Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71058503-812c-3d0f-9a76-e66a04edf45e.roa
File:                     71058503-812c-3d0f-9a76-e66a04edf45e.roa (raw, json)
Hash identifier:          g1pqOvMZbsg9BV/lsHcNL8CGlDn5iMhHv8Bi2cWNWl0=
Subject key identifier:   8C:A5:A8:B8:C1:2B:98:8B:E5:92:01:47:F5:EF:3A:B0:26:2C:91:A0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C97088526D4ADA838AC58
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71058503-812c-3d0f-9a76-e66a04edf45e.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100c:b2c2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:97:08:85:26:d4:ad:a8:38:ac:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=3c5bbb51-db64-4787-b50f-b25b94e153e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:58:25:67:82:27:97:41:01:a6:c6:b6:db:
                    e1:1b:c0:bd:d5:2c:a6:6d:16:d2:a3:02:4f:2a:46:
                    e1:61:3d:1c:e0:24:bd:b2:9b:c9:54:e1:d0:b0:78:
                    7d:03:08:9f:35:88:eb:b0:55:a9:15:40:ba:79:2e:
                    a1:a1:06:a5:32:4c:70:ed:64:4d:30:c5:69:1c:70:
                    1a:41:97:34:5a:47:cd:b4:a8:c0:4b:b2:4c:a1:bb:
                    77:f1:a6:9c:7b:42:43:63:04:c7:ae:c8:9c:ac:78:
                    f5:88:f2:c1:dd:21:27:af:cb:d7:4b:34:ce:87:57:
                    03:72:27:6a:de:f9:6b:10:a0:ff:fd:15:8a:9b:e7:
                    ab:fd:2b:b7:4f:a7:8f:20:51:ef:84:5a:8b:14:8a:
                    64:16:8e:90:db:90:23:c8:21:fc:82:8a:8d:38:24:
                    62:3b:c1:1f:5d:97:bd:d7:5e:01:dd:c6:65:b5:64:
                    12:b2:6c:1f:3e:57:b3:99:96:f5:40:01:b1:49:20:
                    84:14:f5:81:e9:65:d2:f9:5e:6b:b2:7a:8a:9f:16:
                    23:fc:6e:8d:f0:66:be:b8:b9:2f:9e:82:40:cb:23:
                    ac:09:24:d4:1e:2d:0f:71:df:84:e1:28:32:ec:fd:
                    7b:7f:03:fb:55:6c:97:14:92:79:d4:f6:09:47:2b:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A5:A8:B8:C1:2B:98:8B:E5:92:01:47:F5:EF:3A:B0:26:2C:91:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71058503-812c-3d0f-9a76-e66a04edf45e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b2c2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8f:9f:8a:be:ea:33:d0:4e:7e:ee:fe:87:57:ec:80:86:85:
         94:c8:3d:4c:6d:b8:32:2a:50:0a:1c:01:00:71:59:e0:30:98:
         2a:37:05:d2:d5:33:65:af:41:d4:15:c3:f0:90:b1:75:81:8d:
         61:1f:29:70:48:46:0a:71:5d:f9:40:c0:72:5c:db:82:a0:d9:
         a2:67:81:f7:cf:37:47:f0:78:8f:85:c9:64:02:1f:d7:b1:57:
         01:e3:e0:ac:30:7d:c8:45:a7:cc:bd:02:19:82:d3:cf:33:f8:
         c5:3e:8d:40:74:eb:79:07:98:c4:b0:91:90:59:e2:16:6f:4d:
         ff:4a:8d:f1:cb:3f:17:c9:0c:d6:2d:e9:c3:2c:3f:c8:94:f5:
         33:50:92:48:46:f5:53:6a:81:44:44:97:11:55:1d:bc:38:5b:
         f1:33:18:cc:d9:22:99:d6:ae:36:b2:1a:65:66:15:7f:5c:0b:
         e9:4d:fd:be:8c:57:ce:2f:9f:4b:b3:3c:79:7a:5b:f2:8f:d5:
         e2:9f:b7:90:9f:fd:b7:9d:11:bf:5d:da:f5:f4:17:12:e1:3e:
         e3:11:71:19:6c:85:bc:e2:25:f4:c3:e2:a2:8d:82:9d:7c:88:
         34:15:4f:8f:c8:25:e4:f9:5d:56:3f:7c:db:c9:cc:dc:28:a6:
         19:c6:2f:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtDTJcIhSbUrag4rFgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
M2M1YmJiNTEtZGI2NC00Nzg3LWI1MGYtYjI1Yjk0ZTE1M2U1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR9YJWeCJ5dBAabGttvhG8C91SymbRbSowJP
KkbhYT0c4CS9spvJVOHQsHh9AwifNYjrsFWpFUC6eS6hoQalMkxw7WRNMMVpHHAa
QZc0WkfNtKjAS7JMobt38aace0JDYwTHrsicrHj1iPLB3SEnr8vXSzTOh1cDcidq
3vlrEKD//RWKm+er/Su3T6ePIFHvhFqLFIpkFo6Q25AjyCH8goqNOCRiO8EfXZe9
114B3cZltWQSsmwfPlezmZb1QAGxSSCEFPWB6WXS+V5rsnqKnxYj/G6N8Ga+uLkv
noJAyyOsCSTUHi0Pcd+E4Sgy7P17fwP7VWyXFJJ51PYJRyuqZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIylqLjBK5iL5ZIBR/XvOrAmLJGgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzEwNTg1MDMtODEyYy0z
ZDBmLTlhNzYtZTY2YTA0ZWRmNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDLLC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHWPn4q+6jPQTn7u/odX7ICGhZTIPUxtuDIqUAocAQBxWeAwmCo3
BdLVM2WvQdQVw/CQsXWBjWEfKXBIRgpxXflAwHJc24Kg2aJngffPN0fweI+FyWQC
H9exVwHj4KwwfchFp8y9AhmC088z+MU+jUB063kHmMSwkZBZ4hZvTf9KjfHLPxfJ
DNYt6cMsP8iU9TNQkkhG9VNqgURElxFVHbw4W/EzGMzZIpnWrjayGmVmFX9cC+lN
/b6MV84vn0uzPHl6W/KP1eKft5Cf/bedEb9d2vX0FxLhPuMRcRlshbziJfTD4qKN
gp18iDQVT4/IJeT5XVY/fNvJzNwophnGL9E=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:19:11 2025 by rpki-client