Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa
File:                     5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa (raw, json)
Hash identifier:          JuV/qYw72ZBVl7l/Q7FnAF9oKUPQU7wSpsVW7KwEexM=
Subject key identifier:   8E:C9:C7:50:2B:22:46:47:BB:CB:6D:1F:0D:C4:41:EF:6E:FD:06:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C8EDC9A0ABC9A113E8F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:1009:a110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:8e:dc:9a:0a:bc:9a:11:3e:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=3d9593de-3a2c-48ca-98b2-dc75c0baf126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:fe:13:04:5a:e1:64:57:df:92:fc:a1:8f:
                    da:0b:0e:a5:e3:93:b9:c9:54:ac:53:1a:85:c4:33:
                    3a:9a:6e:70:34:5d:27:8e:b9:ab:41:6e:41:e1:d7:
                    59:91:69:6f:41:9a:1a:7a:05:d0:89:25:56:e7:75:
                    77:3e:5f:11:ed:19:7e:0b:76:49:74:25:a0:99:04:
                    9d:5b:93:b2:38:24:9e:00:5f:1f:db:09:b7:66:40:
                    da:75:e3:d8:08:49:d3:1a:7b:7f:d1:9f:21:15:4e:
                    7c:cb:da:d9:2f:4d:6d:54:b0:ea:4e:52:cc:95:ae:
                    00:b3:51:39:b6:c9:52:c8:dd:37:28:3f:62:c7:5a:
                    0a:95:d6:0d:8b:16:ac:93:5f:d1:f3:7c:28:a5:1b:
                    e6:a9:02:de:91:dc:b9:33:ee:b2:b1:c9:ee:61:8d:
                    f3:d7:be:4c:2d:43:a5:e0:b4:d5:30:34:24:3d:c1:
                    d0:92:b6:24:02:60:b2:7a:b7:70:42:b1:2e:e4:2c:
                    d0:ab:7a:d6:e6:f3:72:65:72:55:8f:7b:f0:dd:c4:
                    b6:0d:09:85:43:20:cf:dd:10:6f:53:40:fa:2b:5d:
                    c0:e3:c7:08:1d:d1:5f:c5:56:1a:7c:56:b2:29:f2:
                    9d:36:bc:b9:c9:a4:66:c1:e0:08:3e:69:0b:19:de:
                    b3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C9:C7:50:2B:22:46:47:BB:CB:6D:1F:0D:C4:41:EF:6E:FD:06:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c230577-6c2e-328f-aa47-bd3c9c46a36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d8:3f:96:ce:9e:4d:3b:1f:ae:cc:7c:4b:a7:1c:db:49:87:
         70:b4:b4:38:4d:4c:82:71:71:4e:32:40:2b:74:57:51:b3:e8:
         d1:fb:f7:e4:41:c3:c3:e6:d7:2b:6b:e7:51:82:ae:c4:36:3a:
         f1:30:60:06:1d:bd:1a:39:2e:eb:18:ef:61:72:cd:15:af:43:
         01:a6:7d:22:80:a2:4f:00:72:b0:1a:6b:37:47:aa:88:bd:29:
         a9:32:40:cc:06:ea:7d:60:df:c3:21:af:34:44:77:c4:6a:c4:
         25:ef:9c:65:da:d6:e4:b8:e8:b4:12:87:66:b0:49:1b:05:f2:
         4e:5a:05:40:0e:fc:b8:4e:bb:cd:3d:a5:98:7e:02:56:8d:d3:
         a2:03:93:cc:75:93:11:37:f3:b9:99:50:3c:d7:3a:97:7a:3b:
         56:3f:8c:bf:03:b1:8f:c2:4b:b1:85:aa:45:1b:0f:0a:c8:4a:
         45:46:0b:10:15:6a:7c:6d:fc:8f:41:c5:2e:89:7f:b7:f4:ac:
         25:d9:f5:2a:bc:30:c0:c6:fa:80:15:9d:24:0e:ea:1b:46:c4:
         71:4f:38:48:66:33:a3:be:ee:0a:16:72:14:9a:b3:41:c7:6c:
         c7:c7:c2:22:c1:b8:d6:af:ba:e4:52:32:74:94:5a:53:fa:87:
         05:ac:d5:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtDTI7cmgq8mhE+jwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
M2Q5NTkzZGUtM2EyYy00OGNhLTk4YjItZGM3NWMwYmFmMTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdf+EwRa4WRX35L8oY/aCw6l45O5yVSsUxqF
xDM6mm5wNF0njrmrQW5B4ddZkWlvQZoaegXQiSVW53V3Pl8R7Rl+C3ZJdCWgmQSd
W5OyOCSeAF8f2wm3ZkDadePYCEnTGnt/0Z8hFU58y9rZL01tVLDqTlLMla4As1E5
tslSyN03KD9ix1oKldYNixask1/R83wopRvmqQLekdy5M+6yscnuYY3z175MLUOl
4LTVMDQkPcHQkrYkAmCyerdwQrEu5CzQq3rW5vNyZXJVj3vw3cS2DQmFQyDP3RBv
U0D6K13A48cIHdFfxVYafFayKfKdNry5yaRmweAIPmkLGd6z+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI7Jx1ArIkZHu8ttHw3EQe9u/QbeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWMyMzA1NzctNmMyZS0z
MjhmLWFhNDctYmQzYzljNDZhMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCaEQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHnYP5bOnk07H67MfEunHNtJh3C0tDhNTIJxcU4yQCt0V1Gz6NH7
9+RBw8Pm1ytr51GCrsQ2OvEwYAYdvRo5LusY72FyzRWvQwGmfSKAok8AcrAaazdH
qoi9KakyQMwG6n1g38MhrzREd8RqxCXvnGXa1uS46LQSh2awSRsF8k5aBUAO/LhO
u809pZh+AlaN06IDk8x1kxE387mZUDzXOpd6O1Y/jL8DsY/CS7GFqkUbDwrISkVG
CxAVanxt/I9BxS6Jf7f0rCXZ9Sq8MMDG+oAVnSQO6htGxHFPOEhmM6O+7goWchSa
s0HHbMfHwiLBuNavuuRSMnSUWlP6hwWs1fg=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:32 2025 by rpki-client