Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a8289eb-8566-31ec-9cdf-c5756b077070.roa
File:                     1a8289eb-8566-31ec-9cdf-c5756b077070.roa (raw, json)
Hash identifier:          ZHRYxYdDqFNjQWl8clIzXkUpM+9U9+/DTYK4trysQ/w=
Subject key identifier:   9B:8E:C3:6B:19:EF:C5:54:1D:9E:5A:49:5B:19:80:A4:64:92:A3:39
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371DE448907493A07DF870
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a8289eb-8566-31ec-9cdf-c5756b077070.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1000:b150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1d:e4:48:90:74:93:a0:7d:f8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=916cdd10-4061-4b16-8120-77fd90c44f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:df:ff:34:4f:aa:6d:5f:56:0a:d2:e9:9e:
                    e7:2e:b3:68:ba:88:a8:42:c3:a6:7b:da:76:bd:ea:
                    fe:de:77:d0:f0:d0:e6:8f:1a:3b:25:dd:9d:43:be:
                    72:63:a7:0a:b2:cd:ab:dc:1b:9e:8e:d4:bb:e3:02:
                    32:00:15:f0:9c:5f:c8:ae:5c:24:bb:d8:c3:9e:88:
                    83:43:6e:e4:21:9c:2d:e8:c1:ab:a7:45:01:bb:00:
                    98:bb:91:7d:b2:64:f8:37:50:5e:c9:a7:bb:da:d3:
                    7a:b3:68:e1:97:51:f8:ad:12:c4:3d:56:6b:b6:f3:
                    6e:85:39:7a:2a:08:94:4c:51:1d:04:4c:2a:0a:e4:
                    4d:5d:d9:bb:ee:35:93:bf:f1:2d:0c:23:aa:09:05:
                    2e:a8:38:5e:a5:cb:21:1f:89:46:18:90:b3:84:09:
                    44:aa:c7:03:70:c3:69:a7:00:49:a7:61:b4:0f:93:
                    52:60:f7:53:a7:fb:8c:0e:cf:32:e4:6d:3f:6f:73:
                    89:32:54:bd:95:2c:3e:5d:52:f2:83:04:eb:7f:63:
                    25:a7:cb:f6:ab:ed:8d:68:a6:44:7f:1a:37:56:66:
                    7f:ae:7a:16:4d:cf:92:c8:28:7f:15:1d:9a:81:4e:
                    14:74:1d:5a:20:ba:d8:46:64:ca:c1:85:42:af:a2:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8E:C3:6B:19:EF:C5:54:1D:9E:5A:49:5B:19:80:A4:64:92:A3:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a8289eb-8566-31ec-9cdf-c5756b077070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:40:bf:e5:f6:e6:66:df:96:95:b5:87:d0:08:9b:b5:e6:4a:
         d2:36:87:86:5b:e0:77:ca:3d:3e:7e:4a:34:e7:4b:47:b1:c9:
         14:1b:b9:19:30:2c:23:cf:31:6a:95:b8:50:17:95:40:e4:bc:
         06:4c:c3:21:7c:05:30:08:fc:33:84:fc:a3:c8:94:1d:58:9a:
         b0:77:09:9e:08:04:8a:c0:24:c5:5b:b3:0c:7b:8d:14:2f:f1:
         9e:02:6a:6b:35:f7:3d:5b:17:00:41:8c:f0:82:ba:db:70:48:
         ee:41:63:d9:d7:a9:13:39:02:11:12:64:92:2f:be:b2:a8:86:
         c2:fa:27:cc:3c:7b:39:20:dc:f5:68:f6:d4:07:51:e4:dc:d4:
         b2:8a:f1:d7:5c:c6:7a:22:46:75:de:fb:9e:bc:d1:92:8f:e7:
         b9:ed:50:c7:dc:45:d4:f0:3c:5d:89:16:dd:b9:9a:55:ee:cd:
         df:c6:fb:01:9a:8c:f0:83:18:fc:b2:b3:80:86:d1:cb:52:c7:
         99:23:89:db:06:da:78:14:eb:66:4b:d7:0a:a8:79:f9:fc:10:
         4f:39:6b:b2:dd:f0:f2:c7:e3:2c:54:be:ea:d6:92:e3:55:a5:
         bd:ad:13:53:e6:91:7b:76:da:3f:1e:37:f8:fd:0f:88:4b:9b:
         21:7f:10:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNx3kSJB0k6B9+HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
OTE2Y2RkMTAtNDA2MS00YjE2LTgxMjAtNzdmZDkwYzQ0ZjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaXf/zRPqm1fVgrS6Z7nLrNouoioQsOme9p2
ver+3nfQ8NDmjxo7Jd2dQ75yY6cKss2r3BuejtS74wIyABXwnF/Irlwku9jDnoiD
Q27kIZwt6MGrp0UBuwCYu5F9smT4N1Beyae72tN6s2jhl1H4rRLEPVZrtvNuhTl6
KgiUTFEdBEwqCuRNXdm77jWTv/EtDCOqCQUuqDhepcshH4lGGJCzhAlEqscDcMNp
pwBJp2G0D5NSYPdTp/uMDs8y5G0/b3OJMlS9lSw+XVLygwTrf2Mlp8v2q+2NaKZE
fxo3VmZ/rnoWTc+SyCh/FR2agU4UdB1aILrYRmTKwYVCr6JOmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJuOw2sZ78VUHZ5aSVsZgKRkkqM5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWE4Mjg5ZWItODU2Ni0z
MWVjLTljZGYtYzU3NTZiMDc3MDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQALFQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA1Av+X25mbflpW1h9AIm7XmStI2h4Zb4HfKPT5+SjTnS0exyRQb
uRkwLCPPMWqVuFAXlUDkvAZMwyF8BTAI/DOE/KPIlB1YmrB3CZ4IBIrAJMVbswx7
jRQv8Z4Cams19z1bFwBBjPCCuttwSO5BY9nXqRM5AhESZJIvvrKohsL6J8w8ezkg
3PVo9tQHUeTc1LKK8ddcxnoiRnXe+5680ZKP57ntUMfcRdTwPF2JFt25mlXuzd/G
+wGajPCDGPyys4CG0ctSx5kjidsG2ngU62ZL1wqoefn8EE85a7Ld8PLH4yxUvurW
kuNVpb2tE1PmkXt22j8eN/j9D4hLmyF/ELw=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:50 2025 by rpki-client