Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47b68830-5acf-32bc-9f93-e61972900008.roa
File:                     47b68830-5acf-32bc-9f93-e61972900008.roa (raw, json)
Hash identifier:          AdYSpvj2/l7Em1pmQEzkZXKlgv+CXqH5Wm7eZ9e03tY=
Subject key identifier:   63:7B:37:6E:C2:3F:55:6A:1B:D3:1B:94:26:89:FB:4B:90:71:AF:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B636744A00D21189E3BA3AC40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47b68830-5acf-32bc-9f93-e61972900008.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1011:a18e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:44:a0:0d:21:18:9e:3b:a3:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=519d3e0d-042f-463e-a75c-1d9063e0ce81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:b7:e1:fd:54:33:e6:a4:db:e4:3b:8b:f2:
                    ad:83:2f:76:46:ea:c4:4b:32:bd:ad:c8:e8:f2:78:
                    29:81:0d:65:c8:45:a2:a7:7d:77:aa:40:87:d1:f9:
                    db:5b:74:2c:b5:0a:8c:32:d5:1b:6a:87:65:f3:69:
                    47:db:e8:62:26:63:f2:19:4a:58:a7:e4:30:f9:9a:
                    8d:57:aa:6b:76:a9:94:d9:77:e1:db:05:8d:1b:03:
                    74:9f:96:04:d6:d7:40:c2:a9:08:c9:b6:0b:7c:cf:
                    65:f6:fa:07:5a:57:6c:2e:57:bd:2e:66:6b:80:90:
                    f0:31:7d:08:d4:15:15:e7:dd:96:cb:63:27:b6:97:
                    a8:17:34:39:14:5b:44:d5:b1:01:12:63:dc:d7:d6:
                    44:be:a5:1d:07:a9:41:dd:81:9d:9a:c0:8a:fa:2f:
                    c9:65:b4:ab:29:d3:fb:1e:52:1c:1a:32:d2:74:ae:
                    f5:6b:20:1e:fa:82:e6:6e:38:fd:63:b5:4d:4c:92:
                    ef:00:24:cc:be:db:47:4e:3c:ee:76:ba:bd:76:20:
                    33:a6:ff:5f:8e:10:1c:c3:a3:80:d6:1f:64:b1:c0:
                    34:c4:80:62:b1:b2:41:1d:9c:b6:bc:07:8c:d2:c3:
                    51:d8:06:71:26:96:8e:4c:01:ab:11:c2:b2:ae:d8:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7B:37:6E:C2:3F:55:6A:1B:D3:1B:94:26:89:FB:4B:90:71:AF:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47b68830-5acf-32bc-9f93-e61972900008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a18e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:4d:b9:36:18:5f:e3:27:fe:2e:74:1b:b2:9d:58:5b:57:
         ff:40:f3:b8:c0:22:53:12:8b:5f:5e:91:9d:2b:9a:37:51:8a:
         42:ef:65:0d:dd:f9:8f:55:28:7e:01:77:8b:bd:2b:12:57:64:
         65:42:ff:47:da:ff:d8:2f:79:4b:ba:63:5e:82:83:44:65:bc:
         fe:13:14:b0:98:7a:c5:60:3f:48:cc:7b:94:63:40:06:6a:c1:
         e5:1b:b3:8e:9a:7f:51:bb:05:85:5f:61:70:c7:d2:a9:d6:3f:
         4b:10:e2:a0:8b:e8:af:80:8b:ad:e7:2a:1a:05:fd:a2:5c:e8:
         06:eb:4a:5a:90:76:1c:12:b2:93:f1:37:46:96:da:b1:ca:db:
         16:58:28:c5:64:21:b0:a5:1b:06:9d:3f:87:6c:81:68:87:51:
         3a:ef:63:99:d6:6e:f2:c1:ac:93:3a:2c:0d:e7:f0:d5:ba:49:
         53:57:10:4f:a4:17:73:13:5e:8c:5a:73:b2:3a:e3:41:05:df:
         a0:31:03:76:bf:a3:07:8f:65:91:da:5c:d1:2f:05:54:b7:e8:
         ca:ce:eb:95:1c:bc:59:ab:32:51:60:2e:43:0f:f0:ce:0c:5c:
         7a:ac:15:8c:ac:8b:a9:13:ee:60:86:99:c0:e3:26:4b:ab:12:
         12:8c:f1:f3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtjZ0SgDSEYnjujrEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk
NTE5ZDNlMGQtMDQyZi00NjNlLWE3NWMtMWQ5MDYzZTBjZTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc+34f1UM+ak2+Q7i/Ktgy92RurESzK9rcjo
8ngpgQ1lyEWip313qkCH0fnbW3QstQqMMtUbaodl82lH2+hiJmPyGUpYp+Qw+ZqN
V6prdqmU2Xfh2wWNGwN0n5YE1tdAwqkIybYLfM9l9voHWldsLle9LmZrgJDwMX0I
1BUV592Wy2MntpeoFzQ5FFtE1bEBEmPc19ZEvqUdB6lB3YGdmsCK+i/JZbSrKdP7
HlIcGjLSdK71ayAe+oLmbjj9Y7VNTJLvACTMvttHTjzudrq9diAzpv9fjhAcw6OA
1h9kscA0xIBisbJBHZy2vAeM0sNR2AZxJpaOTAGrEcKyrtijYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGN7N27CP1VqG9MblCaJ+0uQca/2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDdiNjg4MzAtNWFjZi0z
MmJjLTlmOTMtZTYxOTcyOTAwMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEaGO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABTETbk2GF/jJ/4udBuynVhbV/9A87jAIlMSi19ekZ0rmjdRikLv
ZQ3d+Y9VKH4Bd4u9KxJXZGVC/0fa/9gveUu6Y16Cg0RlvP4TFLCYesVgP0jMe5Rj
QAZqweUbs46af1G7BYVfYXDH0qnWP0sQ4qCL6K+Ai63nKhoF/aJc6AbrSlqQdhwS
spPxN0aW2rHK2xZYKMVkIbClGwadP4dsgWiHUTrvY5nWbvLBrJM6LA3n8NW6SVNX
EE+kF3MTXoxac7I640EF36AxA3a/owePZZHaXNEvBVS36MrO65UcvFmrMlFgLkMP
8M4MXHqsFYysi6kT7mCGmcDjJkurEhKM8fM=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:33 2025 by rpki-client