Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/640ac692-ad70-3ff7-b474-f719b02a0138.roa
File:                     640ac692-ad70-3ff7-b474-f719b02a0138.roa (raw, json)
Hash identifier:          qR+L8XsFA2M1c4HZVJ5N+jvICKlYoMUYM9HXZWReZkM=
Subject key identifier:   B7:D4:6B:8B:A0:FB:8C:BF:82:B2:D3:79:FE:C8:82:0D:00:53:81:3D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C372827D8EB89492460FA89
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/640ac692-ad70-3ff7-b474-f719b02a0138.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1004:b210::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:28:27:d8:eb:89:49:24:60:fa:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=5113fcb1-2d22-4394-b684-93dff11d06d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:95:63:49:2b:03:7e:ee:a1:29:d2:67:d5:
                    7d:4e:2e:46:77:34:7f:47:2e:ef:c8:36:b3:9e:99:
                    5e:f8:89:d9:8d:26:f5:4f:a4:58:c8:a6:be:8f:c8:
                    92:69:2c:4d:5f:f4:0b:58:62:96:69:77:2f:64:31:
                    1f:d5:c5:cf:da:af:d0:3b:6c:c0:5c:23:42:14:fb:
                    78:97:bf:81:3e:44:11:a4:52:89:ac:07:84:91:49:
                    a3:36:e0:aa:e6:bb:6b:38:26:36:18:fb:12:f1:9e:
                    9f:da:35:05:ab:18:77:d1:2e:ee:c7:77:9d:4c:6d:
                    b7:9f:47:a4:15:be:60:ab:19:e9:02:c2:bf:38:2a:
                    2f:75:e7:87:98:f4:b7:b7:db:20:86:81:b1:19:31:
                    b8:3d:00:40:eb:8f:5a:f1:e6:87:93:0e:8c:54:3a:
                    18:b3:10:3c:d2:0c:e2:62:00:2f:f9:4c:a6:fb:13:
                    e4:36:11:81:ae:db:6f:22:07:9f:39:71:32:3d:f3:
                    05:d4:5b:4b:74:75:b5:5e:ff:3f:fd:ac:ca:63:c4:
                    c3:47:8f:8b:1c:3b:63:19:74:6e:bc:80:cf:ac:59:
                    2d:1d:80:18:a2:ae:7b:78:a4:f7:49:1c:32:7b:f2:
                    52:34:20:dd:80:a6:ed:de:4e:5f:6e:bc:38:e1:45:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D4:6B:8B:A0:FB:8C:BF:82:B2:D3:79:FE:C8:82:0D:00:53:81:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/640ac692-ad70-3ff7-b474-f719b02a0138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b210::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:af:80:01:d6:06:2d:6d:ac:19:df:50:d5:2d:f0:af:04:38:
         af:68:25:12:fa:d3:3c:c8:8d:6d:08:2b:10:ac:0b:15:3b:b0:
         5b:a8:7d:b5:c3:62:80:7f:4e:a2:26:55:b6:f2:77:4f:31:f2:
         41:af:06:eb:21:a5:0d:b8:97:92:a4:85:25:d8:3d:56:43:1a:
         89:3e:2d:1c:42:5a:65:be:74:84:8c:3b:53:ba:52:21:32:e7:
         f8:63:18:74:07:00:68:af:5b:09:9f:1c:26:0d:0f:1e:5b:c8:
         79:e6:62:77:f7:04:0a:c7:a1:23:3b:76:c6:53:5a:e6:19:54:
         41:87:d7:0c:e3:29:b6:52:c4:44:b5:4d:a9:0d:d4:8d:fc:2d:
         b9:74:a9:63:99:4c:9e:96:ff:5d:97:41:af:65:5b:db:af:25:
         97:1b:fb:75:3d:4b:91:ba:1b:aa:27:f6:8e:95:d4:92:61:fd:
         82:87:fa:f3:ec:0b:8c:c7:fc:6d:16:a8:48:14:ef:5e:5b:a8:
         14:be:80:89:dc:b2:1d:d2:82:e1:38:f2:c4:32:05:f2:10:5f:
         ae:dc:c7:47:3d:9e:f3:45:b3:f7:af:76:58:b0:1a:fc:26:7d:
         ce:b2:00:8c:a8:c2:3e:2b:a9:dd:6b:59:13:0a:a3:08:c6:8b:
         ad:ce:d4:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNygn2OuJSSRg+okwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NTExM2ZjYjEtMmQyMi00Mzk0LWI2ODQtOTNkZmYxMWQwNmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqSVY0krA37uoSnSZ9V9Ti5GdzR/Ry7vyDaz
nple+InZjSb1T6RYyKa+j8iSaSxNX/QLWGKWaXcvZDEf1cXP2q/QO2zAXCNCFPt4
l7+BPkQRpFKJrAeEkUmjNuCq5rtrOCY2GPsS8Z6f2jUFqxh30S7ux3edTG23n0ek
Fb5gqxnpAsK/OCovdeeHmPS3t9sghoGxGTG4PQBA649a8eaHkw6MVDoYsxA80gzi
YgAv+Uym+xPkNhGBrttvIgefOXEyPfMF1FtLdHW1Xv8//azKY8TDR4+LHDtjGXRu
vIDPrFktHYAYoq57eKT3SRwye/JSNCDdgKbt3k5fbrw44UVYYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLfUa4ug+4y/grLTef7Igg0AU4E9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjQwYWM2OTItYWQ3MC0z
ZmY3LWI0NzQtZjcxOWIwMmEwMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLIQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADyvgAHWBi1trBnfUNUt8K8EOK9oJRL60zzIjW0IKxCsCxU7sFuo
fbXDYoB/TqImVbbyd08x8kGvBushpQ24l5KkhSXYPVZDGok+LRxCWmW+dISMO1O6
UiEy5/hjGHQHAGivWwmfHCYNDx5byHnmYnf3BArHoSM7dsZTWuYZVEGH1wzjKbZS
xES1TakN1I38Lbl0qWOZTJ6W/12XQa9lW9uvJZcb+3U9S5G6G6on9o6V1JJh/YKH
+vPsC4zH/G0WqEgU715bqBS+gIncsh3SguE48sQyBfIQX67cx0c9nvNFs/evdliw
Gvwmfc6yAIyowj4rqd1rWRMKowjGi63O1Pc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:03:47 2025 by rpki-client