Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cca4ac6-1b38-3734-86b6-341afcf8e873.roa
File:                     9cca4ac6-1b38-3734-86b6-341afcf8e873.roa (raw, json)
Hash identifier:          Dx3ILHsTBl9WJIZfMCLRVZW6uweMbHfKwqzXE6jNMl8=
Subject key identifier:   D7:4B:85:57:EC:07:32:7E:E3:A6:22:05:1E:51:38:14:5F:AE:B1:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295577F5A03EC5290A7E0380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cca4ac6-1b38-3734-86b6-341afcf8e873.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1011:a18c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:77:f5:a0:3e:c5:29:0a:7e:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=a2bd89c7-e9c0-4d2c-9611-f0fc15bf6d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:a4:8f:08:90:cc:aa:8a:49:71:23:2b:dd:
                    8f:1b:c5:0e:4e:11:9b:a0:fc:9f:6d:c1:c6:f4:11:
                    4f:06:2d:5e:5d:30:c9:23:51:78:a9:16:f8:91:25:
                    b1:ce:23:f4:d8:8b:e8:bc:c8:2a:81:5e:69:96:a7:
                    12:1f:48:c0:6c:43:8a:8f:72:d2:18:71:28:c9:ee:
                    01:e1:66:75:a2:dc:53:13:73:28:b8:34:81:f8:39:
                    99:2a:5f:b4:79:b3:93:f7:b2:94:b4:d7:ae:e1:78:
                    d8:92:ed:34:18:27:fc:d2:32:d7:87:6e:a4:80:c0:
                    d0:00:14:70:f9:00:c7:3d:56:2e:65:bb:66:7c:07:
                    54:ae:52:46:8c:b5:15:06:09:20:11:49:b7:76:55:
                    be:fe:70:8f:50:83:71:cc:29:40:9d:55:f4:8f:a5:
                    82:f3:fd:dc:28:2a:86:36:16:cd:c9:6d:61:45:bc:
                    67:8c:8f:54:1f:4f:80:da:19:3a:7d:02:49:60:e0:
                    dd:a0:8a:50:79:35:ba:b6:75:76:6a:d2:ef:10:06:
                    26:67:7a:ee:5b:32:55:5a:12:8e:79:17:1a:14:29:
                    8f:2c:4b:77:82:e6:c2:10:d2:df:71:05:6f:3f:c6:
                    d2:b5:25:06:30:ce:07:8f:a7:e4:e1:e5:43:f6:31:
                    cf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4B:85:57:EC:07:32:7E:E3:A6:22:05:1E:51:38:14:5F:AE:B1:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9cca4ac6-1b38-3734-86b6-341afcf8e873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a18c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:da:f0:30:82:e1:87:fa:58:7e:17:3d:74:6f:33:2b:9d:9d:
         f1:03:a8:4d:2f:05:fb:1f:16:82:4a:70:23:0f:3f:e9:7a:da:
         95:02:29:27:60:93:8c:f6:6b:b1:f8:af:be:43:0d:c0:d5:61:
         11:63:b6:22:01:d2:29:52:d4:3d:48:4b:79:d9:b6:e3:d0:2c:
         2b:64:4a:7a:78:5a:6c:54:49:89:8b:ef:bf:e3:23:95:32:00:
         80:cb:fb:74:7e:6b:0a:7e:22:cc:a1:fa:26:68:73:89:ae:c2:
         cd:b6:28:c0:2c:eb:c1:90:00:7e:ed:6f:c5:99:d8:13:a8:86:
         85:e3:1f:7d:65:4a:d1:b4:17:fe:cb:f7:12:87:68:64:fd:bf:
         e2:12:2f:3e:ae:bb:65:7b:13:25:57:1f:ac:ac:c6:4b:b7:d4:
         85:03:5c:94:c1:d4:4e:9d:36:c8:09:93:56:1b:19:26:c5:31:
         fb:8d:9e:37:3a:50:cb:f1:04:8d:57:a1:00:13:b8:a9:f8:1a:
         39:81:f2:02:a7:c3:ce:16:c7:f0:00:3e:6d:3c:9b:7f:f3:fe:
         56:58:d6:28:d3:bc:2c:e1:e7:11:f5:47:dd:0c:f9:8b:3d:d2:
         dc:32:ee:51:79:c9:69:80:6d:5b:4b:aa:11:9a:83:f3:df:35:
         3f:ae:37:83
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEopVXf1oD7FKQp+A4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
YTJiZDg5YzctZTljMC00ZDJjLTk2MTEtZjBmYzE1YmY2ZDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEWkjwiQzKqKSXEjK92PG8UOThGboPyfbcHG
9BFPBi1eXTDJI1F4qRb4kSWxziP02IvovMgqgV5plqcSH0jAbEOKj3LSGHEoye4B
4WZ1otxTE3MouDSB+DmZKl+0ebOT97KUtNeu4XjYku00GCf80jLXh26kgMDQABRw
+QDHPVYuZbtmfAdUrlJGjLUVBgkgEUm3dlW+/nCPUINxzClAnVX0j6WC8/3cKCqG
NhbNyW1hRbxnjI9UH0+A2hk6fQJJYODdoIpQeTW6tnV2atLvEAYmZ3ruWzJVWhKO
eRcaFCmPLEt3gubCENLfcQVvP8bStSUGMM4Hj6fk4eVD9jHPfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNdLhVfsBzJ+46YiBR5ROBRfrrGKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWNjYTRhYzYtMWIzOC0z
NzM0LTg2YjYtMzQxYWZjZjhlODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEaGM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA7a8DCC4Yf6WH4XPXRvMyudnfEDqE0vBfsfFoJKcCMPP+l62pUC
KSdgk4z2a7H4r75DDcDVYRFjtiIB0ilS1D1IS3nZtuPQLCtkSnp4WmxUSYmL77/j
I5UyAIDL+3R+awp+Isyh+iZoc4muws22KMAs68GQAH7tb8WZ2BOohoXjH31lStG0
F/7L9xKHaGT9v+ISLz6uu2V7EyVXH6ysxku31IUDXJTB1E6dNsgJk1YbGSbFMfuN
njc6UMvxBI1XoQATuKn4GjmB8gKnw84Wx/AAPm08m3/z/lZY1ijTvCzh5xH1R90M
+Ys90twy7lF5yWmAbVtLqhGag/PfNT+uN4M=
-----END CERTIFICATE-----
Generated at Mon Jun 16 10:32:20 2025 by rpki-client