Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2df2f7d7-a185-3fe2-a194-c51e14f9eb71.roa
File:                     2df2f7d7-a185-3fe2-a194-c51e14f9eb71.roa (raw, json)
Hash identifier:          t9U6y+pg7dAg6nmJv+h0sUg/aHRuPAWmjEVsL44xCYw=
Subject key identifier:   72:0D:BE:BE:A3:25:D5:30:8A:6F:B5:09:6E:B2:E0:C9:08:AE:A9:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8DD5FFC8A7DF9685DF31B9E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2df2f7d7-a185-3fe2-a194-c51e14f9eb71.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     6167
IP address blocks:        2600:1015:a031::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:ff:c8:a7:df:96:85:df:31:b9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=bf6e4d14-747e-4f7f-97d5-60e2ffe4a4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:63:71:6e:34:4d:8f:5a:12:99:05:7c:37:
                    b4:73:11:98:bb:a4:bf:22:d1:db:09:72:67:4a:b6:
                    d8:b7:6d:41:a6:62:04:f1:90:4e:02:0f:87:3c:69:
                    1b:cd:5b:c0:1f:ee:df:d9:1f:d9:d1:5b:60:29:9a:
                    b0:e3:b7:03:93:ac:2a:31:ca:f6:c4:a9:52:da:13:
                    a2:fd:a7:6b:ae:15:6e:58:b6:9a:43:c1:19:bd:d2:
                    17:42:23:62:97:84:18:76:9e:cf:33:3e:20:e6:2b:
                    c7:4a:e0:94:0c:4d:04:4d:ab:fa:d6:04:ad:96:15:
                    28:f9:38:d9:03:41:d2:d0:ad:1c:fa:e0:96:fa:0f:
                    52:4f:19:5d:cf:8a:0a:ea:95:da:d8:64:0e:e1:cb:
                    ec:52:41:55:7c:47:68:98:53:a5:47:92:e8:a9:95:
                    cf:4e:eb:f6:f2:e2:8b:82:b7:23:a4:da:1e:4e:33:
                    c5:74:fa:3f:27:f7:a9:24:84:8d:d3:b4:11:3c:14:
                    85:4d:65:9b:33:5c:0c:03:4a:e4:e4:3e:ff:57:23:
                    bb:a2:5b:cc:69:b0:f9:48:af:3a:08:f7:9d:97:2f:
                    23:d0:f5:1c:eb:37:54:9e:48:58:05:96:e2:74:61:
                    41:ed:16:af:b0:92:da:62:20:5d:35:5a:44:75:53:
                    1b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0D:BE:BE:A3:25:D5:30:8A:6F:B5:09:6E:B2:E0:C9:08:AE:A9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2df2f7d7-a185-3fe2-a194-c51e14f9eb71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a031::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e4:77:f2:92:e4:a7:a4:df:3b:79:24:4b:2d:84:a8:e7:6c:
         b0:e1:09:6f:0d:58:a6:15:0b:f9:68:91:d3:c9:5e:d5:99:61:
         3b:d1:5f:56:fd:9b:ac:50:00:b9:9a:85:02:5e:d9:f6:30:db:
         4d:ad:39:a4:05:9f:ec:61:bb:60:4e:cd:98:52:69:50:ff:2c:
         05:35:43:fe:a2:c8:15:56:73:1b:c6:a4:64:52:34:59:63:0b:
         09:9c:f7:75:a5:3d:89:2e:fb:f7:03:06:29:45:69:61:3b:cc:
         5e:73:bc:c4:65:37:1b:4c:0e:c2:c9:ce:35:9d:7b:89:0d:5a:
         05:00:3a:37:c2:f6:06:91:86:1b:84:19:19:cc:c5:cf:3d:22:
         52:62:a2:60:85:d5:e4:0c:da:e4:45:5c:40:82:b4:fa:aa:c2:
         d0:9f:ab:70:55:e6:1b:2d:7b:13:d5:15:f1:d0:1d:d4:46:1c:
         3a:f9:bc:60:ef:dd:a2:4a:68:40:51:b4:15:07:d0:11:c1:a0:
         28:a2:63:e9:3e:31:8a:d9:90:61:7b:94:97:44:6a:18:0f:95:
         47:a0:34:ba:ae:93:09:fe:63:42:dc:02:a0:5d:e6:91:b6:64:
         d6:3d:11:c0:57:71:e7:39:aa:79:03:71:c4:f9:a3:a4:0c:26:
         30:25:08:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqN1f/Ip9+Whd8xueAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk
YmY2ZTRkMTQtNzQ3ZS00ZjdmLTk3ZDUtNjBlMmZmZTRhNGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY5jcW40TY9aEpkFfDe0cxGYu6S/ItHbCXJn
SrbYt21BpmIE8ZBOAg+HPGkbzVvAH+7f2R/Z0VtgKZqw47cDk6wqMcr2xKlS2hOi
/adrrhVuWLaaQ8EZvdIXQiNil4QYdp7PMz4g5ivHSuCUDE0ETav61gStlhUo+TjZ
A0HS0K0c+uCW+g9STxldz4oK6pXa2GQO4cvsUkFVfEdomFOlR5LoqZXPTuv28uKL
grcjpNoeTjPFdPo/J/epJISN07QRPBSFTWWbM1wMA0rk5D7/VyO7olvMabD5SK86
CPedly8j0PUc6zdUnkhYBZbidGFB7RavsJLaYiBdNVpEdVMb6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHINvr6jJdUwim+1CW6y4MkIrqnCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmRmMmY3ZDctYTE4NS0z
ZmUyLWExOTQtYzUxZTE0ZjllYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQFaAx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAXkd/KS5Kek3zt5JEsthKjnbLDhCW8NWKYVC/lokdPJXtWZYTvR
X1b9m6xQALmahQJe2fYw202tOaQFn+xhu2BOzZhSaVD/LAU1Q/6iyBVWcxvGpGRS
NFljCwmc93WlPYku+/cDBilFaWE7zF5zvMRlNxtMDsLJzjWde4kNWgUAOjfC9gaR
hhuEGRnMxc89IlJiomCF1eQM2uRFXECCtPqqwtCfq3BV5hstexPVFfHQHdRGHDr5
vGDv3aJKaEBRtBUH0BHBoCiiY+k+MYrZkGF7lJdEahgPlUegNLqukwn+Y0LcAqBd
5pG2ZNY9EcBXcec5qnkDccT5o6QMJjAlCAo=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:35 2025 by rpki-client