Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da7608c4-d417-336b-9935-94baa584463a.roa
File:                     da7608c4-d417-336b-9935-94baa584463a.roa (raw, json)
Hash identifier:          AVGEF+L3XodSpB9VzHIn4MOTTwRc5yDQyDvg256Drsg=
Subject key identifier:   AE:85:A3:D5:8C:66:25:FF:FD:20:2C:09:86:CE:65:F3:60:4C:AF:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A612B1ECC26D783EF61BB1E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da7608c4-d417-336b-9935-94baa584463a.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        2600:1002:a110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:1e:cc:26:d7:83:ef:61:bb:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=40145c66-b758-4e03-8889-7b5b604df449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:a5:1b:0b:cd:4d:b3:9c:28:98:be:28:d8:
                    61:72:28:ae:5c:50:a2:7e:e2:1b:d1:b1:69:ea:b0:
                    7c:fb:f6:93:f4:1a:11:cf:a7:52:e0:af:c2:03:a7:
                    d5:63:16:3e:1e:a7:8d:61:a1:4f:74:23:92:e3:6c:
                    ff:85:a8:bb:52:a3:f5:b4:36:ca:7d:1d:69:b8:1d:
                    dc:1b:65:b4:e0:20:03:c5:26:41:88:ef:16:9e:2a:
                    96:4b:9a:9a:6f:12:18:03:6b:6b:0f:33:04:b0:bc:
                    cf:fd:fc:c8:87:12:8c:4b:e8:34:67:96:b0:57:5a:
                    6e:28:7e:8a:f7:af:44:fd:0d:5d:c1:43:65:45:44:
                    22:5e:07:85:c6:d7:71:ce:89:e9:2a:11:85:0a:96:
                    67:14:fd:4c:2b:9e:f3:38:e4:64:d1:ee:08:70:40:
                    44:19:bf:6f:73:43:da:5f:94:0a:22:94:18:c3:49:
                    a3:40:a7:58:6d:6a:2d:6a:49:08:fb:08:f1:5b:4e:
                    f1:19:4f:5c:83:e6:81:df:c7:79:a9:56:07:91:9b:
                    c4:60:fd:7e:8e:9b:79:71:a5:4b:98:01:33:09:a6:
                    fe:9e:88:95:00:3e:26:b8:d9:5c:a4:52:20:41:30:
                    24:11:9b:91:0c:d5:d5:56:66:98:21:96:4d:25:69:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:85:A3:D5:8C:66:25:FF:FD:20:2C:09:86:CE:65:F3:60:4C:AF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da7608c4-d417-336b-9935-94baa584463a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:be:71:0d:da:0a:b7:e0:b9:6c:ff:14:94:dc:95:80:c3:c2:
         d7:40:09:f5:82:7e:7f:2e:e3:ed:5b:c4:17:61:87:ca:1d:94:
         8b:20:28:fe:b4:71:6f:65:9c:d1:26:42:e1:6d:0a:36:15:73:
         cb:92:fe:15:07:d5:67:c3:aa:38:11:66:11:ef:f4:7d:d0:fc:
         ba:d4:26:32:7c:ce:dc:3f:fd:9d:3f:8c:b7:39:a6:b6:aa:70:
         86:fc:bb:75:bd:cc:09:6b:62:1a:28:8a:0b:95:0c:f3:fb:57:
         ab:75:4f:21:a4:68:0c:fd:e6:b4:84:ae:a6:75:c4:8d:06:2e:
         59:da:37:a9:27:e8:e6:b4:2c:90:36:a9:22:61:2c:74:65:78:
         f8:6f:95:be:51:71:51:11:80:40:85:0f:c4:e7:f1:18:bc:7c:
         2b:05:97:29:85:d1:31:d8:81:66:2a:21:c9:6e:62:f7:c5:b7:
         f1:71:46:5a:fa:0f:04:ac:fb:00:80:1e:08:b6:20:92:8e:8d:
         b8:88:93:23:29:9c:e1:35:b4:d4:ae:d4:89:8e:2c:77:6c:ab:
         ae:62:08:f8:ea:3d:7c:50:30:51:07:d3:c3:24:9a:f7:fb:89:
         88:bd:79:68:b0:e2:e7:1d:ad:f8:57:52:9e:b7:6e:a8:cb:38:
         da:b3:b5:1c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEphKx7MJteD72G7HgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
NDAxNDVjNjYtYjc1OC00ZTAzLTg4ODktN2I1YjYwNGRmNDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzClGwvNTbOcKJi+KNhhciiuXFCifuIb0bFp
6rB8+/aT9BoRz6dS4K/CA6fVYxY+HqeNYaFPdCOS42z/hai7UqP1tDbKfR1puB3c
G2W04CADxSZBiO8WniqWS5qabxIYA2trDzMEsLzP/fzIhxKMS+g0Z5awV1puKH6K
969E/Q1dwUNlRUQiXgeFxtdxzonpKhGFCpZnFP1MK57zOORk0e4IcEBEGb9vc0Pa
X5QKIpQYw0mjQKdYbWotakkI+wjxW07xGU9cg+aB38d5qVYHkZvEYP1+jpt5caVL
mAEzCab+noiVAD4muNlcpFIgQTAkEZuRDNXVVmaYIZZNJWnfLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK6Fo9WMZiX//SAsCYbOZfNgTK/OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGE3NjA4YzQtZDQxNy0z
MzZiLTk5MzUtOTRiYWE1ODQ0NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQAqEQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKa+cQ3aCrfguWz/FJTclYDDwtdACfWCfn8u4+1bxBdhh8odlIsg
KP60cW9lnNEmQuFtCjYVc8uS/hUH1WfDqjgRZhHv9H3Q/LrUJjJ8ztw//Z0/jLc5
praqcIb8u3W9zAlrYhooiguVDPP7V6t1TyGkaAz95rSErqZ1xI0GLlnaN6kn6Oa0
LJA2qSJhLHRlePhvlb5RcVERgECFD8Tn8Ri8fCsFlymF0THYgWYqIcluYvfFt/Fx
Rlr6DwSs+wCAHgi2IJKOjbiIkyMpnOE1tNSu1ImOLHdsq65iCPjqPXxQMFEH08Mk
mvf7iYi9eWiw4ucdrfhXUp63bqjLONqztRw=
-----END CERTIFICATE-----
Generated at Wed Jul 2 21:23:20 2025 by rpki-client