Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19304950-6c28-3e14-a006-e2d8c0e05738.roa
File:                     19304950-6c28-3e14-a006-e2d8c0e05738.roa (raw, json)
Hash identifier:          6Zd9tlC7qdwNmgdfBWp5ygwUGc+8Q7l8kJS/I35fC5s=
Subject key identifier:   8C:9F:3B:36:1A:36:82:D7:8C:84:EA:FE:5D:8F:49:66:D1:E2:1B:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C97CAA174F26023B60400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19304950-6c28-3e14-a006-e2d8c0e05738.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100c:d2c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:97:ca:a1:74:f2:60:23:b6:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=57497c70-bd9e-4791-847b-92c01341d87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:39:be:f1:d1:62:58:b7:d0:73:2a:0f:11:08:
                    cf:4b:28:6e:68:77:ec:cf:48:e9:35:a2:77:f6:ab:
                    18:04:9e:0b:e3:89:21:59:2b:f5:1d:f0:49:57:76:
                    82:57:5a:8f:50:bb:c1:c5:a2:85:b4:2e:9a:6d:88:
                    5b:2e:6f:44:e3:52:9a:f9:5b:95:62:66:89:2e:fb:
                    8a:34:2d:0f:1c:55:bd:11:01:c2:70:99:3b:e6:ad:
                    60:4d:2b:04:65:a5:4d:d4:36:58:01:4f:f9:81:30:
                    54:15:93:61:35:bf:d5:e9:a6:cd:dc:34:22:c5:10:
                    a4:d8:e6:c2:96:72:78:8a:58:fe:9b:e7:02:32:60:
                    2e:4b:b0:24:93:a9:30:b7:67:61:9e:c3:07:9f:21:
                    14:b7:1a:41:6c:9b:c6:0e:4a:7b:9c:66:7a:0e:a7:
                    59:22:d1:af:2d:35:fd:44:74:19:d8:7d:a3:d1:a2:
                    87:b4:2c:8c:13:e2:51:ff:a8:0e:50:45:d3:a0:bb:
                    0a:70:2c:2a:13:a3:b1:fa:cb:5f:d9:1e:f4:54:5c:
                    ca:df:8f:e9:35:f9:0b:7f:38:2d:6c:1e:17:35:0d:
                    b4:7e:a5:d5:6d:db:b7:a7:65:e1:0c:94:dd:7f:48:
                    cd:88:00:6a:a1:82:36:81:0d:cb:85:6d:3b:34:6c:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9F:3B:36:1A:36:82:D7:8C:84:EA:FE:5D:8F:49:66:D1:E2:1B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19304950-6c28-3e14-a006-e2d8c0e05738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:d2c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c0:21:27:52:a3:dd:19:ed:1d:ba:40:df:e0:ca:67:cc:f6:
         87:ea:7c:b3:47:82:07:d0:4e:b7:22:e6:3a:c6:34:9b:b7:74:
         1a:fb:3a:3d:3a:7d:47:a9:5a:0c:07:4e:42:41:52:03:2e:24:
         af:9d:49:0c:1e:11:df:9c:d0:df:3f:78:8e:a5:27:f2:b1:ac:
         82:4b:17:33:34:82:09:0a:c1:17:ec:6a:c4:40:3c:e3:a3:30:
         43:bc:09:29:ab:b1:2e:a3:76:91:d8:b9:21:cd:fc:8e:56:86:
         7d:87:dc:8e:b0:41:d3:19:3b:4b:72:ce:e8:6b:34:a2:77:0d:
         60:41:40:26:4e:a6:ed:66:fc:a0:80:e2:5e:2a:32:df:4b:1a:
         e4:5b:a7:b8:c1:15:20:c1:e2:bf:ce:bc:cf:36:84:48:4d:a4:
         4b:2f:c8:29:b8:75:0e:eb:81:12:42:40:5f:fd:b3:a0:cf:7e:
         66:72:97:6b:c0:48:69:c0:03:da:90:cc:34:23:db:a5:2b:9b:
         88:ed:7d:e3:81:11:61:15:4f:24:8e:de:1e:60:f4:98:60:9b:
         8f:8c:2a:0f:60:21:83:37:48:af:12:0c:0d:dc:cf:84:bf:54:
         a6:f7:6c:8c:98:26:72:c8:e0:22:31:84:27:a8:13:67:43:0f:
         fb:1c:a5:db
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtDTJfKoXTyYCO2BAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
NTc0OTdjNzAtYmQ5ZS00NzkxLTg0N2ItOTJjMDEzNDFkODdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDm+8dFiWLfQcyoPEQjPSyhuaHfsz0jpNaJ3
9qsYBJ4L44khWSv1HfBJV3aCV1qPULvBxaKFtC6abYhbLm9E41Ka+VuVYmaJLvuK
NC0PHFW9EQHCcJk75q1gTSsEZaVN1DZYAU/5gTBUFZNhNb/V6abN3DQixRCk2ObC
lnJ4ilj+m+cCMmAuS7Akk6kwt2dhnsMHnyEUtxpBbJvGDkp7nGZ6DqdZItGvLTX9
RHQZ2H2j0aKHtCyME+JR/6gOUEXToLsKcCwqE6Ox+stf2R70VFzK34/pNfkLfzgt
bB4XNQ20fqXVbdu3p2XhDJTdf0jNiABqoYI2gQ3LhW07NGxkDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIyfOzYaNoLXjITq/l2PSWbR4hseMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTkzMDQ5NTAtNmMyOC0z
ZTE0LWEwMDYtZTJkOGMwZTA1NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDNLA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACrAISdSo90Z7R26QN/gymfM9ofqfLNHggfQTrci5jrGNJu3dBr7
Oj06fUepWgwHTkJBUgMuJK+dSQweEd+c0N8/eI6lJ/KxrIJLFzM0ggkKwRfsasRA
POOjMEO8CSmrsS6jdpHYuSHN/I5Whn2H3I6wQdMZO0tyzuhrNKJ3DWBBQCZOpu1m
/KCA4l4qMt9LGuRbp7jBFSDB4r/OvM82hEhNpEsvyCm4dQ7rgRJCQF/9s6DPfmZy
l2vASGnAA9qQzDQj26Urm4jtfeOBEWEVTySO3h5g9Jhgm4+MKg9gIYM3SK8SDA3c
z4S/VKb3bIyYJnLI4CIxhCeoE2dDD/scpds=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:37 2025 by rpki-client