Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e4d4798-6926-33ae-b3cd-ce7ef01f042e.roa
File:                     0e4d4798-6926-33ae-b3cd-ce7ef01f042e.roa (raw, json)
Hash identifier:          5J8E6zWVOU6bDWrz0rT5Y+4OOoCkE/1qz5YgezMbhsU=
Subject key identifier:   57:55:2E:F1:63:62:B7:9B:1E:2E:1B:FF:0F:89:22:C4:7D:59:E2:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A118B3B9AEA418B567C2F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e4d4798-6926-33ae-b3cd-ce7ef01f042e.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1017:b040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:8b:3b:9a:ea:41:8b:56:7c:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=4cdb6d71-61a0-4a67-8b30-dae1896ea09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:3e:45:72:dc:cc:ed:80:58:79:81:3f:a9:
                    ae:21:46:f7:9d:62:95:90:a9:14:d0:e6:96:c1:33:
                    f7:df:46:fd:f8:f3:0e:4f:ad:3e:7b:19:6e:0e:04:
                    76:81:f2:f2:68:2c:0c:d9:1c:87:73:66:b1:f6:76:
                    4f:37:66:82:87:96:d9:a1:46:7d:4e:48:06:08:20:
                    68:e3:c7:ac:7d:a9:aa:37:26:fc:17:13:42:f4:70:
                    2f:03:75:93:c2:8e:31:4f:16:72:d8:6e:66:1c:6a:
                    cc:92:7b:7c:ae:f2:f4:21:0f:3f:7a:0f:ef:ce:96:
                    f8:0d:c7:86:ba:ad:63:ac:54:75:f6:c5:2a:84:e7:
                    c0:72:26:ca:5b:62:47:4b:b4:9e:05:2a:95:e4:c6:
                    0c:1b:1d:1f:0c:c2:f2:36:47:da:60:45:f7:cb:ca:
                    d9:7b:af:15:4e:93:49:f0:63:2a:28:4a:62:6a:d4:
                    d4:69:40:d6:5d:8d:e9:94:14:5b:23:48:ff:aa:8a:
                    6d:35:84:f1:1a:cb:0d:f8:37:ca:05:ed:29:d1:04:
                    cc:80:a1:7d:e5:1b:ad:ec:60:5b:f9:8e:e6:21:0e:
                    86:47:d9:ee:b6:4d:e2:26:eb:45:9b:67:c9:8a:7f:
                    7b:0b:66:04:d4:13:89:23:23:aa:51:3c:8e:cd:e5:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:55:2E:F1:63:62:B7:9B:1E:2E:1B:FF:0F:89:22:C4:7D:59:E2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0e4d4798-6926-33ae-b3cd-ce7ef01f042e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:43:68:f6:3b:09:77:c6:57:b9:e0:9c:43:f7:e6:9c:bd:eb:
         dc:45:07:2c:27:3e:6c:2a:65:57:e0:ad:ff:6d:b7:55:4b:39:
         68:a9:71:01:67:9e:33:28:5d:c0:ce:42:f7:f7:e1:c7:b8:40:
         70:43:89:92:59:a9:98:34:57:14:3b:f6:60:9e:69:cc:86:7e:
         87:0a:fb:41:41:f1:32:42:82:91:5d:33:c0:4f:08:1e:ca:22:
         94:ad:0c:39:2a:17:fc:5e:84:8b:6f:b6:b8:3e:5e:e3:df:3d:
         6b:05:c8:fe:57:81:a0:21:35:ca:b5:ee:93:29:40:e7:a8:c1:
         ea:3e:24:51:0c:8f:97:8f:8a:2b:54:f6:e0:8a:45:1e:1a:93:
         38:d2:fb:45:ef:55:3d:bc:6b:73:06:af:a5:e4:4f:4a:d2:5f:
         bf:b8:16:00:2f:eb:6b:af:88:fc:82:5c:14:91:eb:fa:3b:f5:
         1e:0b:15:07:0c:66:8e:71:9b:9d:30:c3:55:fe:c8:01:76:f6:
         3f:32:07:71:67:49:bc:8e:a7:1b:d6:2a:08:47:7f:c7:82:64:
         af:e3:40:a6:11:5f:35:56:b4:88:33:30:bf:1a:90:0c:dc:3b:
         99:21:77:12:f0:f1:ec:47:e5:dd:95:6e:67:ba:93:d4:fc:f2:
         36:10:cf:41
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEYs7mupBi1Z8L4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
NGNkYjZkNzEtNjFhMC00YTY3LThiMzAtZGFlMTg5NmVhMDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/g+RXLczO2AWHmBP6muIUb3nWKVkKkU0OaW
wTP330b9+PMOT60+exluDgR2gfLyaCwM2RyHc2ax9nZPN2aCh5bZoUZ9TkgGCCBo
48esfamqNyb8FxNC9HAvA3WTwo4xTxZy2G5mHGrMknt8rvL0IQ8/eg/vzpb4DceG
uq1jrFR19sUqhOfAcibKW2JHS7SeBSqV5MYMGx0fDMLyNkfaYEX3y8rZe68VTpNJ
8GMqKEpiatTUaUDWXY3plBRbI0j/qoptNYTxGssN+DfKBe0p0QTMgKF95Rut7GBb
+Y7mIQ6GR9nutk3iJutFm2fJin97C2YE1BOJIyOqUTyOzeV6DwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFdVLvFjYrebHi4b/w+JIsR9WeKFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGU0ZDQ3OTgtNjkyNi0z
M2FlLWIzY2QtY2U3ZWYwMWYwNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQF7BA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADtDaPY7CXfGV7ngnEP35py969xFBywnPmwqZVfgrf9tt1VLOWip
cQFnnjMoXcDOQvf34ce4QHBDiZJZqZg0VxQ79mCeacyGfocK+0FB8TJCgpFdM8BP
CB7KIpStDDkqF/xehItvtrg+XuPfPWsFyP5XgaAhNcq17pMpQOeoweo+JFEMj5eP
iitU9uCKRR4akzjS+0XvVT28a3MGr6XkT0rSX7+4FgAv62uviPyCXBSR6/o79R4L
FQcMZo5xm50ww1X+yAF29j8yB3FnSbyOpxvWKghHf8eCZK/jQKYRXzVWtIgzML8a
kAzcO5khdxLw8exH5d2Vbme6k9T88jYQz0E=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:36 2025 by rpki-client