Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3d68e1f-8422-3363-9365-f356b3ae2722.roa
File:                     b3d68e1f-8422-3363-9365-f356b3ae2722.roa (raw, json)
Hash identifier:          MvX6mGHJUkIFF0/RUvi7TXDmbt0cN3lN1vKbV5lXLSY=
Subject key identifier:   9E:74:F1:68:C1:56:8C:7A:53:E8:79:0E:9A:D4:8A:E0:79:68:01:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A2955755819EEC71798B9AA40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3d68e1f-8422-3363-9365-f356b3ae2722.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1010:b090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:75:58:19:ee:c7:17:98:b9:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=89890d52-d550-4ebe-9638-8b08e98857bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:57:46:94:15:33:0b:4e:06:df:5e:a9:da:
                    1e:d1:07:51:a7:a4:f0:12:cc:3e:1a:9f:f1:98:ad:
                    e4:e8:a1:26:14:04:31:62:5b:70:27:c5:14:4f:98:
                    c8:ff:51:43:1a:0b:e5:ce:e2:ae:70:45:77:9c:5e:
                    c8:6f:37:28:32:71:63:8c:76:37:25:51:86:b1:65:
                    d6:e2:63:b1:40:1f:9f:fc:71:cf:1b:ca:28:12:3f:
                    fe:86:74:78:24:5d:e6:4f:bb:75:48:db:a7:86:50:
                    1d:be:10:5b:af:d4:03:49:ac:43:6d:b7:4a:31:83:
                    1d:7b:ff:06:44:08:62:60:32:be:57:91:68:24:81:
                    78:10:87:45:0b:72:1c:b4:ee:9a:c1:d1:7e:67:e1:
                    f3:1a:1d:14:f5:56:8f:ce:ec:72:d6:f8:f0:80:88:
                    38:e3:86:07:03:db:0c:22:f7:2a:ed:df:7d:3d:e0:
                    82:1b:40:a8:16:c3:17:89:d5:0e:74:6b:2e:5a:84:
                    ea:0d:20:83:e0:83:50:48:7e:e4:6f:34:a5:00:6c:
                    8f:f1:a7:ba:f9:32:35:71:a1:ef:08:d3:15:4b:cd:
                    1f:91:e3:d8:9c:26:1a:21:32:66:20:9b:93:78:ab:
                    ce:a2:1f:8e:e8:7f:9a:6f:f8:94:9d:1c:19:e1:cb:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:74:F1:68:C1:56:8C:7A:53:E8:79:0E:9A:D4:8A:E0:79:68:01:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3d68e1f-8422-3363-9365-f356b3ae2722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:32:41:c2:bb:82:72:ec:9c:fd:00:87:36:fd:4b:e4:22:a7:
         2b:78:e6:5a:71:9a:0c:e6:fb:3e:19:1d:2c:f3:9a:9e:7c:59:
         ec:48:97:66:54:a3:b7:6f:80:3b:e2:b1:b0:93:81:87:8a:25:
         e3:38:22:eb:33:d8:68:c8:80:7a:85:b5:4c:7d:8d:46:c7:7d:
         8a:e7:6a:da:99:84:a5:f3:50:a8:17:7d:b0:56:f7:e7:66:fb:
         4a:cd:f8:d9:02:30:55:cf:f3:cb:0f:46:ff:c3:d2:c3:73:7e:
         e2:8b:90:61:cc:88:c5:87:f5:73:64:cd:f1:d4:13:71:69:7d:
         b7:f2:67:dc:a1:11:d4:d0:8d:43:bd:89:ae:28:ea:0e:cd:8a:
         ac:e8:0f:71:82:bc:9d:2a:2d:bf:da:65:ef:d1:4c:c3:9c:f8:
         0b:dd:cb:c1:53:be:f2:8f:5a:88:7b:5e:13:0f:a9:3a:bc:a7:
         4d:71:9a:1c:4b:7b:33:17:79:a1:5c:a4:6a:c6:bc:d3:2b:ab:
         b1:17:07:4a:a8:40:f4:fc:72:df:b5:dc:01:b1:39:a2:7e:ba:
         cb:84:75:28:51:a7:45:34:96:71:bc:10:1d:9c:b9:6b:a6:23:
         80:7e:73:cb:7c:59:95:79:9f:63:33:23:4c:03:ea:e5:09:2b:
         8c:44:98:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEopVXVYGe7HF5i5qkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
ODk4OTBkNTItZDU1MC00ZWJlLTk2MzgtOGIwOGU5ODg1N2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngpXRpQVMwtOBt9eqdoe0QdRp6TwEsw+Gp/x
mK3k6KEmFAQxYltwJ8UUT5jI/1FDGgvlzuKucEV3nF7IbzcoMnFjjHY3JVGGsWXW
4mOxQB+f/HHPG8ooEj/+hnR4JF3mT7t1SNunhlAdvhBbr9QDSaxDbbdKMYMde/8G
RAhiYDK+V5FoJIF4EIdFC3IctO6awdF+Z+HzGh0U9VaPzuxy1vjwgIg444YHA9sM
Ivcq7d99PeCCG0CoFsMXidUOdGsuWoTqDSCD4INQSH7kbzSlAGyP8ae6+TI1caHv
CNMVS80fkePYnCYaITJmIJuTeKvOoh+O6H+ab/iUnRwZ4cvTvQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ508WjBVox6U+h5DprUiuB5aAGHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjNkNjhlMWYtODQyMi0z
MzYzLTkzNjUtZjM1NmIzYWUyNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQELCQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD8yQcK7gnLsnP0Ahzb9S+Qipyt45lpxmgzm+z4ZHSzzmp58WexI
l2ZUo7dvgDvisbCTgYeKJeM4Iusz2GjIgHqFtUx9jUbHfYrnatqZhKXzUKgXfbBW
9+dm+0rN+NkCMFXP88sPRv/D0sNzfuKLkGHMiMWH9XNkzfHUE3FpfbfyZ9yhEdTQ
jUO9ia4o6g7NiqzoD3GCvJ0qLb/aZe/RTMOc+Avdy8FTvvKPWoh7XhMPqTq8p01x
mhxLezMXeaFcpGrGvNMrq7EXB0qoQPT8ct+13AGxOaJ+usuEdShRp0U0lnG8EB2c
uWumI4B+c8t8WZV5n2MzI0wD6uUJK4xEmG4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:55:21 2025 by rpki-client