Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/369e72e6-5397-340f-ab24-ce450e1cf697.roa
File:                     369e72e6-5397-340f-ab24-ce450e1cf697.roa (raw, json)
Hash identifier:          agMz9kxqAOqmRoVUBqJKC+Eg/Uu6D9Vg9Pd4Eqmq9pY=
Subject key identifier:   29:D8:3D:38:31:35:AD:A0:E8:33:C0:77:B5:55:34:49:E0:3F:4D:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7B474C3872B44AB11FB660
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/369e72e6-5397-340f-ab24-ce450e1cf697.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6167
IP address blocks:        2600:1001:d040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:47:4c:38:72:b4:4a:b1:1f:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=b6c76713-0d1c-4022-8eac-d0d0b6abbc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:ed:7f:e7:96:92:b4:52:48:dc:b9:13:ed:
                    72:7c:7c:27:8d:e0:d7:37:e6:77:8a:df:56:f9:71:
                    e6:63:e1:8e:cb:17:4d:d6:80:8a:e7:4e:7c:dc:ef:
                    3d:6b:4e:d8:72:7f:d5:af:9f:21:98:35:69:20:67:
                    90:89:96:cb:1a:65:2f:5f:d8:76:4b:30:70:a3:1e:
                    ef:2b:c0:38:ff:ef:a4:37:ef:16:55:6a:a6:ec:4a:
                    07:6d:46:61:f9:a0:a9:c5:ad:67:71:42:d6:f6:18:
                    2f:f5:18:e0:17:77:1d:cf:3e:f0:6d:18:23:35:cd:
                    e5:fe:19:f5:68:63:63:b8:26:c5:c1:50:08:5f:8d:
                    c9:91:bd:6d:04:bb:b4:33:ba:32:a5:f6:58:2a:9f:
                    48:06:b2:71:ea:e7:d1:76:f7:e8:0e:63:78:ed:0b:
                    c5:36:c1:ea:b4:d2:37:c9:a7:c5:32:91:11:c5:31:
                    e6:61:a4:15:4e:d7:25:06:f8:4b:eb:81:c8:62:7d:
                    f4:79:d8:83:d4:27:3a:c1:cd:14:41:9d:45:72:a8:
                    a9:e9:9e:b9:21:4c:51:63:1e:5b:f6:c4:19:59:c9:
                    41:a5:7f:37:c8:23:85:d9:9b:07:87:64:46:97:a1:
                    a0:7c:2e:50:e2:fb:2e:c5:1e:a9:63:c9:0f:6d:0a:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D8:3D:38:31:35:AD:A0:E8:33:C0:77:B5:55:34:49:E0:3F:4D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/369e72e6-5397-340f-ab24-ce450e1cf697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:d040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c0:d4:47:69:4f:f6:8c:69:66:7a:c0:e3:b2:8f:8f:06:26:
         61:2f:68:05:c3:6a:d2:5c:34:6a:c3:bf:1c:61:9e:54:4a:54:
         4a:d3:d4:0b:cc:25:0d:4e:51:a6:7b:db:87:25:d5:df:63:68:
         c0:a2:46:d4:1f:c7:30:35:0d:16:a3:96:b3:56:3c:16:e8:9f:
         58:40:ff:d3:d1:01:d6:89:16:a6:85:a1:46:79:61:6c:17:47:
         4f:7d:36:93:23:7a:bd:49:37:19:69:a5:e8:55:94:68:1f:26:
         57:2c:c6:95:97:9f:a0:57:f3:e3:c2:53:0c:5c:b6:9e:1c:62:
         05:9f:96:e5:c4:e5:fa:c9:eb:85:c1:a6:07:8d:e8:20:1d:ea:
         9b:59:77:12:c8:50:69:f6:67:94:d8:c1:72:24:a6:73:ae:a5:
         29:9f:e7:05:98:ca:75:dc:3e:c5:a2:50:ac:75:52:76:2f:f4:
         9a:a4:dd:fb:6a:26:c0:eb:76:cd:be:91:a4:61:8f:d2:25:03:
         be:04:2e:54:09:4e:f2:91:b5:44:e3:7d:5c:06:59:af:8b:48:
         b8:87:59:4e:75:09:af:36:e4:be:1b:f6:cd:4c:73:f0:9c:ab:
         64:44:40:09:6f:81:fe:db:cf:63:26:94:b0:fb:fd:30:9a:19:
         81:f3:11:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7e0dMOHK0SrEftmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
YjZjNzY3MTMtMGQxYy00MDIyLThlYWMtZDBkMGI2YWJiYzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAjtf+eWkrRSSNy5E+1yfHwnjeDXN+Z3it9W
+XHmY+GOyxdN1oCK50583O89a07Ycn/Vr58hmDVpIGeQiZbLGmUvX9h2SzBwox7v
K8A4/++kN+8WVWqm7EoHbUZh+aCpxa1ncULW9hgv9RjgF3cdzz7wbRgjNc3l/hn1
aGNjuCbFwVAIX43Jkb1tBLu0M7oypfZYKp9IBrJx6ufRdvfoDmN47QvFNsHqtNI3
yafFMpERxTHmYaQVTtclBvhL64HIYn30ediD1Cc6wc0UQZ1Fcqip6Z65IUxRYx5b
9sQZWclBpX83yCOF2ZsHh2RGl6GgfC5Q4vsuxR6pY8kPbQq9AQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCnYPTgxNa2g6DPAd7VVNEngP01sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzY5ZTcyZTYtNTM5Ny0z
NDBmLWFiMjQtY2U0NTBlMWNmNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAdBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAvA1EdpT/aMaWZ6wOOyj48GJmEvaAXDatJcNGrDvxxhnlRKVErT
1AvMJQ1OUaZ724cl1d9jaMCiRtQfxzA1DRajlrNWPBbon1hA/9PRAdaJFqaFoUZ5
YWwXR099NpMjer1JNxlppehVlGgfJlcsxpWXn6BX8+PCUwxctp4cYgWfluXE5frJ
64XBpgeN6CAd6ptZdxLIUGn2Z5TYwXIkpnOupSmf5wWYynXcPsWiUKx1UnYv9Jqk
3ftqJsDrds2+kaRhj9IlA74ELlQJTvKRtUTjfVwGWa+LSLiHWU51Ca825L4b9s1M
c/Ccq2REQAlvgf7bz2MmlLD7/TCaGYHzETU=
-----END CERTIFICATE-----
Generated at Thu Jun 19 03:00:24 2025 by rpki-client