Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1d5a37d-838f-34db-b7c3-d9adb68124a4.roa
File:                     c1d5a37d-838f-34db-b7c3-d9adb68124a4.roa (raw, json)
Hash identifier:          NmEnPwjjRz/1cpWwEEc1jD0bx4BaXfq3fGUtxyR/G5o=
Subject key identifier:   23:3C:07:C0:37:63:85:58:7B:63:00:DE:44:29:60:35:A5:08:6D:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A1185B99929C74A06359680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1d5a37d-838f-34db-b7c3-d9adb68124a4.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1015:a110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:85:b9:99:29:c7:4a:06:35:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=3b61846f-04f7-4f3c-9e9f-145c1605d8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:a2:f7:5d:94:d4:d9:10:0f:76:8d:bf:7d:
                    61:3d:15:14:97:e1:2d:a3:1d:c3:22:df:17:e3:ef:
                    7a:d6:89:f5:61:de:00:d2:fe:43:ab:63:62:4b:63:
                    c2:29:b1:94:ed:cb:98:4e:ed:5f:48:13:41:dd:c7:
                    20:69:b4:ce:ed:2e:e7:cf:6c:a0:ee:52:92:ca:ab:
                    a1:6f:da:f1:d4:24:41:30:b7:7c:8f:06:82:d4:df:
                    2c:69:8a:e6:61:84:40:b5:07:3c:1a:00:db:31:45:
                    81:96:bf:53:b8:4c:a6:76:6d:74:c3:97:c8:cc:e9:
                    0c:5c:5a:f4:96:22:0d:cd:d4:0f:87:5b:c1:0f:98:
                    ee:34:55:35:f0:aa:6d:8d:1e:f6:29:1d:aa:49:53:
                    99:bb:ed:bf:20:f8:9f:ff:95:cc:2a:ec:e3:14:d7:
                    1c:99:88:c8:1c:16:af:ba:f0:2c:03:dc:4e:e2:46:
                    04:3e:84:a7:5a:d4:06:d1:96:b9:cf:fd:20:54:c3:
                    5c:36:69:aa:db:75:0d:a9:1b:3b:3d:f2:77:d1:b7:
                    5b:ea:56:69:c0:25:ae:6c:02:58:5d:9e:7c:cd:13:
                    f8:f1:b1:4a:76:b5:2c:df:5b:02:95:bd:95:18:cc:
                    71:47:4b:c1:8f:cc:b1:17:2b:79:31:01:ec:4f:94:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3C:07:C0:37:63:85:58:7B:63:00:DE:44:29:60:35:A5:08:6D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1d5a37d-838f-34db-b7c3-d9adb68124a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:0e:3b:47:db:e5:8e:d6:db:3d:cf:b1:6e:83:12:ee:d5:
         af:65:4f:cf:b6:65:24:36:0c:b3:f1:7c:2b:6e:ef:5a:ea:cf:
         19:54:56:0b:52:61:b0:ed:85:5f:8b:05:de:87:4e:77:9b:16:
         5c:9e:93:6b:3a:14:f7:55:cb:49:a9:bf:8e:4b:e3:3e:44:32:
         3b:95:a0:dd:b8:07:c7:eb:86:af:53:b5:63:79:2b:8b:cb:07:
         c5:e1:1e:52:cf:f0:ff:bd:8c:4b:0f:c5:59:4b:39:53:c2:10:
         98:af:f8:e2:45:e9:d4:61:96:94:63:ec:66:b1:78:a0:b2:99:
         af:5c:fb:f4:4b:78:32:45:07:70:3e:83:ef:32:13:c0:ce:fb:
         01:50:4f:b8:af:b4:95:17:9a:82:29:e6:bc:5e:a8:b2:b5:c3:
         81:e1:61:b8:7e:a3:df:04:d5:96:27:43:4d:6e:0a:0b:88:a0:
         83:99:e9:67:5b:bf:8f:d8:06:ba:1c:8f:68:ae:4d:a4:e4:99:
         ef:22:3b:03:c4:ad:72:78:2a:4d:0b:89:79:f6:3b:5e:2b:9b:
         18:aa:7c:4d:dc:0a:de:d8:53:f8:5f:de:2f:9a:5c:65:45:e7:
         af:60:48:be:f6:b0:b6:7b:44:c2:4d:26:be:90:37:f0:0f:6c:
         09:cc:44:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEYW5mSnHSgY1loAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
M2I2MTg0NmYtMDRmNy00ZjNjLTllOWYtMTQ1YzE2MDVkOGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJai912U1NkQD3aNv31hPRUUl+Etox3DIt8X
4+961on1Yd4A0v5Dq2NiS2PCKbGU7cuYTu1fSBNB3ccgabTO7S7nz2yg7lKSyquh
b9rx1CRBMLd8jwaC1N8saYrmYYRAtQc8GgDbMUWBlr9TuEymdm10w5fIzOkMXFr0
liINzdQPh1vBD5juNFU18KptjR72KR2qSVOZu+2/IPif/5XMKuzjFNccmYjIHBav
uvAsA9xO4kYEPoSnWtQG0Za5z/0gVMNcNmmq23UNqRs7PfJ30bdb6lZpwCWubAJY
XZ58zRP48bFKdrUs31sClb2VGMxxR0vBj8yxFyt5MQHsT5Q2qQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCM8B8A3Y4VYe2MA3kQpYDWlCG3yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzFkNWEzN2QtODM4Zi0z
NGRiLWI3YzMtZDlhZGI2ODEyNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFaEQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB5zDjtH2+WO1ts9z7FugxLu1a9lT8+2ZSQ2DLPxfCtu71rqzxlU
VgtSYbDthV+LBd6HTnebFlyek2s6FPdVy0mpv45L4z5EMjuVoN24B8frhq9TtWN5
K4vLB8XhHlLP8P+9jEsPxVlLOVPCEJiv+OJF6dRhlpRj7GaxeKCyma9c+/RLeDJF
B3A+g+8yE8DO+wFQT7ivtJUXmoIp5rxeqLK1w4HhYbh+o98E1ZYnQ01uCguIoIOZ
6Wdbv4/YBrocj2iuTaTkme8iOwPErXJ4Kk0LiXn2O14rmxiqfE3cCt7YU/hf3i+a
XGVF569gSL72sLZ7RMJNJr6QN/APbAnMREc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 19:52:17 2025 by rpki-client