Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a5f9d3c-9d19-3f39-96b3-61cb131528bc.roa
File:                     5a5f9d3c-9d19-3f39-96b3-61cb131528bc.roa (raw, json)
Hash identifier:          I04TorFA7mqaYlavTwJzF/Z+KTZEWV1srS7zlLA1hjE=
Subject key identifier:   C4:34:AB:3A:8D:8A:1D:31:CA:B6:81:FF:E2:09:0A:B7:6B:68:B4:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295581CC31EAB87FE72C7A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a5f9d3c-9d19-3f39-96b3-61cb131528bc.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1013:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:81:cc:31:ea:b8:7f:e7:2c:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=2da6a066-933c-4bc8-9288-1a1c739ed71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:39:84:5c:82:11:dc:ee:a5:68:d2:8f:cb:d8:
                    a3:39:fa:9d:df:9a:6b:94:1e:da:bb:4a:a2:ac:df:
                    fe:5d:5d:84:64:7f:54:55:04:92:85:d7:dc:e8:04:
                    6c:b9:b6:bd:ff:ce:f2:20:c5:b2:1a:56:de:76:8d:
                    0a:e5:b0:e5:8b:25:a8:1c:b9:1f:67:67:3b:d5:ae:
                    24:c9:9f:22:b2:3c:77:48:a4:aa:f6:a6:d1:49:c9:
                    75:24:10:ed:89:5a:5b:0c:75:d1:47:7e:ba:3a:0c:
                    da:9d:d9:28:ee:c4:d9:61:96:cf:d4:a9:1e:d6:7b:
                    df:a6:e8:01:f4:29:09:e4:ec:ab:a3:fa:70:8b:3b:
                    39:bd:bc:72:55:b8:24:c5:a2:f1:00:c4:0b:a0:a3:
                    dd:d0:e0:3e:f9:fe:d7:58:0d:78:c5:2d:43:21:46:
                    f3:54:1c:0b:a2:85:95:4a:24:e9:77:18:98:3b:ea:
                    84:8b:e0:56:19:ce:1a:53:4c:fa:f8:c4:90:77:ce:
                    37:d1:e2:da:a8:d2:28:0e:58:1e:c1:11:a1:31:c2:
                    0b:f6:da:db:12:2a:62:22:2c:0d:d4:da:b8:95:8e:
                    3b:46:3f:7f:82:02:22:a6:58:10:14:e7:ce:1b:99:
                    d0:89:44:5c:51:53:57:8c:57:a4:ff:1b:f9:0e:e6:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:34:AB:3A:8D:8A:1D:31:CA:B6:81:FF:E2:09:0A:B7:6B:68:B4:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a5f9d3c-9d19-3f39-96b3-61cb131528bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1013:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:24:73:92:8a:82:ec:f2:59:0a:3e:99:93:94:41:60:cf:
         19:11:7c:03:89:7e:9a:b9:25:15:1e:20:69:fd:de:b3:7d:15:
         38:30:62:de:a4:74:1c:d1:46:b8:46:e7:9e:ba:d8:03:98:f4:
         03:ee:c3:80:8d:92:df:ba:fd:34:49:c6:f8:32:07:44:96:41:
         4f:34:88:47:8d:dd:c5:58:61:da:68:26:f4:6d:49:fd:83:29:
         1b:36:dc:ab:66:15:c7:e8:9c:37:5f:da:97:a5:96:b2:6d:61:
         da:3a:85:bf:34:1f:0a:96:47:6d:b5:74:e8:ed:ce:61:f4:86:
         ea:f6:6a:d7:eb:fb:b6:e1:e5:bc:79:30:19:9b:a4:b0:7d:41:
         90:09:36:fd:23:55:1b:d6:39:93:4f:47:83:a8:9c:3e:0f:c5:
         ba:3d:4b:50:09:5f:6f:21:62:18:48:44:32:79:8b:e4:41:2d:
         9d:8c:1a:a9:49:82:a0:5a:7c:c5:55:a0:2b:42:98:f1:47:eb:
         ae:1b:cc:a5:28:3e:44:b2:5e:ca:e4:df:b1:28:1a:66:5c:4c:
         bb:6e:62:e0:00:dd:55:38:15:16:ce:3c:d0:a7:e1:60:7c:ef:
         0e:bf:30:55:d9:62:c4:a5:9d:41:32:35:ec:74:d0:e3:b1:93:
         51:3e:b5:ba
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEopVYHMMeq4f+csekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
MmRhNmEwNjYtOTMzYy00YmM4LTkyODgtMWExYzczOWVkNzFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zmEXIIR3O6laNKPy9ijOfqd35prlB7au0qi
rN/+XV2EZH9UVQSShdfc6ARsuba9/87yIMWyGlbedo0K5bDliyWoHLkfZ2c71a4k
yZ8isjx3SKSq9qbRScl1JBDtiVpbDHXRR366Ogzandko7sTZYZbP1Kke1nvfpugB
9CkJ5Oyro/pwizs5vbxyVbgkxaLxAMQLoKPd0OA++f7XWA14xS1DIUbzVBwLooWV
SiTpdxiYO+qEi+BWGc4aU0z6+MSQd8430eLaqNIoDlgewRGhMcIL9trbEipiIiwN
1Nq4lY47Rj9/ggIiplgQFOfOG5nQiURcUVNXjFek/xv5Duaa8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMQ0qzqNih0xyraB/+IJCrdraLTpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWE1ZjlkM2MtOWQxOS0z
ZjM5LTk2YjMtNjFjYjEzMTUyOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQE6AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAu7JHOSioLs8lkKPpmTlEFgzxkRfAOJfpq5JRUeIGn93rN9FTgw
Yt6kdBzRRrhG55662AOY9APuw4CNkt+6/TRJxvgyB0SWQU80iEeN3cVYYdpoJvRt
Sf2DKRs23KtmFcfonDdf2pellrJtYdo6hb80HwqWR221dOjtzmH0hur2atfr+7bh
5bx5MBmbpLB9QZAJNv0jVRvWOZNPR4OonD4Pxbo9S1AJX28hYhhIRDJ5i+RBLZ2M
GqlJgqBafMVVoCtCmPFH664bzKUoPkSyXsrk37EoGmZcTLtuYuAA3VU4FRbOPNCn
4WB87w6/MFXZYsSlnUEyNex00OOxk1E+tbo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:39:59 2025 by rpki-client