Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/042865fd-4a80-30be-b455-75212c594937.roa
File:                     042865fd-4a80-30be-b455-75212c594937.roa (raw, json)
Hash identifier:          QC0eH9lngQACzbVOm/56v01CByZ1Yml4vpO1SiGnq6Y=
Subject key identifier:   A4:B3:53:A8:46:11:01:A5:89:78:EC:6F:EC:58:6C:48:B9:86:DB:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3724685D4BBD4AB3128500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/042865fd-4a80-30be-b455-75212c594937.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1003:b880::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:24:68:5d:4b:bd:4a:b3:12:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=5bad8532-277d-4a3d-81d4-8b7960be9031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ce:8b:09:9d:43:a4:d3:cb:a8:6b:32:26:93:
                    7b:69:d5:ec:4d:ca:6c:01:3a:48:53:d7:74:80:1a:
                    c4:aa:55:db:82:9c:db:8f:7c:66:a0:89:cc:1d:18:
                    32:ca:17:3f:8e:2c:ab:cd:47:39:c0:5d:4f:fe:a4:
                    e2:fb:83:63:5e:15:6a:70:70:db:57:af:e7:eb:c9:
                    47:8a:7f:d1:b4:4d:a5:17:99:e8:9b:a3:bc:8e:bf:
                    22:d6:13:68:1b:0c:69:34:42:4b:cb:cd:23:6a:db:
                    88:22:9f:26:33:3d:94:9c:6e:3b:22:b9:b4:7e:c9:
                    69:2d:13:d8:f5:6b:2a:27:a7:5b:97:33:c8:9c:57:
                    cf:61:f4:59:67:a0:43:39:f0:30:5d:c3:a7:80:73:
                    f0:c5:22:f3:b1:8e:cd:c6:18:5b:87:a9:33:1d:87:
                    06:0d:08:3b:7d:35:81:c3:f5:11:a0:bc:1d:fd:1f:
                    36:bf:ce:00:7d:44:ca:6a:4f:66:aa:ca:10:ed:60:
                    40:4f:52:59:45:93:6c:6c:69:df:f5:9e:47:9e:17:
                    2e:e1:fa:65:11:0c:d4:8c:30:f1:93:5f:f9:3d:7d:
                    81:62:7b:fa:c0:48:95:31:aa:b8:38:eb:d5:ee:7a:
                    f1:c4:23:2f:77:a2:e8:6c:32:a6:97:4a:19:19:c1:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B3:53:A8:46:11:01:A5:89:78:EC:6F:EC:58:6C:48:B9:86:DB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/042865fd-4a80-30be-b455-75212c594937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b880::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:61:a6:f0:cd:de:5c:d6:80:e6:69:a6:4c:ab:82:1c:05:2c:
         47:02:af:c4:e9:25:15:6d:c2:72:c7:af:6b:3e:23:d1:c7:73:
         a9:fc:f5:2f:11:b7:1b:7a:e6:d2:d4:ed:15:b0:dc:a9:6f:4e:
         42:f4:7f:20:3f:ae:d6:50:92:32:1f:e1:12:09:2a:ee:ce:fb:
         93:9e:d2:a5:c5:80:93:b4:e7:81:e8:5e:69:e8:41:35:f3:21:
         44:ac:2e:35:be:25:15:a2:d4:ab:d7:41:48:a4:81:0c:05:40:
         bb:85:42:34:44:09:02:2a:04:60:dc:a7:9b:6a:46:9f:f5:8a:
         f7:5c:60:74:a2:ae:be:91:1c:4c:26:0a:24:34:a9:40:63:10:
         b3:23:85:fb:cc:dc:69:e6:cf:40:40:fc:18:a1:2e:5d:5e:14:
         81:ef:3a:9e:b1:13:53:a1:61:b8:ec:90:3b:c2:03:e0:68:be:
         83:85:c7:2c:c4:31:80:b8:9f:8d:a5:7a:54:11:c9:73:eb:d5:
         83:98:f5:0c:ea:a3:90:48:3b:c9:68:57:6e:67:ca:3a:1e:46:
         f6:42:98:8e:20:f7:5f:eb:28:93:24:66:56:3c:b3:b2:82:0e:
         67:d8:bb:c7:39:8b:b7:b5:98:75:35:16:d4:da:b6:e2:df:2c:
         44:af:bc:e3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNyRoXUu9SrMShQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NWJhZDg1MzItMjc3ZC00YTNkLTgxZDQtOGI3OTYwYmU5MDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs6LCZ1DpNPLqGsyJpN7adXsTcpsATpIU9d0
gBrEqlXbgpzbj3xmoInMHRgyyhc/jiyrzUc5wF1P/qTi+4NjXhVqcHDbV6/n68lH
in/RtE2lF5nom6O8jr8i1hNoGwxpNEJLy80jatuIIp8mMz2UnG47Irm0fslpLRPY
9WsqJ6dblzPInFfPYfRZZ6BDOfAwXcOngHPwxSLzsY7Nxhhbh6kzHYcGDQg7fTWB
w/URoLwd/R82v84AfUTKak9mqsoQ7WBAT1JZRZNsbGnf9Z5Hnhcu4fplEQzUjDDx
k1/5PX2BYnv6wEiVMaq4OOvV7nrxxCMvd6LobDKml0oZGcGtlwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKSzU6hGEQGliXjsb+xYbEi5htv/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDQyODY1ZmQtNGE4MC0z
MGJlLWI0NTUtNzUyMTJjNTk0OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQA7iA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADZhpvDN3lzWgOZppkyrghwFLEcCr8TpJRVtwnLHr2s+I9HHc6n8
9S8Rtxt65tLU7RWw3KlvTkL0fyA/rtZQkjIf4RIJKu7O+5Oe0qXFgJO054HoXmno
QTXzIUSsLjW+JRWi1KvXQUikgQwFQLuFQjRECQIqBGDcp5tqRp/1ivdcYHSirr6R
HEwmCiQ0qUBjELMjhfvM3Gnmz0BA/BihLl1eFIHvOp6xE1OhYbjskDvCA+BovoOF
xyzEMYC4n42lelQRyXPr1YOY9Qzqo5BIO8loV25nyjoeRvZCmI4g91/rKJMkZlY8
s7KCDmfYu8c5i7e1mHU1FtTatuLfLESvvOM=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:03:32 2025 by rpki-client