Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48e2b765-0e05-37b1-893a-2ef7ea3c2090.roa
File:                     48e2b765-0e05-37b1-893a-2ef7ea3c2090.roa (raw, json)
Hash identifier:          5GMIJmy+AvpqfWbOCrlxSCuwH3fQ1s2eLkdWvA+LNy0=
Subject key identifier:   06:03:5D:E1:AD:7A:A6:79:31:29:86:75:3E:40:3D:06:EA:7B:56:17
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A11833D2914AC2CC9944D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48e2b765-0e05-37b1-893a-2ef7ea3c2090.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1012:b150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:83:3d:29:14:ac:2c:c9:94:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=380694a7-ba70-4e7c-a223-48313276730f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5f:cc:c7:82:e8:bf:28:13:b0:68:a6:ec:62:
                    38:fa:21:71:f9:d6:b0:33:be:37:43:4a:de:b9:be:
                    e7:91:9f:c2:8b:ea:ae:0a:fd:ec:87:e7:91:16:51:
                    65:b4:5f:e7:db:05:16:ee:32:03:a5:92:5c:ff:b6:
                    32:f8:8d:6a:eb:e0:84:7f:ac:5b:43:8d:b6:3f:ad:
                    cd:ce:86:b6:fd:d2:52:ff:c9:87:fb:05:06:9e:63:
                    b8:d3:2b:7d:1e:9d:83:70:94:12:35:fc:42:dc:03:
                    c2:ae:e2:b5:78:d6:8b:c6:e5:3c:42:5f:2e:c3:1d:
                    f8:ac:a4:45:26:6d:e1:56:38:12:e2:ee:50:f3:3a:
                    4e:53:5d:05:0c:a8:ca:54:0a:15:e3:cf:2b:22:0d:
                    cc:9f:2c:c2:1d:52:15:34:a2:49:02:a2:ee:e5:70:
                    21:0b:6c:b2:36:a3:63:a2:6c:3d:3e:3c:51:00:62:
                    cc:61:ca:e4:55:b5:21:9b:a9:a2:d9:91:5d:1b:89:
                    39:dd:c2:10:de:65:d1:f1:cf:53:47:b6:21:29:ea:
                    54:77:ca:69:30:7c:a8:3f:59:81:a0:d2:35:2b:de:
                    0d:ec:ef:2c:8e:44:dc:37:12:15:48:be:ca:7a:60:
                    b8:e9:15:ca:54:bb:e9:76:7a:a0:a4:32:18:59:74:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:03:5D:E1:AD:7A:A6:79:31:29:86:75:3E:40:3D:06:EA:7B:56:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48e2b765-0e05-37b1-893a-2ef7ea3c2090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:51:b0:43:24:11:af:30:0f:8f:68:0f:ba:62:5e:c9:fc:
         b5:17:a3:72:ff:2c:ac:de:8b:50:d1:d1:36:61:c7:6c:6e:16:
         f9:39:1e:e0:65:be:6f:06:d3:1d:54:44:93:da:10:37:70:9d:
         53:d8:30:07:53:5d:00:4f:52:30:8a:85:c1:f0:39:60:57:50:
         cf:f1:71:bd:9e:e7:dc:10:46:21:1a:e3:6a:bd:4c:da:f7:6b:
         06:4e:73:18:2c:7f:d2:e3:72:97:66:fc:c4:d7:7e:67:bc:63:
         06:90:40:29:9d:2a:a4:e0:f0:1c:4e:5d:01:4c:c5:c9:2f:31:
         8d:d0:33:43:ac:d0:88:e9:4d:b7:ee:d2:84:20:71:af:33:02:
         f0:f1:43:33:15:1b:63:a2:8e:ab:f8:4a:15:5f:2f:e9:90:2c:
         73:46:e2:7b:97:44:04:37:ce:97:b5:31:cf:76:3e:bf:1e:52:
         ff:34:af:0f:2c:0b:d7:75:d1:47:51:e7:6f:c7:8d:3f:e7:b1:
         81:cd:03:fe:30:93:2b:db:21:71:8b:8c:6c:32:ce:96:0a:d8:
         b3:6a:b8:d9:57:40:f1:12:f6:a5:fc:46:68:0f:4a:41:3e:5b:
         0a:3c:1e:5e:ae:13:d6:bb:00:66:e6:cc:a7:71:30:b5:55:fb:
         f0:6e:43:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEYM9KRSsLMmUTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
MzgwNjk0YTctYmE3MC00ZTdjLWEyMjMtNDgzMTMyNzY3MzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV/Mx4LovygTsGim7GI4+iFx+dawM743Q0re
ub7nkZ/Ci+quCv3sh+eRFlFltF/n2wUW7jIDpZJc/7Yy+I1q6+CEf6xbQ422P63N
zoa2/dJS/8mH+wUGnmO40yt9Hp2DcJQSNfxC3APCruK1eNaLxuU8Ql8uwx34rKRF
Jm3hVjgS4u5Q8zpOU10FDKjKVAoV488rIg3MnyzCHVIVNKJJAqLu5XAhC2yyNqNj
omw9PjxRAGLMYcrkVbUhm6mi2ZFdG4k53cIQ3mXR8c9TR7YhKepUd8ppMHyoP1mB
oNI1K94N7O8sjkTcNxIVSL7KemC46RXKVLvpdnqgpDIYWXSHMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAYDXeGteqZ5MSmGdT5APQbqe1YXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDhlMmI3NjUtMGUwNS0z
N2IxLTg5M2EtMmVmN2VhM2MyMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQErFQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFf/UbBDJBGvMA+PaA+6Yl7J/LUXo3L/LKzei1DR0TZhx2xuFvk5
HuBlvm8G0x1URJPaEDdwnVPYMAdTXQBPUjCKhcHwOWBXUM/xcb2e59wQRiEa42q9
TNr3awZOcxgsf9Ljcpdm/MTXfme8YwaQQCmdKqTg8BxOXQFMxckvMY3QM0Os0Ijp
Tbfu0oQgca8zAvDxQzMVG2Oijqv4ShVfL+mQLHNG4nuXRAQ3zpe1Mc92Pr8eUv80
rw8sC9d10UdR52/HjT/nsYHNA/4wkyvbIXGLjGwyzpYK2LNquNlXQPES9qX8RmgP
SkE+Wwo8Hl6uE9a7AGbmzKdxMLVV+/BuQ3k=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:32 2025 by rpki-client