Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e411088-4d9d-3346-abc1-dc9002dc1032.roa
File:                     4e411088-4d9d-3346-abc1-dc9002dc1032.roa (raw, json)
Hash identifier:          VXoK3jghw2M5AgKvR1G7U+YQpB17wXz3Zi1VnroXMx0=
Subject key identifier:   22:B9:05:84:E6:7D:FB:DD:62:94:A3:B9:E2:35:92:8C:BC:DF:1B:F9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24858E5CC47DB4F984B680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e411088-4d9d-3346-abc1-dc9002dc1032.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     6167
IP address blocks:        2600:1003:b050::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:85:8e:5c:c4:7d:b4:f9:84:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=87e5ba52-f5aa-47ea-8435-f5f8f0182e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:80:8b:ef:cb:4c:b5:55:5b:ed:13:c9:cd:
                    00:f4:2f:79:f9:1a:e5:35:71:5f:5b:6a:71:c9:93:
                    b6:f8:14:73:e7:ac:0f:77:b6:6a:d2:60:43:0e:85:
                    25:85:a9:8e:70:42:5d:67:4f:bc:ea:22:a5:81:12:
                    10:61:9f:92:db:2f:13:c9:45:ac:30:9d:b3:60:ee:
                    24:f0:6f:da:58:fc:cc:22:99:8d:d6:46:20:58:41:
                    5c:90:27:05:f6:45:58:57:24:e0:c0:38:f6:58:24:
                    59:9f:81:fd:20:24:3e:3c:61:30:a7:a5:6c:ad:ea:
                    f0:27:b8:c9:71:3b:8e:18:00:58:bd:7b:43:c5:e5:
                    1e:e2:4f:66:a3:85:b0:90:c4:58:ba:a2:9e:ee:ae:
                    84:af:9d:91:81:22:5e:c9:92:c3:09:2e:dd:19:f4:
                    88:d5:4d:70:df:ba:cc:21:cb:69:e9:a6:75:d6:2b:
                    9d:4e:7e:82:13:53:e1:78:f8:6c:da:0c:da:7c:1d:
                    ea:3c:fa:da:0f:57:8a:08:35:25:0a:d0:e0:80:b3:
                    5f:ee:2b:ad:38:64:49:aa:8f:62:e7:cf:55:77:4f:
                    5a:e6:f4:cd:35:ed:8f:ac:b5:96:23:9c:4e:41:4c:
                    21:82:59:72:ab:f9:b2:f8:d6:de:24:b3:c9:22:f4:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B9:05:84:E6:7D:FB:DD:62:94:A3:B9:E2:35:92:8C:BC:DF:1B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e411088-4d9d-3346-abc1-dc9002dc1032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b050::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:65:26:9a:23:40:ca:56:e5:df:c9:c4:65:37:86:ce:58:
         d2:45:b6:ff:08:b3:a7:84:88:d2:e8:64:d0:36:64:58:32:51:
         92:60:57:2d:67:39:cc:1e:fd:81:cf:f3:41:d3:f3:77:6c:0f:
         ff:06:a0:3d:93:16:d6:f7:ce:64:95:a2:c0:37:84:8e:0b:0d:
         50:f5:d5:43:27:53:91:bd:2c:76:70:be:b3:5a:52:af:33:9f:
         71:27:28:18:75:37:f6:d9:86:e4:b2:6c:df:b2:53:3b:3f:6c:
         fc:2d:62:0d:15:4d:bf:11:95:2b:70:2a:2b:91:50:7e:b8:d0:
         f6:a5:9f:7e:b9:15:37:06:0d:70:a4:96:7a:01:16:8c:14:7f:
         9e:5d:0e:5d:cc:3e:bd:5f:0f:ea:16:4f:08:17:18:0c:08:bf:
         4d:a9:62:f2:21:cc:d6:3d:a6:2d:f6:f7:82:ce:e5:ff:c3:12:
         1f:9f:fd:6b:2e:a9:66:de:b7:d3:e4:e9:37:7b:3e:ae:07:80:
         6e:b8:0f:0a:4d:e4:42:9e:6e:46:87:0d:70:c9:07:92:b5:87:
         12:37:7f:08:d7:cb:c1:ec:3f:c2:fe:07:2e:6f:58:b2:e0:35:
         c6:31:3d:b9:8a:40:4e:62:13:e3:8d:d9:41:7f:e6:29:3e:6d:
         af:b9:c8:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElcJIWOXMR9tPmEtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
ODdlNWJhNTItZjVhYS00N2VhLTg0MzUtZjVmOGYwMTgyZTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr2Ai+/LTLVVW+0Tyc0A9C95+RrlNXFfW2px
yZO2+BRz56wPd7Zq0mBDDoUlhamOcEJdZ0+86iKlgRIQYZ+S2y8TyUWsMJ2zYO4k
8G/aWPzMIpmN1kYgWEFckCcF9kVYVyTgwDj2WCRZn4H9ICQ+PGEwp6VsrerwJ7jJ
cTuOGABYvXtDxeUe4k9mo4WwkMRYuqKe7q6Er52RgSJeyZLDCS7dGfSI1U1w37rM
Ictp6aZ11iudTn6CE1PhePhs2gzafB3qPPraD1eKCDUlCtDggLNf7iutOGRJqo9i
589Vd09a5vTNNe2PrLWWI5xOQUwhgllyq/my+NbeJLPJIvS3mQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCK5BYTmffvdYpSjueI1koy83xv5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGU0MTEwODgtNGQ5ZC0z
MzQ2LWFiYzEtZGM5MDAyZGMxMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQA7BQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADe8ZSaaI0DKVuXfycRlN4bOWNJFtv8Is6eEiNLoZNA2ZFgyUZJg
Vy1nOcwe/YHP80HT83dsD/8GoD2TFtb3zmSVosA3hI4LDVD11UMnU5G9LHZwvrNa
Uq8zn3EnKBh1N/bZhuSybN+yUzs/bPwtYg0VTb8RlStwKiuRUH640Paln365FTcG
DXCklnoBFowUf55dDl3MPr1fD+oWTwgXGAwIv02pYvIhzNY9pi3294LO5f/DEh+f
/WsuqWbet9Pk6Td7Pq4HgG64DwpN5EKebkaHDXDJB5K1hxI3fwjXy8HsP8L+By5v
WLLgNcYxPbmKQE5iE+ON2UF/5ik+ba+5yFA=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:11:46 2025 by rpki-client