Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff5bd3a8-c1cc-360f-9e10-597b0b836c6a.roa
File:                     ff5bd3a8-c1cc-360f-9e10-597b0b836c6a.roa (raw, json)
Hash identifier:          WMWEmSAcC+lDueiFPOqZcRhr0tcWqBlzzCNF7FC28lE=
Subject key identifier:   60:95:A5:09:0C:C1:D9:5F:17:B6:B4:E2:3D:A3:88:F4:91:6B:9B:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295585A42244E6BA30D91000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff5bd3a8-c1cc-360f-9e10-597b0b836c6a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1016:b020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:85:a4:22:44:e6:ba:30:d9:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=c9c0e379-34a5-4048-9617-b660973f9e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:14:28:91:bd:f6:75:9d:9d:41:02:4f:1c:
                    e9:44:f5:a9:e9:72:d3:25:37:52:0f:f0:15:a6:4d:
                    96:1b:b1:e0:7d:79:7c:fe:21:3d:79:23:da:84:14:
                    8e:23:6d:f5:bd:35:a1:d7:dc:4a:7e:0e:22:7c:c7:
                    a5:43:be:a5:88:05:a7:bc:59:a8:c3:ae:23:4f:bf:
                    f6:4d:99:de:e1:92:b9:5d:3f:02:b5:1a:1f:11:d5:
                    33:bf:1c:62:c0:d1:4e:a6:51:c5:33:3f:c9:3b:bf:
                    c0:5f:bf:92:42:2c:37:23:72:3c:47:f5:af:e2:34:
                    2b:3f:54:28:90:14:41:22:3d:7c:2b:a7:4e:66:05:
                    c0:35:1c:30:d6:ae:6e:05:7f:e5:7a:5c:e2:05:2b:
                    ad:d6:ac:4f:30:80:6d:1f:c3:65:3c:5b:ff:b6:00:
                    82:84:cf:49:fb:d0:65:f4:b0:85:92:c8:5a:56:22:
                    1b:c1:9a:0f:76:bf:a6:d0:52:fa:61:eb:45:9b:9f:
                    78:2a:9c:00:99:df:da:f4:27:22:cb:37:0f:42:fc:
                    6e:48:50:10:f1:f3:82:56:4f:53:fc:01:45:8c:0b:
                    eb:8d:f5:f4:30:be:2f:b1:e5:98:ab:8f:8d:a6:21:
                    6e:4c:43:dc:a5:61:9f:2f:06:84:43:fc:fd:34:5b:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:95:A5:09:0C:C1:D9:5F:17:B6:B4:E2:3D:A3:88:F4:91:6B:9B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff5bd3a8-c1cc-360f-9e10-597b0b836c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:eb:f2:91:75:2a:7f:8e:33:d1:c2:b2:8c:99:4a:47:6e:41:
         40:0b:e6:15:da:cc:26:c0:70:47:0b:9c:1e:57:ae:9e:6b:79:
         1b:ea:e0:5c:7c:ed:d5:6f:99:81:47:3f:5f:18:19:88:94:fd:
         c1:d2:0e:3e:74:4d:f5:f2:0f:68:10:bc:0c:5b:59:e8:f4:03:
         63:33:a3:d8:67:b8:1a:c8:4f:5b:e4:32:91:7d:ac:20:fa:e4:
         72:6d:aa:ae:22:38:39:09:4a:66:13:c4:34:6b:e1:22:06:05:
         27:ff:b4:ea:15:59:90:e5:6b:7d:7e:40:17:14:46:6f:48:79:
         cc:64:34:fa:31:a7:c3:a0:32:14:5e:85:6d:aa:f7:fb:de:1d:
         91:c4:20:e5:54:2d:a4:a1:66:5f:38:5d:e5:b9:a7:83:c1:b1:
         b5:3e:20:4f:f3:b4:70:8c:22:4d:48:99:e8:e6:e0:6e:37:17:
         ba:6d:3d:cf:42:f0:48:29:26:e8:24:59:0d:1f:83:6a:47:83:
         91:73:43:68:4a:25:7b:f1:04:d1:2b:79:9b:2b:ee:d7:16:c5:
         9b:4a:da:0c:cb:b4:d5:ec:77:9e:b1:b3:01:e7:5d:c0:20:7b:
         2b:c2:bc:87:26:a2:9c:a8:92:e2:9f:f1:fa:bf:60:c9:a6:c6:
         8c:f9:0a:a9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEopVYWkIkTmujDZEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
YzljMGUzNzktMzRhNS00MDQ4LTk2MTctYjY2MDk3M2Y5ZTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfUUKJG99nWdnUECTxzpRPWp6XLTJTdSD/AV
pk2WG7HgfXl8/iE9eSPahBSOI231vTWh19xKfg4ifMelQ76liAWnvFmow64jT7/2
TZne4ZK5XT8CtRofEdUzvxxiwNFOplHFMz/JO7/AX7+SQiw3I3I8R/Wv4jQrP1Qo
kBRBIj18K6dOZgXANRww1q5uBX/lelziBSut1qxPMIBtH8NlPFv/tgCChM9J+9Bl
9LCFkshaViIbwZoPdr+m0FL6YetFm594KpwAmd/a9CciyzcPQvxuSFAQ8fOCVk9T
/AFFjAvrjfX0ML4vseWYq4+NpiFuTEPcpWGfLwaEQ/z9NFtWbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGCVpQkMwdlfF7a04j2jiPSRa5u1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmY1YmQzYTgtYzFjYy0z
NjBmLTllMTAtNTk3YjBiODM2YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFrAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJvr8pF1Kn+OM9HCsoyZSkduQUAL5hXazCbAcEcLnB5Xrp5reRvq
4Fx87dVvmYFHP18YGYiU/cHSDj50TfXyD2gQvAxbWej0A2Mzo9hnuBrIT1vkMpF9
rCD65HJtqq4iODkJSmYTxDRr4SIGBSf/tOoVWZDla31+QBcURm9IecxkNPoxp8Og
MhRehW2q9/veHZHEIOVULaShZl84XeW5p4PBsbU+IE/ztHCMIk1Imejm4G43F7pt
Pc9C8EgpJugkWQ0fg2pHg5FzQ2hKJXvxBNEreZsr7tcWxZtK2gzLtNXsd56xswHn
XcAgeyvCvIcmopyokuKf8fq/YMmmxoz5Cqk=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:42:05 2025 by rpki-client