Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f980e78b-8cb0-3178-aa56-8e8777b4ca3d.roa
File:                     f980e78b-8cb0-3178-aa56-8e8777b4ca3d.roa (raw, json)
Hash identifier:          gFfcLsd/nZimlI7vOuLb+1yDKXvx/DMeU/K0rLb4z4A=
Subject key identifier:   8A:BA:4F:C3:24:0A:31:FA:BF:88:41:22:09:FC:45:85:66:34:25:09
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B144760F0E0746C5F8D20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f980e78b-8cb0-3178-aa56-8e8777b4ca3d.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1002:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:14:47:60:f0:e0:74:6c:5f:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=fc713ac2-9438-44c8-a539-fcb65c7671c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:03:16:5e:46:71:53:7b:70:6d:14:c4:b4:
                    fc:01:fc:bd:50:ab:d2:56:6a:cb:8b:49:03:9b:b0:
                    c6:85:01:e2:df:66:0c:08:e4:05:1a:76:b5:e3:b5:
                    02:73:6f:c3:2d:48:66:12:43:8f:f9:88:c4:30:ab:
                    6c:33:0e:39:23:c2:33:21:2a:15:09:5c:f5:44:7f:
                    8d:b4:c7:e5:3a:38:e9:03:dd:5c:e5:36:e9:d3:16:
                    b3:cb:50:3b:a6:87:87:e1:00:b6:31:00:e1:77:4d:
                    f9:a4:91:00:9c:78:47:f1:f5:40:1a:9f:bb:08:a5:
                    09:3a:02:b4:f1:a4:87:10:9f:1e:b5:85:b8:1d:3c:
                    3e:ea:c8:2e:04:7c:82:53:4d:76:95:6b:63:2c:9a:
                    90:40:62:5b:ce:b8:f9:d5:05:d9:3c:d0:3b:75:2a:
                    3b:08:26:5e:fd:67:a9:91:3e:d2:c8:3f:80:c0:30:
                    ef:c2:e2:04:0a:db:50:bf:3b:f1:fc:1f:b0:b5:4f:
                    97:90:a0:4b:71:25:b3:bd:aa:b9:eb:da:b1:19:db:
                    a6:3a:b2:e9:68:d8:f6:f5:53:3e:a7:86:8e:18:0b:
                    df:63:5d:6e:f7:58:2a:1f:46:3d:82:16:c1:24:18:
                    99:8a:d3:f7:54:e4:c3:c7:e0:55:0c:5a:19:a6:dc:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BA:4F:C3:24:0A:31:FA:BF:88:41:22:09:FC:45:85:66:34:25:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f980e78b-8cb0-3178-aa56-8e8777b4ca3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:96:0f:ff:42:ea:35:78:4b:db:c4:f1:66:2c:ec:f1:6b:96:
         1c:30:4e:7d:8c:e2:2d:da:a4:eb:54:45:91:70:af:b8:8b:63:
         71:e0:b5:14:ce:f7:8f:19:1f:29:ab:04:e5:92:7e:50:f8:b7:
         38:07:b0:a2:bc:e2:a3:65:59:36:46:ae:78:9d:ce:9f:b8:cb:
         45:9a:d8:e2:82:3f:37:05:b9:66:b5:15:34:96:dc:57:65:d4:
         27:73:46:07:27:e8:99:9d:36:2d:09:6a:2f:02:19:1e:ec:e4:
         c7:7b:c0:9e:d6:12:7e:57:87:a6:8d:db:a2:3c:34:58:b4:32:
         1d:06:81:ef:31:55:bb:83:93:05:ae:4d:70:24:da:d9:15:15:
         96:10:58:28:be:d7:11:02:89:71:a3:81:2a:12:15:a9:df:f7:
         68:1a:20:1f:5c:e4:5e:34:8b:0f:59:2b:91:e5:80:4f:db:68:
         a9:d5:45:c0:28:d6:9f:39:fa:58:b7:63:07:ec:6a:fe:43:9f:
         1d:98:f8:9f:6a:97:cf:80:ed:26:3d:8b:69:e1:8e:cd:bc:9c:
         fb:f5:3a:60:b1:3c:f2:3f:63:98:a4:3f:b4:b5:4f:f0:72:b1:
         bf:ce:0c:a4:5a:2f:0c:9c:d1:46:5b:ab:ec:82:c4:ef:c4:97:
         5f:40:52:d6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7exRHYPDgdGxfjSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
ZmM3MTNhYzItOTQzOC00NGM4LWE1MzktZmNiNjVjNzY3MWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFoDFl5GcVN7cG0UxLT8Afy9UKvSVmrLi0kD
m7DGhQHi32YMCOQFGna147UCc2/DLUhmEkOP+YjEMKtsMw45I8IzISoVCVz1RH+N
tMflOjjpA91c5Tbp0xazy1A7poeH4QC2MQDhd035pJEAnHhH8fVAGp+7CKUJOgK0
8aSHEJ8etYW4HTw+6sguBHyCU012lWtjLJqQQGJbzrj51QXZPNA7dSo7CCZe/Wep
kT7SyD+AwDDvwuIECttQvzvx/B+wtU+XkKBLcSWzvaq569qxGdumOrLpaNj29VM+
p4aOGAvfY11u91gqH0Y9ghbBJBiZitP3VOTDx+BVDFoZpty9OwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIq6T8MkCjH6v4hBIgn8RYVmNCUJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjk4MGU3OGItOGNiMC0z
MTc4LWFhNTYtOGU4Nzc3YjRjYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQArDQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF+WD/9C6jV4S9vE8WYs7PFrlhwwTn2M4i3apOtURZFwr7iLY3Hg
tRTO948ZHymrBOWSflD4tzgHsKK84qNlWTZGrnidzp+4y0Wa2OKCPzcFuWa1FTSW
3Fdl1CdzRgcn6JmdNi0Jai8CGR7s5Md7wJ7WEn5Xh6aN26I8NFi0Mh0Gge8xVbuD
kwWuTXAk2tkVFZYQWCi+1xECiXGjgSoSFanf92gaIB9c5F40iw9ZK5HlgE/baKnV
RcAo1p85+li3Ywfsav5Dnx2Y+J9ql8+A7SY9i2nhjs28nPv1OmCxPPI/Y5ikP7S1
T/Bysb/ODKRaLwyc0UZbq+yCxO/El19AUtY=
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:43:34 2025 by rpki-client