Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9af1a2fb-9097-3645-819b-93b39f14d075.roa
File:                     9af1a2fb-9097-3645-819b-93b39f14d075.roa (raw, json)
Hash identifier:          ayD3KBgEjqxTM7Kr+X9IwDREMNQtiIb8Ii5tBXPmZLM=
Subject key identifier:   C8:40:8B:4A:FE:05:D5:3E:F8:C0:E4:76:2C:34:98:DA:BC:F2:AF:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5141F2489278FB91A4AB4B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9af1a2fb-9097-3645-819b-93b39f14d075.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1010:b360::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:f2:48:92:78:fb:91:a4:ab:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=f6d0da79-7184-4c34-bc42-c1f1d38cdac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a4:eb:08:9b:a1:ca:a1:49:6b:ae:b2:0f:ff:
                    29:da:aa:ff:c3:10:2c:cb:1b:6b:67:85:a7:3a:7c:
                    23:c3:e8:19:1e:c5:d1:c2:85:06:7c:f1:1d:2e:37:
                    dd:7d:b4:1d:7b:51:80:8c:00:15:b0:ed:f4:ba:97:
                    37:5e:56:e1:9c:78:6d:d7:a8:20:3f:28:63:ce:b8:
                    77:57:40:40:1f:af:6a:74:97:a5:48:ab:70:4d:fe:
                    f9:29:77:f7:6f:17:e5:bf:51:62:25:5d:7e:7e:91:
                    17:f2:32:10:45:99:48:90:a8:de:42:e4:91:6f:0f:
                    af:e6:88:9c:4c:83:6c:a0:f0:30:1b:58:ce:88:16:
                    d2:6e:27:34:36:32:f8:78:16:71:5c:d6:75:44:7f:
                    0b:df:d8:2f:5b:52:30:3a:58:3c:5f:03:59:ab:2b:
                    ba:0d:ef:da:71:31:03:46:4b:36:69:35:76:76:54:
                    93:75:ca:bf:49:f6:b4:6a:ee:b3:8a:44:99:51:d6:
                    d6:8d:cd:32:fb:6a:b6:68:f9:17:e2:bf:0a:49:78:
                    b1:99:28:25:cd:d9:b9:6c:e5:44:ca:70:39:cc:07:
                    81:99:25:9e:21:e1:62:ed:9d:d8:9b:ae:aa:6b:4a:
                    60:69:af:bf:ba:f5:2b:73:16:a4:83:39:43:0f:00:
                    3f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:40:8B:4A:FE:05:D5:3E:F8:C0:E4:76:2C:34:98:DA:BC:F2:AF:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9af1a2fb-9097-3645-819b-93b39f14d075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b360::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:23:04:d3:7f:89:a7:ba:75:f2:ac:eb:fd:c6:04:bf:2c:5f:
         43:c4:94:75:35:22:70:a2:4e:1b:f4:22:e9:3d:a2:e1:40:46:
         ab:55:e8:08:85:75:bf:18:2b:ed:66:be:59:1c:d6:f5:4d:bf:
         74:c6:85:df:22:f9:6c:1f:3a:6c:c2:09:df:e9:dd:35:e0:fc:
         23:54:82:6d:55:6b:4a:ad:ab:08:97:04:49:f4:37:59:29:04:
         bd:49:df:ec:c4:aa:6b:9a:06:9e:e1:fa:82:a1:63:4d:a5:20:
         90:a6:c6:3d:c6:f2:0a:33:44:e1:27:1c:fa:ff:df:b1:78:17:
         17:12:8d:b3:20:ab:55:d7:7f:8e:13:96:ab:af:2d:53:ff:91:
         84:66:a4:ba:15:71:da:03:14:84:bb:0d:61:f0:87:28:bc:96:
         d1:4e:02:7d:31:cc:fb:5c:9e:d6:fa:95:17:d0:3a:63:40:aa:
         a8:b8:dd:a0:22:5f:92:e9:85:99:fb:fc:69:9a:ee:60:e5:56:
         ae:2c:45:dc:8d:2d:14:8d:64:41:e2:fd:73:32:27:cd:78:41:
         96:15:34:b1:41:d9:f9:9f:8c:e7:47:1a:92:dd:d6:29:1a:08:
         ba:40:13:ab:82:5b:ab:fc:6b:1e:0e:e6:3f:3b:36:69:bf:76:
         14:3a:c3:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtRQfJIknj7kaSrSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
ZjZkMGRhNzktNzE4NC00YzM0LWJjNDItYzFmMWQzOGNkYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqTrCJuhyqFJa66yD/8p2qr/wxAsyxtrZ4Wn
Onwjw+gZHsXRwoUGfPEdLjfdfbQde1GAjAAVsO30upc3XlbhnHht16ggPyhjzrh3
V0BAH69qdJelSKtwTf75KXf3bxflv1FiJV1+fpEX8jIQRZlIkKjeQuSRbw+v5oic
TINsoPAwG1jOiBbSbic0NjL4eBZxXNZ1RH8L39gvW1IwOlg8XwNZqyu6De/acTED
Rks2aTV2dlSTdcq/Sfa0au6zikSZUdbWjc0y+2q2aPkX4r8KSXixmSglzdm5bOVE
ynA5zAeBmSWeIeFi7Z3Ym66qa0pgaa+/uvUrcxakgzlDDwA/yQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMhAi0r+BdU++MDkdiw0mNq88q/NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWFmMWEyZmItOTA5Ny0z
NjQ1LTgxOWItOTNiMzlmMTRkMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQELNg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC0jBNN/iae6dfKs6/3GBL8sX0PElHU1InCiThv0Iuk9ouFARqtV
6AiFdb8YK+1mvlkc1vVNv3TGhd8i+WwfOmzCCd/p3TXg/CNUgm1Va0qtqwiXBEn0
N1kpBL1J3+zEqmuaBp7h+oKhY02lIJCmxj3G8gozROEnHPr/37F4FxcSjbMgq1XX
f44TlquvLVP/kYRmpLoVcdoDFIS7DWHwhyi8ltFOAn0xzPtcntb6lRfQOmNAqqi4
3aAiX5LphZn7/Gma7mDlVq4sRdyNLRSNZEHi/XMyJ814QZYVNLFB2fmfjOdHGpLd
1ikaCLpAE6uCW6v8ax4O5j87Nmm/dhQ6w+o=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:23:32 2025 by rpki-client