Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcbdb09a-e3a9-3ab9-93a5-28ac178335ea.roa
File:                     dcbdb09a-e3a9-3ab9-93a5-28ac178335ea.roa (raw, json)
Hash identifier:          T1eKKw8v+27nF7SRnaEfOK1qOr9lTwT07BVoLZnACDA=
Subject key identifier:   B9:83:12:B0:C7:DC:55:44:DB:16:42:98:96:45:C1:F8:57:46:18:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B15943A93014169E23160
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcbdb09a-e3a9-3ab9-93a5-28ac178335ea.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1003:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:15:94:3a:93:01:41:69:e2:31:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=f721db20-8fc3-4e81-8924-e52797429ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:ae:01:a5:2b:93:eb:75:66:e3:5b:a8:45:
                    b2:54:96:f3:27:5e:6e:03:9b:d6:15:b6:bf:5b:97:
                    30:46:3a:8e:f0:b8:31:48:a1:3b:28:ee:b4:12:46:
                    91:31:14:10:54:c2:0a:e9:3d:8d:2f:29:44:e7:c9:
                    23:54:a3:79:f0:4c:55:30:39:5f:1e:8a:ed:8d:01:
                    7b:fa:1e:f3:a1:a0:86:74:d8:8a:7f:44:69:7b:11:
                    af:5f:8f:30:9c:4a:a5:2e:b8:05:83:1e:f4:0d:41:
                    8c:1e:7c:55:89:4b:b4:30:30:3d:3f:70:bd:38:a1:
                    91:69:f8:88:24:4e:5f:36:24:bf:77:36:13:82:9e:
                    24:0e:29:fc:29:86:db:80:f3:ba:76:57:75:a2:81:
                    92:bf:63:f1:6c:4c:17:22:1e:ba:3f:4d:80:b3:9d:
                    f3:61:e1:0e:58:6d:2d:aa:29:04:84:2a:e2:48:d7:
                    50:88:74:f2:d7:fb:ea:8d:f4:02:73:51:36:72:6d:
                    ec:6a:91:24:aa:04:e1:a1:30:db:0c:a5:0b:6d:86:
                    50:c1:c4:e7:2b:e3:da:d8:cc:de:d3:f4:2d:48:aa:
                    76:f5:9e:b4:11:4f:3c:93:a8:4f:a9:1a:92:5e:12:
                    47:a1:a8:00:f9:53:22:61:53:19:d2:ae:af:a4:54:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:83:12:B0:C7:DC:55:44:DB:16:42:98:96:45:C1:F8:57:46:18:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcbdb09a-e3a9-3ab9-93a5-28ac178335ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:70:c9:ae:0e:cb:fa:5d:02:a5:2e:2f:6f:61:8a:4c:4a:13:
         31:cc:b4:30:91:2c:ba:a8:94:27:d7:da:89:d4:55:c7:3b:ab:
         f7:06:83:77:7d:39:2e:dc:01:44:98:5d:cd:ea:0b:75:00:99:
         08:ab:ac:e4:f8:32:63:6f:fb:32:f9:3a:81:41:cc:ab:1b:c0:
         1f:dd:72:c4:ee:fa:47:5d:19:5a:ba:f4:28:c8:4f:11:15:5d:
         dc:33:db:8b:14:90:44:44:7d:f2:97:1e:cd:e1:dd:4b:af:77:
         e1:a4:e7:6c:ed:02:48:2b:64:a7:89:5c:18:1e:14:52:e3:b3:
         8f:a7:7c:82:12:7a:aa:0b:03:4f:cd:28:0c:e3:6f:2a:b1:a4:
         4b:44:8b:5a:f1:89:6d:52:f3:57:24:b7:33:99:0f:b1:95:38:
         5a:3f:89:17:8d:9c:5e:7c:74:e6:fe:ba:26:ce:80:5b:35:a7:
         65:30:7e:d8:a6:37:2d:d5:c4:f0:d8:b3:25:5c:b2:1c:4a:30:
         51:94:68:17:16:ee:50:20:a2:b9:d8:1f:ab:d9:43:3b:8d:f6:
         fb:f4:99:68:c6:3f:12:59:a2:ff:27:06:f6:4c:a4:ee:79:a0:
         5b:a8:48:c0:71:54:7a:7f:98:32:9c:45:09:ac:f8:e3:c0:7b:
         e5:ca:f3:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7exWUOpMBQWniMWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
ZjcyMWRiMjAtOGZjMy00ZTgxLTg5MjQtZTUyNzk3NDI5ZWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpuuAaUrk+t1ZuNbqEWyVJbzJ15uA5vWFba/
W5cwRjqO8LgxSKE7KO60EkaRMRQQVMIK6T2NLylE58kjVKN58ExVMDlfHortjQF7
+h7zoaCGdNiKf0RpexGvX48wnEqlLrgFgx70DUGMHnxViUu0MDA9P3C9OKGRafiI
JE5fNiS/dzYTgp4kDin8KYbbgPO6dld1ooGSv2PxbEwXIh66P02As53zYeEOWG0t
qikEhCriSNdQiHTy1/vqjfQCc1E2cm3sapEkqgThoTDbDKULbYZQwcTnK+Pa2Mze
0/QtSKp29Z60EU88k6hPqRqSXhJHoagA+VMiYVMZ0q6vpFQjAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLmDErDH3FVE2xZCmJZFwfhXRhh0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGNiZGIwOWEtZTNhOS0z
YWI5LTkzYTUtMjhhYzE3ODMzNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQA6AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKNwya4Oy/pdAqUuL29hikxKEzHMtDCRLLqolCfX2onUVcc7q/cG
g3d9OS7cAUSYXc3qC3UAmQirrOT4MmNv+zL5OoFBzKsbwB/dcsTu+kddGVq69CjI
TxEVXdwz24sUkEREffKXHs3h3Uuvd+Gk52ztAkgrZKeJXBgeFFLjs4+nfIISeqoL
A0/NKAzjbyqxpEtEi1rxiW1S81cktzOZD7GVOFo/iReNnF58dOb+uibOgFs1p2Uw
ftimNy3VxPDYsyVcshxKMFGUaBcW7lAgornYH6vZQzuN9vv0mWjGPxJZov8nBvZM
pO55oFuoSMBxVHp/mDKcRQms+OPAe+XK84A=
-----END CERTIFICATE-----
Generated at Wed Jul 2 00:50:34 2025 by rpki-client