYTQtMWNkYi0z
MWY4LWE2OTQtYzhlNTM5Nzc3ODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQAbE8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGt/o+dVxPGlo8ffuBZefJaJzIO49G/p8LjTKEeDKsY1RuTvWZq+
noftUQm4JxJWF5uo38oUn6AU/zU2BJxnZ+H/5vD7jqqSnLGdCDmS6m1cN9arC5TH
QCLGgrzm40E82w3t+N2StPd1fHL+rs/5G5sjILs+brBGU9Z2TlOQw767vzcprqFO
RD+Oc3mXt1Crm6UHzPAmcydKFQWGhoyE99HSNLwjO7mrBzpcmpSM5GNuFuQUntic
xqVvOTXt42lnZqZdYsluVyKdHXiJcpitZcZ2K92Q+xMVP1CFdfVy0QZMgZuGW71Z
TFI3QNqbcrEMHy2ZnyJocvP0uy7lQMFpWI8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:41:00 2025 by rpki-client