Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4956507b-e74a-3e0e-bebd-5b779e55e147.roa
File:                     4956507b-e74a-3e0e-bebd-5b779e55e147.roa (raw, json)
Hash identifier:          yhs+4FypGsE4FXJq7GpCDZGrzFW0AkeExzeIgmlNsKY=
Subject key identifier:   46:95:C5:72:6B:3C:4D:33:5D:20:3B:7B:9F:A4:9F:D4:35:0C:49:33
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF395F577289AB2EB2080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4956507b-e74a-3e0e-bebd-5b779e55e147.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        2001:4888:8045::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f3:95:f5:77:28:9a:b2:eb:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=10738d9a-b880-44e0-a796-60243fcd4329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:b6:71:d0:43:b4:5d:85:49:90:a3:dd:b4:
                    64:e7:3b:52:84:13:fe:3d:7a:2f:2b:d5:86:69:90:
                    a0:af:d8:ad:bc:93:50:19:55:89:92:c5:fb:85:63:
                    0c:c3:53:f6:4e:37:73:8e:5e:bd:e1:f9:25:1e:84:
                    f0:c8:00:80:c6:50:4b:17:bb:40:f6:ca:c2:4c:59:
                    6c:a6:f8:35:20:21:5e:78:bd:96:32:11:a8:33:a3:
                    2c:f6:90:4b:55:e5:5a:ff:38:9e:79:06:9a:2a:50:
                    ce:f4:99:9b:60:fe:93:12:fb:9c:ba:54:e5:b1:df:
                    e2:e6:ee:b5:54:d1:9c:f2:4e:a1:c1:86:08:8f:fe:
                    92:86:62:fc:42:be:0b:8b:78:5f:a1:d0:21:c4:45:
                    96:33:d6:b0:eb:bc:ec:b5:cf:c1:fb:6d:04:00:d5:
                    9a:52:65:fa:4a:1d:60:bf:78:34:81:2f:83:53:8a:
                    ea:26:f9:80:01:47:ce:3d:6b:29:be:5f:f8:8d:d6:
                    a9:97:5a:6c:df:ee:af:48:fd:11:c0:08:92:c2:fd:
                    76:1a:19:79:fe:3f:97:93:bc:76:ac:bc:5f:70:d9:
                    43:0a:58:01:71:cb:13:d5:a6:c5:21:5d:48:a7:cf:
                    cd:6a:ce:5c:f2:49:ba:f9:d4:d7:28:94:dc:4d:df:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:95:C5:72:6B:3C:4D:33:5D:20:3B:7B:9F:A4:9F:D4:35:0C:49:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4956507b-e74a-3e0e-bebd-5b779e55e147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8045::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:45:48:57:ed:17:76:e2:b1:dc:d6:50:45:6a:81:3a:65:
         59:db:2e:ff:65:13:65:4d:68:df:e2:76:87:d8:c4:a0:77:3c:
         a5:ac:72:d5:d7:2d:4c:6a:c1:28:05:de:a5:76:e5:71:a1:51:
         68:5d:c9:56:92:be:d8:e6:1c:7e:0a:34:a4:ac:03:d5:3c:bb:
         b4:32:59:30:0f:67:6d:1b:dd:15:98:ab:97:91:7f:e8:84:1a:
         fd:0f:ae:2d:4e:7a:c6:94:47:4e:ee:4f:74:fb:13:e4:6d:53:
         5d:ed:70:22:cd:76:74:40:f1:2d:7f:7f:de:1b:96:74:0b:2d:
         15:e3:56:a3:03:da:ca:2f:3d:14:01:71:a5:74:13:e7:54:d2:
         c1:a4:5e:cd:85:59:42:c1:ee:5e:1f:ae:cf:fb:fe:fd:a4:59:
         78:64:b7:a3:d3:c3:ca:4a:a0:3a:8a:38:d1:ec:85:a7:c2:31:
         5c:71:4f:48:ae:aa:a9:a8:a7:ef:54:1a:57:d6:8d:2e:19:9c:
         dd:55:23:91:c1:c7:fc:2f:d2:d0:77:89:1b:a7:53:5a:86:a4:
         5d:94:b6:df:cd:66:35:72:64:62:7d:8b:07:44:70:78:73:69:
         b1:05:e2:5c:26:87:50:aa:2a:1c:73:a0:66:78:cd:7f:0a:87:
         50:ae:07:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoA2vOV9XcomrLrIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MTA3MzhkOWEtYjg4MC00NGUwLWE3OTYtNjAyNDNmY2Q0MzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEy2cdBDtF2FSZCj3bRk5ztShBP+PXovK9WG
aZCgr9itvJNQGVWJksX7hWMMw1P2Tjdzjl694fklHoTwyACAxlBLF7tA9srCTFls
pvg1ICFeeL2WMhGoM6Ms9pBLVeVa/zieeQaaKlDO9JmbYP6TEvuculTlsd/i5u61
VNGc8k6hwYYIj/6ShmL8Qr4Li3hfodAhxEWWM9aw67zstc/B+20EANWaUmX6Sh1g
v3g0gS+DU4rqJvmAAUfOPWspvl/4jdapl1ps3+6vSP0RwAiSwv12Ghl5/j+Xk7x2
rLxfcNlDClgBccsT1abFIV1Ip8/Nas5c8km6+dTXKJTcTd9CdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEaVxXJrPE0zXSA7e5+kn9Q1DEkzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDk1NjUwN2ItZTc0YS0z
ZTBlLWJlYmQtNWI3NzllNTVlMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGO4RUhX7Rd24rHc1lBFaoE6ZVnbLv9lE2VNaN/idofYxKB3PKWs
ctXXLUxqwSgF3qV25XGhUWhdyVaSvtjmHH4KNKSsA9U8u7QyWTAPZ20b3RWYq5eR
f+iEGv0Pri1OesaUR07uT3T7E+RtU13tcCLNdnRA8S1/f94blnQLLRXjVqMD2sov
PRQBcaV0E+dU0sGkXs2FWULB7l4frs/7/v2kWXhkt6PTw8pKoDqKONHshafCMVxx
T0iuqqmop+9UGlfWjS4ZnN1VI5HBx/wv0tB3iRunU1qGpF2Utt/NZjVyZGJ9iwdE
cHhzabEF4lwmh1CqKhxzoGZ4zX8Kh1CuB68=
-----END CERTIFICATE-----
Generated at Tue Jun 17 06:24:30 2025 by rpki-client