Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c253c8d6-147e-3d46-823e-23d139298c43.roa
File:                     c253c8d6-147e-3d46-823e-23d139298c43.roa (raw, json)
Hash identifier:          FsG/4vWXekDo0FaLqUVgROxanh5gPnOxPFHjHLOuRTw=
Subject key identifier:   3B:A3:CC:0B:C4:CD:70:6C:F2:AE:F4:58:11:F8:14:2A:F8:93:A8:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36E59431D633578C262110
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c253c8d6-147e-3d46-823e-23d139298c43.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1002:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:e5:94:31:d6:33:57:8c:26:21:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=cbebedf8-f95e-4b35-b43a-83aa8462ed20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d9:43:e5:28:4e:bd:43:4a:d0:d4:3b:cd:27:
                    ca:64:d4:40:5a:57:8c:14:14:25:c0:f4:8b:82:0a:
                    b3:38:67:7a:e4:98:55:c7:f2:0a:65:63:f7:d1:a0:
                    b0:45:25:a0:93:f1:90:e0:b5:70:0c:29:28:34:75:
                    b2:ec:51:8e:8c:a6:24:1b:a3:8c:04:d5:dd:3a:9f:
                    6b:68:e5:a8:f4:5e:7e:9e:97:9b:26:eb:f5:10:93:
                    95:be:f3:27:60:2a:9e:da:14:ec:b2:49:ea:ff:5b:
                    b3:e7:4c:58:05:ae:ec:ac:80:11:99:7a:4c:12:0d:
                    ab:66:cb:d8:16:5d:03:df:09:59:9a:c0:04:7e:0e:
                    b3:0e:a9:21:c0:ef:80:ef:22:ee:38:2e:3e:86:7c:
                    f1:55:0f:92:de:31:08:94:b4:05:b9:2f:35:22:3e:
                    d9:e6:dd:ea:54:1a:e4:1f:8e:a3:9b:41:cf:28:8a:
                    72:39:29:76:1b:df:b8:4a:b8:fe:b6:b8:48:54:99:
                    3f:46:81:4b:58:c0:2f:da:38:fd:a1:f2:55:51:55:
                    06:32:8d:dd:ce:4c:92:79:22:f7:8c:9c:54:24:81:
                    9b:02:a6:85:2c:56:cc:c8:9f:1c:de:06:d3:d1:c1:
                    bc:10:77:7c:9e:56:54:d2:46:39:8c:46:b0:94:7b:
                    13:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A3:CC:0B:C4:CD:70:6C:F2:AE:F4:58:11:F8:14:2A:F8:93:A8:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c253c8d6-147e-3d46-823e-23d139298c43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b7:d5:35:cd:02:eb:f8:e4:16:27:9b:cb:54:9e:6e:b6:b0:
         20:c7:e3:02:04:8b:07:64:80:dc:15:1d:86:2a:3c:b4:a4:77:
         f3:d2:0a:aa:55:6c:c4:a4:0a:c0:92:33:28:3f:77:4f:12:bb:
         aa:2c:4d:e4:06:02:8f:de:c8:66:40:83:f6:d9:d5:a4:e6:79:
         df:d5:6e:d1:c6:fd:52:bb:ec:4c:f2:53:bc:77:6f:9f:b7:86:
         4e:99:29:cb:d2:d0:73:88:12:93:ae:f0:36:73:58:0a:3c:d1:
         19:3c:bc:43:25:f1:7a:ba:9c:1e:3b:1e:3e:8e:91:8e:59:35:
         99:ff:6c:ab:d8:04:1d:48:cb:5d:dc:34:86:6c:f9:55:54:00:
         aa:f6:79:7e:71:60:34:63:62:22:04:16:a9:83:a8:f8:f6:96:
         39:74:4c:ea:d1:9d:95:35:31:05:7d:3a:fc:84:63:60:26:fb:
         12:60:44:1d:86:71:6f:e3:28:bf:48:c3:e7:96:5f:16:3d:22:
         ef:ed:68:8d:f9:f5:5f:ac:34:62:48:c5:a4:6b:52:8f:d7:6a:
         80:39:56:44:2c:11:1a:08:70:89:17:4f:bf:ef:46:0e:9b:c9:
         40:13:45:46:91:a9:d1:f6:89:10:78:d0:86:89:2e:38:f9:43:
         fb:92:4c:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNuWUMdYzV4wmIRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
Y2JlYmVkZjgtZjk1ZS00YjM1LWI0M2EtODNhYTg0NjJlZDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NlD5ShOvUNK0NQ7zSfKZNRAWleMFBQlwPSL
ggqzOGd65JhVx/IKZWP30aCwRSWgk/GQ4LVwDCkoNHWy7FGOjKYkG6OMBNXdOp9r
aOWo9F5+npebJuv1EJOVvvMnYCqe2hTssknq/1uz50xYBa7srIARmXpMEg2rZsvY
Fl0D3wlZmsAEfg6zDqkhwO+A7yLuOC4+hnzxVQ+S3jEIlLQFuS81Ij7Z5t3qVBrk
H46jm0HPKIpyOSl2G9+4Srj+trhIVJk/RoFLWMAv2jj9ofJVUVUGMo3dzkySeSL3
jJxUJIGbAqaFLFbMyJ8c3gbT0cG8EHd8nlZU0kY5jEawlHsTiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDujzAvEzXBs8q70WBH4FCr4k6j/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzI1M2M4ZDYtMTQ3ZS0z
ZDQ2LTgyM2UtMjNkMTM5Mjk4YzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAqAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG+31TXNAuv45BYnm8tUnm62sCDH4wIEiwdkgNwVHYYqPLSkd/PS
CqpVbMSkCsCSMyg/d08Su6osTeQGAo/eyGZAg/bZ1aTmed/VbtHG/VK77EzyU7x3
b5+3hk6ZKcvS0HOIEpOu8DZzWAo80Rk8vEMl8Xq6nB47Hj6OkY5ZNZn/bKvYBB1I
y13cNIZs+VVUAKr2eX5xYDRjYiIEFqmDqPj2ljl0TOrRnZU1MQV9OvyEY2Am+xJg
RB2GcW/jKL9Iw+eWXxY9Iu/taI359V+sNGJIxaRrUo/XaoA5VkQsERoIcIkXT7/v
Rg6byUATRUaRqdH2iRB40IaJLjj5Q/uSTCY=
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:13:57 2025 by rpki-client