Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa
File:                     5e960e85-1abd-344d-89f3-a74eaa12b893.roa (raw, json)
Hash identifier:          uEV8gagnLkl8UAomv+6R+gX4vDHQpB2S47bIYASpMsw=
Subject key identifier:   2B:E9:9B:F0:12:E3:1B:89:77:DB:3B:D1:EA:86:FA:7C:DC:82:22:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C7831E92583DE3B243960
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:b1c0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:78:31:e9:25:83:de:3b:24:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=1bf17c8f-84ff-4e0e-9eeb-6efa860a72a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:41:e4:66:f2:35:f5:17:07:bc:24:7c:13:c7:
                    a7:a3:98:7f:2f:dc:3a:7b:56:96:87:42:21:40:46:
                    d1:f9:5c:25:b8:ab:c7:c9:b5:bf:31:93:5b:da:92:
                    1b:2f:39:70:ff:7e:16:35:dd:8e:5e:81:50:cd:7f:
                    9b:42:38:98:99:8a:6e:bb:43:79:83:4f:83:be:4f:
                    72:64:4e:32:51:27:a1:f5:a1:a9:20:aa:95:c9:d5:
                    19:c0:4c:22:b7:9b:a9:cf:03:eb:81:a5:2b:e6:27:
                    80:ff:73:af:f5:4b:f1:6b:7e:ff:c2:24:ea:43:4b:
                    a7:cc:59:65:09:44:42:19:7b:b3:ee:05:bf:4b:c6:
                    bc:08:8a:17:b0:e1:49:ab:c8:4d:dc:c7:9b:71:a0:
                    2b:5b:33:34:f2:50:89:22:5e:80:9d:22:78:60:bd:
                    59:26:56:df:72:a7:72:31:2e:1d:82:55:d2:9a:fe:
                    a4:8d:cf:8f:03:b9:0d:7f:bc:14:83:e5:22:a4:6e:
                    76:9c:7a:c2:fa:6a:e8:66:d0:0f:7d:22:d0:9c:85:
                    3a:71:80:a9:21:e1:2a:01:e0:b9:33:15:60:14:cf:
                    5e:eb:9d:5a:f9:d9:83:e9:a1:ab:34:f6:5e:77:74:
                    37:4d:81:91:9e:5e:05:03:2e:b5:fc:f6:f7:85:e4:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:9B:F0:12:E3:1B:89:77:DB:3B:D1:EA:86:FA:7C:DC:82:22:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1c0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b1:fa:a1:dd:30:79:6f:e6:7b:54:e3:c0:5c:b0:31:8b:7d:
         14:03:cb:05:a6:a4:2a:24:39:d2:db:3e:3e:aa:5e:41:de:0d:
         b2:5e:33:09:f6:c8:6c:a2:c7:45:35:8e:56:ea:6f:3d:81:ee:
         ab:e4:49:6f:5d:03:04:f0:6b:82:ec:ca:42:42:5b:d4:b9:42:
         f5:2b:da:f0:20:ef:f2:e1:17:f1:9c:a8:98:f0:b6:5b:13:40:
         8d:65:d6:27:c6:a1:7d:76:39:a5:b3:37:b2:ea:97:10:66:61:
         1e:6d:e7:2f:00:2a:17:69:9e:4f:85:55:88:e6:a6:57:08:89:
         af:4c:81:1f:c4:72:b1:cc:ef:cd:47:48:79:40:a5:2d:81:fc:
         42:c7:ff:36:c3:3b:c0:ba:88:7a:2f:6c:0e:11:82:8e:aa:33:
         dc:3b:c8:3c:90:71:4c:ea:7c:3d:da:5b:1b:00:03:52:a6:a7:
         89:3c:41:fd:85:2d:9f:ac:8f:91:b6:9d:62:44:79:91:75:a8:
         2b:4e:fb:e1:47:81:65:56:87:d1:66:4f:6d:f2:c8:67:57:cc:
         36:6f:63:0c:c2:6e:d1:af:2d:54:b0:29:be:4c:20:02:df:b9:
         e6:8d:0a:ef:e5:cb:39:7a:d9:0b:14:3c:14:77:cb:3a:56:28:
         b9:2a:a6:d4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtDTHgx6SWD3jskOWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
MWJmMTdjOGYtODRmZi00ZTBlLTllZWItNmVmYTg2MGE3MmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkHkZvI19RcHvCR8E8eno5h/L9w6e1aWh0Ih
QEbR+VwluKvHybW/MZNb2pIbLzlw/34WNd2OXoFQzX+bQjiYmYpuu0N5g0+Dvk9y
ZE4yUSeh9aGpIKqVydUZwEwit5upzwPrgaUr5ieA/3Ov9Uvxa37/wiTqQ0unzFll
CURCGXuz7gW/S8a8CIoXsOFJq8hN3MebcaArWzM08lCJIl6AnSJ4YL1ZJlbfcqdy
MS4dglXSmv6kjc+PA7kNf7wUg+UipG52nHrC+mroZtAPfSLQnIU6cYCpIeEqAeC5
MxVgFM9e651a+dmD6aGrNPZed3Q3TYGRnl4FAy61/Pb3heTfTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCvpm/AS4xuJd9s70eqG+nzcgiLYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWU5NjBlODUtMWFiZC0z
NDRkLTg5ZjMtYTc0ZWFhMTJiODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbHA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAGx+qHdMHlv5ntU48BcsDGLfRQDywWmpCokOdLbPj6qXkHeDbJe
Mwn2yGyix0U1jlbqbz2B7qvkSW9dAwTwa4LsykJCW9S5QvUr2vAg7/LhF/GcqJjw
tlsTQI1l1ifGoX12OaWzN7LqlxBmYR5t5y8AKhdpnk+FVYjmplcIia9MgR/EcrHM
781HSHlApS2B/ELH/zbDO8C6iHovbA4Rgo6qM9w7yDyQcUzqfD3aWxsAA1Kmp4k8
Qf2FLZ+sj5G2nWJEeZF1qCtO++FHgWVWh9FmT23yyGdXzDZvYwzCbtGvLVSwKb5M
IALfueaNCu/lyzl62QsUPBR3yzpWKLkqptQ=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:48 2025 by rpki-client