Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d14ca89c-c999-3737-80d9-52011b38911a.roa
File:                     d14ca89c-c999-3737-80d9-52011b38911a.roa (raw, json)
Hash identifier:          mOZ0GKfpRLq8Eo8g6MieN6EU84EMpfTQde8LyKQdq68=
Subject key identifier:   92:E0:6C:14:A4:64:A9:00:0E:EF:9E:B2:8E:40:DF:AA:DA:15:5A:F7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29557C46F1307A9AEC2F8DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d14ca89c-c999-3737-80d9-52011b38911a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1011:b078::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:7c:46:f1:30:7a:9a:ec:2f:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=33e8fa7a-6bc4-4428-b970-42e88f56d128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:52:43:35:bd:4a:8f:57:6b:9f:ee:10:0e:30:
                    73:11:75:27:94:8a:ba:2e:fe:56:08:d9:1d:24:40:
                    f9:e2:62:03:ba:fe:89:f2:23:40:91:ba:c7:3b:46:
                    ad:0d:44:e1:d7:00:d6:56:33:cf:33:31:46:4a:ae:
                    fd:fd:1b:c1:f0:d6:37:5e:4e:93:82:cc:f7:e2:fe:
                    d0:e6:ac:6d:d2:7d:53:f7:35:7a:dc:e8:07:83:0e:
                    fe:d0:81:40:e9:37:52:9d:b1:f9:3c:cb:58:8e:04:
                    24:88:64:29:8c:33:48:52:55:9b:8f:0f:ad:8c:a5:
                    2c:91:64:0c:01:f5:8c:fb:be:b0:28:9f:72:c3:df:
                    35:2a:05:84:94:05:a6:69:30:eb:4a:9e:16:a1:95:
                    0e:23:b3:5f:e6:9b:7e:41:bc:93:88:51:78:d6:ab:
                    85:9a:91:e5:a2:eb:85:cf:ae:a2:fe:80:36:8c:83:
                    c0:9a:03:e1:a1:71:8d:f4:cf:90:8b:94:44:45:d8:
                    7d:96:09:c2:14:6e:18:6f:af:e8:81:ed:85:64:a8:
                    cf:09:79:cb:84:47:60:32:0a:96:15:8a:dd:1f:ec:
                    f0:e9:82:93:6b:d7:38:9a:d9:5d:1f:d9:b7:61:7c:
                    cb:c2:b9:9c:a3:a7:36:a8:67:bf:21:03:10:fa:09:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E0:6C:14:A4:64:A9:00:0E:EF:9E:B2:8E:40:DF:AA:DA:15:5A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d14ca89c-c999-3737-80d9-52011b38911a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b078::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:54:52:4e:f5:e3:49:14:dc:3d:80:24:ee:6e:87:60:7f:3c:
         87:b7:b1:14:4c:92:3e:05:44:b5:00:a7:c7:3e:10:23:22:86:
         a9:c3:ef:ee:76:4e:16:1e:5f:7c:db:4d:21:27:18:2f:7c:e4:
         81:5e:5a:60:97:f3:7d:0d:4f:2c:6e:e5:bf:55:d7:7c:c7:12:
         d0:34:0e:ca:34:06:7c:09:bd:41:bd:3f:7d:01:38:fd:bb:07:
         87:5f:bb:93:df:e0:00:9d:97:0c:be:96:97:e6:cf:a9:6e:73:
         47:35:94:7f:5c:74:9b:26:da:bd:2a:e4:00:7b:89:b3:00:6d:
         b3:17:fd:25:00:89:05:5e:7c:1a:38:1f:e2:fa:88:cb:bc:38:
         11:40:29:88:ab:b3:87:5a:23:20:14:f1:d5:65:e8:ba:1a:51:
         51:7a:87:c2:24:c7:37:88:0c:d7:08:8c:d3:b7:42:7f:5f:ab:
         c3:d0:4c:c2:a7:f9:a9:96:92:3a:ce:3e:ee:ba:00:02:26:23:
         4a:89:71:c4:d7:4f:2d:2a:4e:99:1c:25:df:bb:61:03:51:e2:
         98:4f:2b:c2:82:16:ae:eb:64:92:6c:fb:b7:01:b6:9d:e2:a5:
         bf:73:96:f6:56:4e:52:4f:59:9c:95:26:5c:05:91:dc:46:4c:
         f0:8d:60:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEopVXxG8TB6muwvjcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
MzNlOGZhN2EtNmJjNC00NDI4LWI5NzAtNDJlODhmNTZkMTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlJDNb1Kj1drn+4QDjBzEXUnlIq6Lv5WCNkd
JED54mIDuv6J8iNAkbrHO0atDUTh1wDWVjPPMzFGSq79/RvB8NY3Xk6Tgsz34v7Q
5qxt0n1T9zV63OgHgw7+0IFA6TdSnbH5PMtYjgQkiGQpjDNIUlWbjw+tjKUskWQM
AfWM+76wKJ9yw981KgWElAWmaTDrSp4WoZUOI7Nf5pt+QbyTiFF41quFmpHlouuF
z66i/oA2jIPAmgPhoXGN9M+Qi5RERdh9lgnCFG4Yb6/oge2FZKjPCXnLhEdgMgqW
FYrdH+zw6YKTa9c4mtldH9m3YXzLwrmco6c2qGe/IQMQ+glZBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJLgbBSkZKkADu+eso5A36raFVr3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDE0Y2E4OWMtYzk5OS0z
NzM3LTgwZDktNTIwMTFiMzg5MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQEbB4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAZUUk7140kU3D2AJO5uh2B/PIe3sRRMkj4FRLUAp8c+ECMihqnD
7+52ThYeX3zbTSEnGC985IFeWmCX830NTyxu5b9V13zHEtA0Dso0BnwJvUG9P30B
OP27B4dfu5Pf4ACdlwy+lpfmz6luc0c1lH9cdJsm2r0q5AB7ibMAbbMX/SUAiQVe
fBo4H+L6iMu8OBFAKYirs4daIyAU8dVl6LoaUVF6h8IkxzeIDNcIjNO3Qn9fq8PQ
TMKn+amWkjrOPu66AAImI0qJccTXTy0qTpkcJd+7YQNR4phPK8KCFq7rZJJs+7cB
tp3ipb9zlvZWTlJPWZyVJlwFkdxGTPCNYCc=
-----END CERTIFICATE-----
Generated at Tue Jul 1 01:09:44 2025 by rpki-client