Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be238519-138d-3729-a213-bcee4ae8bdac.roa
File:                     be238519-138d-3729-a213-bcee4ae8bdac.roa (raw, json)
Hash identifier:          hgRX4vo7wRunnAFF6lCo7ruDHT+pOXTSmE5d1wsikl8=
Subject key identifier:   5B:F5:47:C1:3A:BD:4A:76:6A:D1:9A:2C:C6:18:A2:32:F0:A5:EB:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849FEE7FCC28B3B9558D1B2D100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be238519-138d-3729-a213-bcee4ae8bdac.roa
Signing time:             Tue 27 May 2025 20:16:34 +0000
ROA not before:           Tue 27 May 2025 20:16:34 +0000
ROA not after:            Mon 25 Aug 2025 20:16:34 +0000
asID:                     6167
IP address blocks:        2600:1014:a024::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:e7:fc:c2:8b:3b:95:58:d1:b2:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 27 20:16:34 2025 GMT
            Not After : Aug 25 20:16:34 2025 GMT
        Subject: CN=093528e6-06f2-44c8-938c-f79385a8d5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:39:e0:c9:f3:f4:27:12:06:28:c0:eb:96:
                    bf:5d:c9:3d:8b:2b:1f:81:f4:e1:b7:1a:7d:62:f0:
                    25:ea:7b:1f:f6:86:5c:32:cb:36:8a:a8:88:57:55:
                    2a:0e:45:b2:5b:cc:54:da:82:df:8b:9d:9c:5f:e3:
                    a6:0a:59:d9:6d:a4:a6:fe:03:0e:5a:d9:21:66:7d:
                    cf:f8:02:a5:94:5d:1e:b6:4f:9f:14:d7:26:eb:ee:
                    12:bd:08:9d:41:bc:89:fa:1a:90:a3:cf:b0:73:15:
                    7d:ee:1f:5e:b3:84:02:25:03:51:02:12:ba:00:73:
                    67:65:e9:3d:fa:3f:3a:5a:96:56:c8:09:90:34:e4:
                    f5:28:75:a2:48:72:17:f6:4a:90:49:fb:74:8c:86:
                    15:88:a1:f2:69:31:37:54:60:4e:f6:15:60:f7:50:
                    bc:ec:0a:da:b6:aa:18:d1:5a:d0:33:02:48:02:dd:
                    84:2b:e5:fd:13:7f:c2:85:b2:fe:4f:df:00:37:e0:
                    f0:66:a4:c4:36:1d:9e:de:1c:8f:e2:be:b0:1f:ef:
                    ca:09:dc:b3:9e:20:b3:a4:ec:bd:83:f3:fe:fa:d2:
                    85:39:12:5d:12:ff:97:b0:4e:69:04:ac:c6:43:bc:
                    81:e9:a7:f0:ad:6f:d8:9d:58:75:06:10:a2:8a:10:
                    dc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:47:C1:3A:BD:4A:76:6A:D1:9A:2C:C6:18:A2:32:F0:A5:EB:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be238519-138d-3729-a213-bcee4ae8bdac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:a024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:d2:ee:41:0a:f8:fd:26:b0:e1:94:3e:ab:bd:59:37:d3:9b:
         0a:df:62:b3:ca:32:65:39:c9:7d:f0:29:ad:cf:97:54:67:95:
         10:a9:69:87:5f:01:0f:3f:2e:69:42:23:b7:84:7b:44:b8:95:
         64:e3:96:a8:a6:c3:34:a0:80:2e:58:52:68:6f:50:16:04:e6:
         dd:b6:05:f8:a5:fb:06:41:51:58:f2:11:bf:98:3b:be:0e:81:
         90:16:0b:47:b1:88:7f:17:c8:da:14:f4:4a:52:68:dc:eb:6a:
         8f:2b:e0:43:7b:f4:62:c1:f6:09:a1:00:3e:96:b6:4f:e0:88:
         c4:d9:e2:02:7c:33:b0:df:11:1a:fb:58:b7:96:aa:fb:96:ec:
         b3:66:8b:f0:77:9b:5c:7c:21:32:bc:2b:96:de:16:db:1b:2f:
         fb:b4:a2:b1:e0:43:28:b7:62:17:c8:04:b4:f7:b4:3a:8c:a4:
         3e:d9:c1:93:b0:f9:d2:c6:95:9b:93:53:95:1e:6c:99:a9:88:
         6a:11:05:bc:c6:14:5a:d8:5b:c8:69:9f:5d:55:00:9e:3a:43:
         9e:ab:12:11:02:dd:47:58:31:f2:af:d2:9c:22:45:18:c1:55:
         96:9d:6c:df:c3:45:25:b2:15:d1:d6:2c:d7:ff:43:f1:c9:eb:
         f4:78:b0:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEn+5/zCizuVWNGy0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyNzIwMTYzNFoXDTI1MDgyNTIwMTYzNFowLzEtMCsGA1UEAxMk
MDkzNTI4ZTYtMDZmMi00NGM4LTkzOGMtZjc5Mzg1YThkNWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4M54Mnz9CcSBijA65a/Xck9iysfgfThtxp9
YvAl6nsf9oZcMss2iqiIV1UqDkWyW8xU2oLfi52cX+OmClnZbaSm/gMOWtkhZn3P
+AKllF0etk+fFNcm6+4SvQidQbyJ+hqQo8+wcxV97h9es4QCJQNRAhK6AHNnZek9
+j86WpZWyAmQNOT1KHWiSHIX9kqQSft0jIYViKHyaTE3VGBO9hVg91C87AratqoY
0VrQMwJIAt2EK+X9E3/ChbL+T98AN+DwZqTENh2e3hyP4r6wH+/KCdyzniCzpOy9
g/P++tKFORJdEv+XsE5pBKzGQ7yB6afwrW/YnVh1BhCiihDc2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFv1R8E6vUp2atGaLMYYojLwpesxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmUyMzg1MTktMTM4ZC0z
NzI5LWEyMTMtYmNlZTRhZThiZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQFKAk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKnS7kEK+P0msOGUPqu9WTfTmwrfYrPKMmU5yX3wKa3Pl1RnlRCp
aYdfAQ8/LmlCI7eEe0S4lWTjlqimwzSggC5YUmhvUBYE5t22Bfil+wZBUVjyEb+Y
O74OgZAWC0exiH8XyNoU9EpSaNzrao8r4EN79GLB9gmhAD6Wtk/giMTZ4gJ8M7Df
ERr7WLeWqvuW7LNmi/B3m1x8ITK8K5beFtsbL/u0orHgQyi3YhfIBLT3tDqMpD7Z
wZOw+dLGlZuTU5UebJmpiGoRBbzGFFrYW8hpn11VAJ46Q56rEhEC3UdYMfKv0pwi
RRjBVZadbN/DRSWyFdHWLNf/Q/HJ6/R4sNM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:05:34 2025 by rpki-client