Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa
File:                     30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa (raw, json)
Hash identifier:          MZhZveYlmHcuO0vKTQANidXtI42InAfmpOHjVisGs8c=
Subject key identifier:   9E:FB:38:7D:7D:53:B1:F9:57:5D:A9:11:19:35:AC:2D:02:D5:64:9B
Certificate issuer:       /CN=d60903a0-a127-4c7f-a403-6a3d8817015e
Certificate serial:       010D0C9F4328584A0C05526D6AC0759A711FEA80
Authority key identifier: 77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     40267
IP address blocks:        2620:121:6000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:52:6d:6a:c0:75:9a:71:1f:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60903a0-a127-4c7f-a403-6a3d8817015e
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3c8f0996-cb7f-4532-ae56-90859ac34d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:a1:f2:bc:9e:0d:df:92:1d:38:1f:75:77:
                    ca:cc:e6:8d:12:0a:7a:48:d5:34:e0:50:4f:b6:ee:
                    ed:65:7a:89:7d:48:54:4d:d5:a8:e1:3d:02:5b:9e:
                    92:8e:28:f8:18:c4:46:c1:bd:88:86:e9:93:93:e6:
                    21:c5:4c:13:38:06:19:fb:97:04:12:16:db:ca:92:
                    32:95:f3:b5:46:67:98:4e:95:c0:1e:98:f1:29:ed:
                    d1:4d:da:df:47:ba:0a:86:ab:2d:90:49:4f:46:0e:
                    54:da:a5:81:bd:39:53:82:f7:25:2e:b9:da:ea:03:
                    e5:79:0e:ec:1d:bf:48:e7:57:77:d1:12:55:ba:55:
                    19:4d:db:50:4a:56:85:8e:d6:1d:e5:69:ec:6f:00:
                    22:aa:7b:ab:37:18:23:35:c7:3e:00:c5:1d:4c:14:
                    e5:2a:61:5a:c7:95:ef:e4:65:84:24:84:1b:e4:f5:
                    aa:ac:e8:46:69:86:47:f1:9d:24:99:12:11:a3:9b:
                    5b:d8:3f:dc:c3:06:f6:a9:bf:cd:ed:a7:2c:3a:9a:
                    77:d2:ff:ea:33:77:ac:af:85:2e:ff:50:92:4b:95:
                    e4:c4:d9:95:43:b4:cf:fd:19:e0:e0:17:a3:07:d3:
                    78:a2:4c:04:10:00:8c:3b:4a:cc:54:33:22:10:60:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FB:38:7D:7D:53:B1:F9:57:5D:A9:11:19:35:AC:2D:02:D5:64:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/30e699cb-7e31-3581-b0b3-bb61e8c7b8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.crl

            X509v3 Authority Key Identifier:
                keyid:77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:121:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4d:b3:05:88:14:8f:fa:c0:b7:ae:f7:35:69:8e:2d:e7:18:
         8f:f1:e0:ce:36:0c:dd:2a:9a:8b:ce:cd:31:cb:b2:40:3a:03:
         3f:b1:01:34:4b:2d:02:bd:9e:ee:0c:31:cb:7e:d3:be:51:2a:
         fb:90:77:f9:e2:47:c3:cd:29:71:8c:c9:ae:52:84:0c:0b:7a:
         00:6b:88:d1:62:54:79:f2:c3:82:f5:97:23:71:36:60:3b:e7:
         42:f4:61:2f:d8:a7:ee:20:5c:9e:f7:48:ee:2e:15:f5:f2:2a:
         66:db:16:32:12:b9:ad:c0:4a:8f:d9:b2:5b:76:9c:c1:8b:b5:
         91:64:e4:8d:1d:ec:c8:c6:4b:d2:d0:39:74:0e:d4:86:62:0f:
         42:5a:38:69:50:43:28:52:34:32:10:4d:0c:9f:e8:8e:61:0e:
         f6:e9:5c:44:01:0e:cc:ac:92:48:6e:0e:e3:74:48:fe:4c:0c:
         e1:8a:c8:5a:0a:65:1a:55:53:2b:f6:d0:b7:bd:eb:0c:e8:50:
         bd:3b:95:03:d2:02:74:e5:48:9b:3b:59:7f:33:d9:ea:04:46:
         5b:9b:09:e0:49:3b:ae:76:ab:13:61:b4:b9:77:be:7c:70:d6:
         c5:c2:e1:ed:fd:36:59:dd:d0:88:f0:cc:63:c7:97:a6:de:6c:
         59:fe:40:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoMBVJtasB1mnEf6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDYwOTAzYTAtYTEyNy00YzdmLWE0MDMtNmEzZDg4MTcw
MTVlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
M2M4ZjA5OTYtY2I3Zi00NTMyLWFlNTYtOTA4NTlhYzM0ZDBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWOh8ryeDd+SHTgfdXfKzOaNEgp6SNU04FBP
tu7tZXqJfUhUTdWo4T0CW56Sjij4GMRGwb2IhumTk+YhxUwTOAYZ+5cEEhbbypIy
lfO1RmeYTpXAHpjxKe3RTdrfR7oKhqstkElPRg5U2qWBvTlTgvclLrna6gPleQ7s
Hb9I51d30RJVulUZTdtQSlaFjtYd5WnsbwAiqnurNxgjNcc+AMUdTBTlKmFax5Xv
5GWEJIQb5PWqrOhGaYZH8Z0kmRIRo5tb2D/cwwb2qb/N7acsOpp30v/qM3esr4Uu
/1CSS5XkxNmVQ7TP/Rng4BejB9N4okwEEACMO0rMVDMiEGC9xQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ77OH19U7H5V12pERk1rC0C1WSbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNjA5
MDNhMC1hMTI3LTRjN2YtYTQwMy02YTNkODgxNzAxNWUvMzBlNjk5Y2ItN2UzMS0z
NTgxLWIwYjMtYmI2MWU4YzdiOGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDYwOTAzYTAtYTEyNy00YzdmLWE0
MDMtNmEzZDg4MTcwMTVlL2Q2MDkwM2EwLWExMjctNGM3Zi1hNDAzLTZhM2Q4ODE3
MDE1ZS5jcmwwHwYDVR0jBBgwFoAUd8YxJYFVxj3wjYQ+yZA9dtbLt84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kNjA5MDNhMC1hMTI3LTRjN2YtYTQwMy02YTNk
ODgxNzAxNWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABIWAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIlNswWIFI/6wLeu9zVpji3nGI/x4M42DN0qmovOzTHLskA6Az+x
ATRLLQK9nu4MMct+075RKvuQd/niR8PNKXGMya5ShAwLegBriNFiVHnyw4L1lyNx
NmA750L0YS/Yp+4gXJ73SO4uFfXyKmbbFjISua3ASo/Zslt2nMGLtZFk5I0d7MjG
S9LQOXQO1IZiD0JaOGlQQyhSNDIQTQyf6I5hDvbpXEQBDsyskkhuDuN0SP5MDOGK
yFoKZRpVUyv20Le96wzoUL07lQPSAnTlSJs7WX8z2eoERlubCeBJO652qxNhtLl3
vnxw1sXC4e39Nlnd0IjwzGPHl6bebFn+QA4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:06:42 2025 by rpki-client