Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/597849c8-1566-3de9-bdb4-f143ef770196.roa
File:                     597849c8-1566-3de9-bdb4-f143ef770196.roa (raw, json)
Hash identifier:          xXB2b6k5LULW2RDIt2iHIrMoACJXCrHrAWvituWX+Yg=
Subject key identifier:   47:3E:6F:F4:A4:4D:81:94:30:CE:1C:CD:53:F3:43:21:15:D2:43:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B41E7115CCD26EF25B5E76D08
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/597849c8-1566-3de9-bdb4-f143ef770196.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:a010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:11:5c:cd:26:ef:25:b5:e7:6d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=151b0d20-99d4-4d84-9636-8c02f5db0d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:48:71:bb:d8:90:9a:40:73:7d:66:3a:8e:
                    1f:52:45:2d:a6:36:cf:99:b7:ae:1d:cd:4b:f2:35:
                    0a:6e:bb:23:79:04:10:ac:d1:c1:d3:ad:57:30:10:
                    c8:ad:24:46:6b:ec:3d:db:b0:08:41:60:08:f0:06:
                    77:5f:e9:05:b7:0e:29:b8:5f:a3:82:86:0a:05:10:
                    ce:b9:13:e3:d2:6f:dc:ae:8b:e9:5f:1d:2f:b3:6c:
                    31:45:ff:fc:98:6e:b4:a2:7b:c0:60:e1:47:b2:7c:
                    3e:da:80:cc:9a:57:7d:1b:ad:53:73:e8:6f:18:4f:
                    f6:34:6c:bd:93:5c:43:0e:0f:31:44:10:96:e6:dd:
                    dc:c2:7a:db:bc:a0:e3:5b:62:f4:26:07:2d:87:d7:
                    82:87:04:f0:c6:40:59:01:5d:f5:00:9a:75:8b:14:
                    08:3a:ea:95:ec:d1:db:18:0b:fc:a2:58:11:5f:1e:
                    19:2e:e0:8d:d5:a8:1d:9d:b2:96:5b:f8:f4:60:83:
                    9e:69:ae:9c:00:49:64:ec:ec:a8:2a:48:9c:2d:fd:
                    8a:86:8c:a3:16:cb:32:25:24:4d:48:99:50:c1:20:
                    70:7d:12:5f:4c:fa:30:73:ec:44:3f:fb:be:f6:a6:
                    e7:5c:a9:e5:3f:d5:8e:c9:23:f9:53:98:a3:2d:af:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3E:6F:F4:A4:4D:81:94:30:CE:1C:CD:53:F3:43:21:15:D2:43:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/597849c8-1566-3de9-bdb4-f143ef770196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:83:f6:8c:e8:b7:f8:21:a8:f5:66:4e:33:14:db:05:47:
         79:5c:ee:22:36:91:15:4b:0a:f1:07:26:5c:76:10:24:64:b3:
         24:b9:1f:bd:e1:83:46:39:97:c2:f4:be:85:6c:ec:5f:cc:2a:
         dc:4d:b3:42:7d:b4:ea:1d:0c:45:ab:a2:bb:99:df:cc:a6:d6:
         65:97:5a:4d:42:96:0e:79:b5:05:93:c0:78:21:8b:ec:5a:43:
         8b:11:ac:98:23:7e:7d:36:ce:65:63:2c:b8:75:da:e2:f2:59:
         d4:fe:6c:ac:f4:51:f6:31:84:2c:77:fd:11:c6:1b:e8:30:d8:
         e0:1c:77:25:97:b6:91:95:23:6e:78:d0:6c:99:a3:bb:0e:b9:
         12:72:6f:38:7c:bd:c5:96:b2:34:03:a3:61:46:0e:ba:46:95:
         aa:cc:ad:14:d7:56:6f:8b:5a:cd:57:d6:90:1a:ae:be:9a:ba:
         df:e0:a1:be:24:62:d1:56:88:e5:25:8d:5e:14:2f:be:d5:b2:
         75:24:07:1b:3a:f3:b5:ae:02:4e:73:20:ed:3f:58:79:64:91:
         03:14:de:5e:19:87:ac:fd:3b:0e:d7:08:1d:b5:28:dd:7e:54:
         df:fb:34:79:09:4f:75:65:6c:fc:4b:66:a5:09:3e:ee:7d:4d:
         8a:a6:a3:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtB5xFczSbvJbXnbQgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk
MTUxYjBkMjAtOTlkNC00ZDg0LTk2MzYtOGMwMmY1ZGIwZDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXFIcbvYkJpAc31mOo4fUkUtpjbPmbeuHc1L
8jUKbrsjeQQQrNHB061XMBDIrSRGa+w927AIQWAI8AZ3X+kFtw4puF+jgoYKBRDO
uRPj0m/crovpXx0vs2wxRf/8mG60onvAYOFHsnw+2oDMmld9G61Tc+hvGE/2NGy9
k1xDDg8xRBCW5t3cwnrbvKDjW2L0Jgcth9eChwTwxkBZAV31AJp1ixQIOuqV7NHb
GAv8olgRXx4ZLuCN1agdnbKWW/j0YIOeaa6cAElk7OyoKkicLf2KhoyjFssyJSRN
SJlQwSBwfRJfTPowc+xEP/u+9qbnXKnlP9WOySP5U5ijLa8edQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEc+b/SkTYGUMM4czVPzQyEV0kOCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTk3ODQ5YzgtMTU2Ni0z
ZGU5LWJkYjQtZjE0M2VmNzcwMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQAqAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAvtg/aM6Lf4Iaj1Zk4zFNsFR3lc7iI2kRVLCvEHJlx2ECRksyS5
H73hg0Y5l8L0voVs7F/MKtxNs0J9tOodDEWroruZ38ym1mWXWk1Clg55tQWTwHgh
i+xaQ4sRrJgjfn02zmVjLLh12uLyWdT+bKz0UfYxhCx3/RHGG+gw2OAcdyWXtpGV
I2540GyZo7sOuRJybzh8vcWWsjQDo2FGDrpGlarMrRTXVm+LWs1X1pAarr6aut/g
ob4kYtFWiOUljV4UL77VsnUkBxs687WuAk5zIO0/WHlkkQMU3l4Zh6z9Ow7XCB21
KN1+VN/7NHkJT3VlbPxLZqUJPu59TYqmozo=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:28 2025 by rpki-client