Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/918f70f6-0d0d-3f3e-ad36-a24ead4fdde0.roa
File:                     918f70f6-0d0d-3f3e-ad36-a24ead4fdde0.roa (raw, json)
Hash identifier:          oh/41z4ZI+pPiHuQIF8TPlTUhtEeW/XS46RoNifbEok=
Subject key identifier:   4E:E8:9C:60:3C:84:AF:93:FC:DF:93:3D:D6:F5:3B:B1:F7:7E:FE:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C80457D28BE90ECF11A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/918f70f6-0d0d-3f3e-ad36-a24ead4fdde0.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100e:d030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:80:45:7d:28:be:90:ec:f1:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=3756829f-dc2d-44e0-b8d6-9310235b5eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:16:1e:e3:07:11:ff:05:d5:4c:7c:d7:ec:d7:
                    d0:3e:ef:7c:8a:04:a7:d7:fc:9f:5a:94:b9:3e:ee:
                    5e:41:98:02:57:27:0e:41:4a:8e:65:81:90:88:fe:
                    d4:38:fe:e5:8e:7f:4d:7f:d6:98:6a:f5:76:27:ad:
                    41:3d:c1:c9:57:9e:c4:0f:89:3b:7b:95:ef:3d:e7:
                    25:70:69:47:11:4d:67:e1:c4:97:d6:bd:62:ce:8b:
                    02:d7:71:63:a8:be:7b:c2:6a:07:53:42:2f:bd:7f:
                    4f:04:61:e9:80:09:5c:a3:19:c3:ea:9b:09:4e:a4:
                    66:21:e1:09:cc:d1:e0:ed:47:2a:47:80:84:48:55:
                    7b:fd:34:51:bc:43:f4:7a:d6:d6:0f:6f:c6:0c:23:
                    63:73:69:59:e8:e6:b2:92:1f:33:a8:78:fb:fc:e7:
                    67:c7:85:93:44:d8:45:89:d6:f5:2b:53:5e:56:ff:
                    e0:e6:01:ac:9b:a9:d5:36:34:3e:f4:b5:ad:ef:d9:
                    b3:2b:cd:43:12:30:cf:69:ff:f4:ab:08:59:a6:55:
                    d8:ba:f1:e0:8c:41:dd:a3:cd:a9:81:82:ac:7c:3b:
                    0b:31:c0:89:f6:aa:2f:8f:42:d8:49:e9:b4:11:1a:
                    bc:b4:33:ce:28:8e:ed:3e:a3:2c:f3:0f:cc:81:1e:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E8:9C:60:3C:84:AF:93:FC:DF:93:3D:D6:F5:3B:B1:F7:7E:FE:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/918f70f6-0d0d-3f3e-ad36-a24ead4fdde0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:d030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:72:a6:52:61:c0:05:29:81:c2:44:37:67:3a:8e:a4:55:95:
         bc:6b:01:b1:bc:44:94:c6:d5:d9:9a:52:ba:55:80:7b:39:92:
         5c:f7:ac:74:b8:86:7a:1d:b3:fa:69:a4:a6:00:e6:f8:b5:33:
         9b:1e:06:aa:d1:75:a7:11:f5:96:05:62:ae:cf:cb:4c:a1:0a:
         ea:a0:66:48:fb:d4:e7:1d:57:a5:df:af:9b:5a:41:fd:bb:87:
         03:03:db:54:88:74:aa:7c:f4:5f:25:84:29:dd:3c:67:b8:a2:
         a8:0f:c9:fd:e9:9b:ef:63:37:28:e1:29:dd:4f:72:75:0c:f2:
         1d:ab:d4:4c:29:44:b3:b0:50:ab:86:ad:37:47:27:3f:a0:7f:
         21:41:da:e4:6b:22:46:29:35:e2:18:3b:c1:ae:91:c7:00:b5:
         24:f1:0c:62:b3:4b:74:25:a6:cc:7f:d8:94:f1:67:0d:a3:9b:
         9c:0f:83:30:89:76:e7:59:b2:2c:bc:51:b6:f4:55:a2:f2:fa:
         10:d4:57:15:5e:cc:c6:ea:3e:88:e2:9d:e8:be:82:5b:f5:1a:
         50:3c:f3:1a:46:ba:70:ce:42:9d:a4:b6:59:c5:d9:01:23:41:
         37:01:e0:14:dd:ef:f0:3a:8f:9c:1f:eb:86:7f:b8:b2:09:71:
         6d:7d:4d:36
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtDTIBFfSi+kOzxGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
Mzc1NjgyOWYtZGMyZC00NGUwLWI4ZDYtOTMxMDIzNWI1ZWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hYe4wcR/wXVTHzX7NfQPu98igSn1/yfWpS5
Pu5eQZgCVycOQUqOZYGQiP7UOP7ljn9Nf9aYavV2J61BPcHJV57ED4k7e5XvPecl
cGlHEU1n4cSX1r1izosC13FjqL57wmoHU0IvvX9PBGHpgAlcoxnD6psJTqRmIeEJ
zNHg7UcqR4CESFV7/TRRvEP0etbWD2/GDCNjc2lZ6Oaykh8zqHj7/Odnx4WTRNhF
idb1K1NeVv/g5gGsm6nVNjQ+9LWt79mzK81DEjDPaf/0qwhZplXYuvHgjEHdo82p
gYKsfDsLMcCJ9qovj0LYSem0ERq8tDPOKI7tPqMs8w/MgR5E5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE7onGA8hK+T/N+TPdb1O7H3fv7bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTE4ZjcwZjYtMGQwZC0z
ZjNlLWFkMzYtYTI0ZWFkNGZkZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDtAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGlyplJhwAUpgcJEN2c6jqRVlbxrAbG8RJTG1dmaUrpVgHs5klz3
rHS4hnods/pppKYA5vi1M5seBqrRdacR9ZYFYq7Py0yhCuqgZkj71OcdV6Xfr5ta
Qf27hwMD21SIdKp89F8lhCndPGe4oqgPyf3pm+9jNyjhKd1PcnUM8h2r1EwpRLOw
UKuGrTdHJz+gfyFB2uRrIkYpNeIYO8GukccAtSTxDGKzS3Qlpsx/2JTxZw2jm5wP
gzCJdudZsiy8Ubb0VaLy+hDUVxVezMbqPojinei+glv1GlA88xpGunDOQp2ktlnF
2QEjQTcB4BTd7/A6j5wf64Z/uLIJcW19TTY=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:55 2025 by rpki-client