Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f20557bd-627f-3f4d-b0c6-ecc0bdd8393b.roa
File:                     f20557bd-627f-3f4d-b0c6-ecc0bdd8393b.roa (raw, json)
Hash identifier:          dtxHipyCMz2D4Rc26+yM84uUOI8E0CdZQisGnOMU2WQ=
Subject key identifier:   65:52:03:3A:59:09:72:32:3D:F7:A6:F3:40:8F:DB:B5:87:C1:8A:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C14EBF8A35CD396DCB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f20557bd-627f-3f4d-b0c6-ecc0bdd8393b.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100b:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c1:4e:bf:8a:35:cd:39:6d:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=a4dd9d26-c550-420b-87ef-99ac55f38d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:d5:b2:af:4c:f3:21:1c:83:10:74:e3:7f:
                    10:49:c6:ec:ec:ee:f1:d0:8a:2c:e4:8d:74:af:f8:
                    7a:59:39:90:4a:42:ad:62:50:b8:7f:16:c0:bb:d9:
                    af:41:7c:ab:5e:78:45:95:a5:bd:f4:d2:8e:b2:4c:
                    91:c4:3c:48:6a:e7:37:9b:b0:3e:14:16:ea:15:f5:
                    26:f9:32:d6:9a:c7:c0:83:05:3c:03:b9:80:1c:71:
                    a3:92:53:09:63:f9:54:a0:c5:c0:6b:57:59:da:d0:
                    c8:30:20:00:e7:4d:93:10:2c:80:ef:b0:24:12:6d:
                    d5:5c:c9:c3:f9:c2:68:a4:9c:2a:19:f6:07:bc:88:
                    e6:9a:40:1d:09:c5:eb:c4:60:d0:ad:40:be:63:10:
                    c0:73:dd:77:1e:12:82:23:95:ae:52:7a:13:28:6c:
                    05:0e:5a:aa:45:5d:9a:58:23:25:28:25:08:47:17:
                    6b:86:b0:ca:e5:db:99:c6:19:6c:5f:81:0b:6f:98:
                    98:72:bf:3d:22:0b:52:50:6a:b3:d1:bf:29:fd:cd:
                    aa:fe:66:ba:15:d1:74:06:4b:54:92:b4:3d:15:07:
                    1b:af:81:a6:60:30:7a:ef:35:84:d0:f8:c6:b7:bc:
                    95:49:f1:17:16:ca:0c:9b:63:3d:ae:a0:e9:b0:56:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:52:03:3A:59:09:72:32:3D:F7:A6:F3:40:8F:DB:B5:87:C1:8A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f20557bd-627f-3f4d-b0c6-ecc0bdd8393b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:0e:bd:10:4f:70:8c:4e:e0:7f:b2:e8:36:ee:65:06:72:
         6a:c0:8a:45:1e:39:ca:a0:6b:90:ad:80:c9:3e:db:34:e6:63:
         37:5f:af:6d:a9:c5:83:ce:aa:47:0d:ce:1b:6d:ab:0c:fa:ad:
         d5:2b:78:34:93:f6:04:c2:db:e5:e9:71:db:72:74:da:8a:56:
         e6:24:fd:6b:70:c1:20:bb:5d:93:90:fc:3a:20:e2:f2:51:3b:
         96:cd:fd:81:84:3a:2e:ce:14:55:64:2c:7f:67:09:3f:ad:fe:
         45:9a:ac:df:a1:0d:7b:87:d0:ac:1b:6a:cf:e4:f0:5c:3f:1c:
         84:93:68:38:4a:45:d5:49:8e:6b:23:ff:1e:bb:22:4f:26:ee:
         56:2a:f2:5e:92:b2:db:cf:b1:5b:af:4a:4d:8a:f5:3f:5c:d5:
         33:9b:6f:1f:bc:df:56:75:e3:24:bc:da:db:cb:6d:8d:c9:22:
         5c:4c:ad:22:29:0d:9d:d7:62:b3:be:aa:28:f5:b7:f6:fb:f2:
         61:fc:df:03:de:b0:06:84:12:d2:03:a2:96:d8:b6:c3:39:80:
         af:33:e1:ec:31:52:e5:df:b9:f1:41:fa:ca:08:54:7b:e0:2e:
         0b:09:9e:01:e6:a0:fc:6f:ff:7d:12:61:fa:74:73:79:a3:60:
         f5:0f:4b:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikMFOv4o1zTlty4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
YTRkZDlkMjYtYzU1MC00MjBiLTg3ZWYtOTlhYzU1ZjM4ZDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGjVsq9M8yEcgxB0438QScbs7O7x0Ios5I10
r/h6WTmQSkKtYlC4fxbAu9mvQXyrXnhFlaW99NKOskyRxDxIauc3m7A+FBbqFfUm
+TLWmsfAgwU8A7mAHHGjklMJY/lUoMXAa1dZ2tDIMCAA502TECyA77AkEm3VXMnD
+cJopJwqGfYHvIjmmkAdCcXrxGDQrUC+YxDAc913HhKCI5WuUnoTKGwFDlqqRV2a
WCMlKCUIRxdrhrDK5duZxhlsX4ELb5iYcr89IgtSUGqz0b8p/c2q/ma6FdF0BktU
krQ9FQcbr4GmYDB67zWE0PjGt7yVSfEXFsoMm2M9rqDpsFbNOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGVSAzpZCXIyPfem80CP27WHwYr0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjIwNTU3YmQtNjI3Zi0z
ZjRkLWIwYzYtZWNjMGJkZDgzOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQC7DQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+qDr0QT3CMTuB/sug27mUGcmrAikUeOcqga5CtgMk+2zTmYzdf
r22pxYPOqkcNzhttqwz6rdUreDST9gTC2+XpcdtydNqKVuYk/WtwwSC7XZOQ/Dog
4vJRO5bN/YGEOi7OFFVkLH9nCT+t/kWarN+hDXuH0Kwbas/k8Fw/HISTaDhKRdVJ
jmsj/x67Ik8m7lYq8l6SstvPsVuvSk2K9T9c1TObbx+831Z14yS82tvLbY3JIlxM
rSIpDZ3XYrO+qij1t/b78mH83wPesAaEEtIDopbYtsM5gK8z4ewxUuXfufFB+soI
VHvgLgsJngHmoPxv/30SYfp0c3mjYPUPS0E=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:36 2025 by rpki-client