Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce69b68b-246f-3e33-903a-844c45324491.roa
File:                     ce69b68b-246f-3e33-903a-844c45324491.roa (raw, json)
Hash identifier:          NcSQvqyLZh70bkB0o8KaNQpqRKzt0eRD6w8LiS2o8xs=
Subject key identifier:   C2:C8:C9:73:0D:CC:79:50:A4:F0:80:B4:F9:9A:96:43:96:4E:37:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295586EA7D920F3FFC589A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce69b68b-246f-3e33-903a-844c45324491.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        2600:1016:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:86:ea:7d:92:0f:3f:fc:58:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=6a8c3d6b-7a27-4003-9a30-bdb32214eba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:bd:c7:c7:ac:2b:de:34:a8:9b:6b:bf:a7:
                    44:cb:9d:4c:16:87:ba:f1:26:9e:ef:d6:86:f1:a9:
                    23:f2:98:77:14:9f:80:c4:25:54:30:55:14:d1:07:
                    4e:11:2d:26:6a:f3:ab:e8:af:84:d6:1c:f2:48:f1:
                    c6:56:76:03:48:cb:2f:d1:f7:01:6a:f4:eb:e3:c0:
                    5d:9c:47:b4:c5:5a:47:29:3e:66:1a:02:6b:34:63:
                    21:6e:83:de:f4:39:cd:8e:ac:ee:2b:16:34:a9:d8:
                    75:be:09:1d:de:9c:a8:3e:66:ef:c8:95:56:9f:aa:
                    47:52:0e:22:6f:a8:8a:e2:f1:9a:ff:15:14:03:32:
                    b1:dc:19:28:90:67:3c:01:18:4e:6d:04:58:1f:38:
                    e8:a1:c0:c5:d6:6a:d9:05:4e:ad:e4:ff:5b:7b:b3:
                    10:9e:a2:82:a7:bb:52:19:a7:e5:c6:a2:7d:02:47:
                    cf:b7:10:0b:c5:8e:67:e8:2e:db:6a:46:d4:61:71:
                    9d:d1:c9:d2:9b:ca:3b:56:2e:26:45:51:72:d9:b0:
                    72:d3:8b:b8:ef:36:43:01:f1:bc:3f:fc:ae:4c:75:
                    4c:5d:80:0e:d3:cd:75:ad:1a:21:de:90:cf:7f:e8:
                    d2:42:bd:8c:ea:0f:92:73:97:6c:70:12:a4:81:04:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C8:C9:73:0D:CC:79:50:A4:F0:80:B4:F9:9A:96:43:96:4E:37:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce69b68b-246f-3e33-903a-844c45324491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c6:e1:a7:11:9e:cc:08:d0:6e:41:c9:94:80:4a:83:d0:05:
         71:2b:9b:04:2f:df:d5:84:9f:06:fd:c5:8b:b5:69:73:19:40:
         d2:fe:2f:46:2b:a9:d9:49:09:0a:af:28:01:23:d8:eb:bc:79:
         79:93:2c:46:4f:e2:79:f9:5a:30:17:65:d6:67:71:18:4d:2c:
         48:5e:6f:d0:ed:91:82:58:e6:91:da:5e:b0:f1:45:a2:fb:ff:
         8d:05:0e:2c:f0:ee:0d:c1:a9:d6:b3:48:5f:4d:6a:46:c2:4f:
         fa:db:50:42:30:52:a6:5f:16:e9:54:b4:83:30:44:11:c5:6e:
         9a:b0:ed:c3:a4:e8:b0:6d:f0:f0:84:06:8f:f3:de:76:e9:7a:
         ad:70:72:cc:bc:2e:19:da:2e:af:dd:28:88:79:a1:99:a0:73:
         b3:35:55:2f:34:c2:ac:79:7d:48:88:ee:c2:1e:bb:34:0f:bf:
         52:60:5a:ff:ee:4f:77:88:5c:3e:74:8f:06:a7:e7:65:36:4c:
         7c:10:78:7a:27:d0:6f:f2:da:25:a3:e9:78:f5:2f:eb:0e:99:
         20:40:fa:d0:4b:1f:f2:35:84:d2:fe:76:48:9a:26:13:3e:e4:
         1b:7d:67:88:ac:2a:4f:67:fd:46:67:74:ff:22:53:c5:b8:b4:
         d9:b1:8c:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEopVYbqfZIPP/xYmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
NmE4YzNkNmItN2EyNy00MDAzLTlhMzAtYmRiMzIyMTRlYmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnG9x8esK940qJtrv6dEy51MFoe68Sae79aG
8akj8ph3FJ+AxCVUMFUU0QdOES0mavOr6K+E1hzySPHGVnYDSMsv0fcBavTr48Bd
nEe0xVpHKT5mGgJrNGMhboPe9DnNjqzuKxY0qdh1vgkd3pyoPmbvyJVWn6pHUg4i
b6iK4vGa/xUUAzKx3BkokGc8ARhObQRYHzjoocDF1mrZBU6t5P9be7MQnqKCp7tS
GaflxqJ9AkfPtxALxY5n6C7bakbUYXGd0cnSm8o7Vi4mRVFy2bBy04u47zZDAfG8
P/yuTHVMXYAO0811rRoh3pDPf+jSQr2M6g+Sc5dscBKkgQR7mwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMLIyXMNzHlQpPCAtPmalkOWTjenMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2U2OWI2OGItMjQ2Zi0z
ZTMzLTkwM2EtODQ0YzQ1MzI0NDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFvAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA3G4acRnswI0G5ByZSASoPQBXErmwQv39WEnwb9xYu1aXMZQNL+
L0YrqdlJCQqvKAEj2Ou8eXmTLEZP4nn5WjAXZdZncRhNLEheb9DtkYJY5pHaXrDx
RaL7/40FDizw7g3BqdazSF9NakbCT/rbUEIwUqZfFulUtIMwRBHFbpqw7cOk6LBt
8PCEBo/z3nbpeq1wcsy8LhnaLq/dKIh5oZmgc7M1VS80wqx5fUiI7sIeuzQPv1Jg
Wv/uT3eIXD50jwan52U2THwQeHon0G/y2iWj6Xj1L+sOmSBA+tBLH/I1hNL+dkia
JhM+5Bt9Z4isKk9n/UZndP8iU8W4tNmxjO0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 22:10:13 2025 by rpki-client