Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/701167fd-e346-398a-9c90-b1eb27b06de0.roa
File:                     701167fd-e346-398a-9c90-b1eb27b06de0.roa (raw, json)
Hash identifier:          Fl+Dxzsx0IbyBbB520f4f8yV83dKI2IjTa5Xi7V0Rc0=
Subject key identifier:   6C:A3:92:CA:91:00:3F:93:A3:BC:05:8D:C9:A9:00:2B:D0:43:0D:1C
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AADEA378F3CA4FC359D40
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/701167fd-e346-398a-9c90-b1eb27b06de0.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2600:6c83::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ad:ea:37:8f:3c:a4:fc:35:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=fbcf265b-559b-4895-a0f4-a2107908514c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:64:ef:a9:b7:1d:ee:ab:6b:12:bc:b8:48:b0:
                    15:78:e8:05:ce:35:bf:cd:c6:27:26:cb:34:b9:d0:
                    6c:50:e3:cf:d1:23:06:fc:1a:99:73:e8:89:90:d3:
                    4a:06:99:c5:8e:cd:e0:fc:9d:42:4f:db:47:27:40:
                    77:c5:8a:92:27:94:03:b4:c1:0c:c8:3a:08:a1:68:
                    7b:eb:5b:32:78:b5:40:33:32:f7:b3:7c:9a:fb:71:
                    ed:6b:d3:f3:04:27:0a:56:20:d4:c9:ba:8d:a7:7c:
                    2c:83:e9:84:c1:cd:b8:22:69:3d:a9:8c:8b:04:ae:
                    dd:6e:91:be:5a:df:2d:35:2c:cb:e6:aa:39:5f:ac:
                    75:57:95:4c:82:90:0c:73:6a:81:07:45:04:cf:dd:
                    f1:ce:f0:be:7c:a6:cd:f8:ba:87:44:42:c5:78:d9:
                    6e:c5:88:ef:43:ad:7a:85:47:09:f4:8f:7c:0f:6c:
                    0e:c0:61:e6:94:08:36:91:d0:2d:f1:c2:a9:e2:37:
                    89:dc:3e:4f:d9:ba:0d:a5:30:bc:36:cc:70:79:03:
                    89:83:59:0a:77:c7:c5:f1:21:b8:19:a7:e3:2e:5c:
                    8c:99:96:cb:20:58:e3:07:83:56:a2:c5:31:f4:8c:
                    4a:77:1b:a6:02:69:7b:9a:f9:4e:d6:95:70:53:97:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A3:92:CA:91:00:3F:93:A3:BC:05:8D:C9:A9:00:2B:D0:43:0D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/701167fd-e346-398a-9c90-b1eb27b06de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c83::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a2:cb:2d:14:be:e7:eb:ff:8b:c5:a3:df:a7:d7:44:56:7d:
         53:aa:de:76:3e:52:3b:37:d6:69:0d:f7:3d:96:42:44:3e:f4:
         c6:01:ff:3e:38:a7:ae:6d:76:03:90:f7:26:7a:77:5e:cf:4a:
         06:ae:a7:99:d1:48:57:7b:d1:80:b1:d4:d6:ac:ed:8e:4b:72:
         33:47:fa:f2:72:ea:ea:bf:2f:4e:aa:14:e0:5e:6c:78:d8:87:
         0e:b1:e9:cd:54:62:aa:14:88:5f:24:25:85:17:f2:e5:5e:b0:
         cd:27:4d:3f:f2:4c:c2:7a:01:3a:02:b8:54:ec:84:f8:88:52:
         f1:a8:da:2e:74:12:6f:f2:6d:f5:59:f5:26:d3:ec:c9:1e:d7:
         50:a5:2d:55:03:cd:bb:53:e7:aa:41:82:4a:d6:0e:80:e7:85:
         83:85:86:8f:29:38:a2:ec:d7:2c:99:63:8a:64:06:9a:c9:18:
         ac:a6:e9:e0:64:fc:fe:1c:35:93:41:db:f1:42:8a:c8:21:34:
         64:0e:44:ca:0f:19:c9:f8:2d:e2:b6:a7:9b:30:f1:7d:c1:85:
         72:72:ab:e2:b0:1a:9b:1a:3c:b4:da:c7:00:3c:a6:0f:44:72:
         f2:66:32:ff:79:b3:e7:9a:cd:fc:e4:c9:bf:9f:01:fa:9e:88:
         12:49:5a:d8
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnCCq3qN488pPw1nUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZmJjZjI2NWItNTU5Yi00ODk1LWEwZjQtYTIxMDc5MDg1MTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72Tvqbcd7qtrEry4SLAVeOgFzjW/zcYnJss0
udBsUOPP0SMG/BqZc+iJkNNKBpnFjs3g/J1CT9tHJ0B3xYqSJ5QDtMEMyDoIoWh7
61syeLVAMzL3s3ya+3Hta9PzBCcKViDUybqNp3wsg+mEwc24Imk9qYyLBK7dbpG+
Wt8tNSzL5qo5X6x1V5VMgpAMc2qBB0UEz93xzvC+fKbN+LqHRELFeNluxYjvQ616
hUcJ9I98D2wOwGHmlAg2kdAt8cKp4jeJ3D5P2boNpTC8NsxweQOJg1kKd8fF8SG4
GafjLlyMmZbLIFjjB4NWosUx9IxKdxumAml7mvlO1pVwU5dn2wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGyjksqRAD+To7wFjcmpACvQQw0cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzAxMTY3ZmQtZTM0Ni0z
OThhLTljOTAtYjFlYjI3YjA2ZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgBsgzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCPosstFL7n6/+LxaPfp9dEVn1Tqt52PlI7N9ZpDfc9lkJEPvTGAf8+
OKeubXYDkPcmendez0oGrqeZ0UhXe9GAsdTWrO2OS3IzR/rycurqvy9OqhTgXmx4
2IcOsenNVGKqFIhfJCWFF/LlXrDNJ00/8kzCegE6ArhU7IT4iFLxqNoudBJv8m31
WfUm0+zJHtdQpS1VA827U+eqQYJK1g6A54WDhYaPKTii7NcsmWOKZAaayRispung
ZPz+HDWTQdvxQorIITRkDkTKDxnJ+C3itqebMPF9wYVycqvisBqbGjy02scAPKYP
RHLyZjL/ebPnms385Mm/nwH6nogSSVrY
-----END CERTIFICATE-----
Generated at Sun May 11 09:24:54 2025 by rpki-client