Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a712a800-e2b0-38c6-9fee-eceb41a37670.roa
File:                     a712a800-e2b0-38c6-9fee-eceb41a37670.roa (raw, json)
Hash identifier:          KJzPmeFtnFVk5xEuT4+EsG/00ED70MIIW8ugp5hrDKo=
Subject key identifier:   8F:FE:B8:BF:26:69:02:60:89:BF:F5:44:E0:15:EB:B1:AF:69:03:F1
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AAC0C194B2330D8E4F980
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a712a800-e2b0-38c6-9fee-eceb41a37670.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        2600:6c08:a1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ac:0c:19:4b:23:30:d8:e4:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=885e05ad-9768-4690-9dfc-3a070cbc41ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:a6:e9:a7:63:34:62:d0:d2:5f:c7:d4:69:
                    89:56:8a:eb:b1:cc:a4:bb:b7:9a:4e:84:d3:b6:7a:
                    42:51:29:a0:ec:98:43:26:18:b7:fb:d2:9a:f1:f3:
                    e5:e1:01:e0:d9:2f:43:f8:29:51:6d:98:aa:42:da:
                    66:dc:59:24:49:ad:08:88:c6:d8:87:8d:8c:1a:c7:
                    a7:65:f7:f9:af:4f:72:19:35:7a:39:9c:b5:0c:97:
                    3e:52:10:73:ff:e5:92:2e:f2:a8:31:1c:76:18:ed:
                    81:1a:64:e1:8d:18:9a:20:14:22:53:da:92:bb:c8:
                    cb:fc:82:ed:4a:33:0a:b2:3f:f3:a6:ae:72:44:86:
                    fe:9c:1c:96:35:90:04:94:b8:07:41:ab:1a:83:13:
                    2c:23:97:5c:b1:c7:6f:bb:50:63:94:29:bc:c8:5c:
                    ab:da:74:d0:5f:61:0e:e4:04:d4:2b:8b:23:2a:68:
                    1a:9b:39:0a:a6:22:2a:e5:e8:1f:16:6d:96:47:2d:
                    7a:17:dd:f3:06:a5:4d:24:cf:4c:c4:63:ad:f7:6f:
                    12:ab:d2:6c:da:39:49:09:0d:75:0c:06:cb:4f:05:
                    35:d3:c8:71:6b:3c:b2:ee:4d:5e:84:c1:43:b8:3b:
                    38:be:b2:f7:4c:69:28:bd:4c:33:8c:0e:a1:8c:8c:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FE:B8:BF:26:69:02:60:89:BF:F5:44:E0:15:EB:B1:AF:69:03:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a712a800-e2b0-38c6-9fee-eceb41a37670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c08:a1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:30:5d:b6:80:0f:ee:06:49:e8:07:6c:df:8f:67:00:39:b5:
         94:ea:f7:c0:a9:17:26:8b:e7:13:19:a5:86:d3:a8:f9:64:23:
         af:6a:f6:e9:3a:08:2d:23:ce:4c:3a:43:91:a1:18:8a:3e:fb:
         c9:83:f3:18:ef:3d:45:6f:2c:30:92:21:54:bf:98:8d:5d:db:
         1c:d5:14:9c:57:4d:18:7d:e3:2d:96:90:3f:28:61:a3:7c:14:
         de:6d:41:e6:e2:a9:0a:c7:5c:61:48:11:89:05:5e:7d:89:cc:
         a9:5f:9a:c5:08:e8:54:4a:31:3d:fa:4a:52:cb:d2:9c:65:8d:
         68:2d:ed:49:25:6e:67:ef:0b:52:a4:af:55:9e:7a:73:c3:ab:
         24:eb:fe:22:c2:d1:26:3a:c0:bf:2e:1f:12:7b:41:69:87:31:
         cb:fe:cb:ae:5d:2d:d0:93:43:4b:27:cb:53:fd:3d:4f:8d:63:
         df:98:83:e4:95:79:0c:5f:34:df:0c:ce:1d:3c:f8:26:d1:87:
         bc:8e:92:d5:a7:86:69:c3:bf:c6:e0:ed:86:d3:e7:dd:be:29:
         3f:b9:50:b7:d0:b9:f9:07:8a:38:ff:cf:0f:4d:7f:e6:95:f5:
         81:0f:0e:b8:61:d4:ec:fa:31:3e:65:f0:ce:00:55:35:c2:81:
         a6:e0:64:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnCCqwMGUsjMNjk+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ODg1ZTA1YWQtOTc2OC00NjkwLTlkZmMtM2EwNzBjYmM0MWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8Cm6adjNGLQ0l/H1GmJVorrscyku7eaToTT
tnpCUSmg7JhDJhi3+9Ka8fPl4QHg2S9D+ClRbZiqQtpm3FkkSa0IiMbYh42MGsen
Zff5r09yGTV6OZy1DJc+UhBz/+WSLvKoMRx2GO2BGmThjRiaIBQiU9qSu8jL/ILt
SjMKsj/zpq5yRIb+nByWNZAElLgHQasagxMsI5dcscdvu1BjlCm8yFyr2nTQX2EO
5ATUK4sjKmgamzkKpiIq5egfFm2WRy16F93zBqVNJM9MxGOt928Sq9Js2jlJCQ11
DAbLTwU108hxazyy7k1ehMFDuDs4vrL3TGkovUwzjA6hjIwe4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI/+uL8maQJgib/1ROAV67GvaQPxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTcxMmE4MDAtZTJiMC0z
OGM2LTlmZWUtZWNlYjQxYTM3NjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgBsCAoe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGgwXbaAD+4GSegHbN+PZwA5tZTq98CpFyaL5xMZpYbTqPlkI69q
9uk6CC0jzkw6Q5GhGIo++8mD8xjvPUVvLDCSIVS/mI1d2xzVFJxXTRh94y2WkD8o
YaN8FN5tQebiqQrHXGFIEYkFXn2JzKlfmsUI6FRKMT36SlLL0pxljWgt7Uklbmfv
C1Kkr1WeenPDqyTr/iLC0SY6wL8uHxJ7QWmHMcv+y65dLdCTQ0sny1P9PU+NY9+Y
g+SVeQxfNN8Mzh08+CbRh7yOktWnhmnDv8bg7YbT592+KT+5ULfQufkHijj/zw9N
f+aV9YEPDrhh1Oz6MT5l8M4AVTXCgabgZAM=
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:34 2025 by rpki-client