Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8b5546d-85cc-3132-92b7-b8524e952f8a.roa
File:                     c8b5546d-85cc-3132-92b7-b8524e952f8a.roa (raw, json)
Hash identifier:          8I0mJqp5jAYTBui/ANZyHoOfh9VNOJ4/qYbVwsJLEVg=
Subject key identifier:   A5:2B:8D:0B:0F:5E:35:68:D2:19:34:64:39:7F:EC:E2:1C:17:F4:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EA35CCF94F999EF82680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8b5546d-85cc-3132-92b7-b8524e952f8a.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1005:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ea:35:cc:f9:4f:99:9e:f8:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=74acf9b2-3966-44dd-8242-7417702b74d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:84:e0:d1:f9:fa:48:6d:a0:47:79:4e:af:
                    44:71:21:18:ee:ba:91:b5:66:47:9d:26:f3:11:1f:
                    e2:36:cd:cd:ed:7b:3a:62:e5:26:e4:aa:4b:ff:01:
                    0f:7c:6c:d6:84:5d:4a:7e:ad:4c:f5:68:fb:62:16:
                    13:64:b4:7a:bc:7a:bb:b3:e8:7c:19:e5:7a:df:36:
                    3c:6a:5a:64:ad:93:10:03:c6:17:39:0e:93:ab:f7:
                    d3:6c:66:c9:59:9e:06:5b:c8:30:31:5b:64:a4:76:
                    42:07:03:02:0b:fe:c8:08:8a:c9:0b:2c:0c:6d:06:
                    50:fc:bf:fd:2d:77:12:12:b8:0e:ef:e2:74:23:a1:
                    e8:d5:de:35:69:df:d3:c0:c1:f1:8c:c3:57:cb:97:
                    57:50:3a:b9:e4:8d:eb:fa:d2:bf:5e:ee:8e:e3:2c:
                    3a:bd:5f:38:4c:8a:70:a5:ee:ed:17:14:ae:6a:aa:
                    92:4c:ff:92:3c:13:ac:cd:05:f2:77:8e:ed:fb:c3:
                    d4:ab:d1:4c:e0:bc:23:b5:cf:04:0f:e0:18:22:e8:
                    3b:ac:15:57:d7:2d:73:3c:4b:8b:07:b3:c8:da:2f:
                    16:73:bd:f9:ed:5d:2d:cf:26:51:50:d3:53:a8:cd:
                    c5:04:10:04:10:8d:68:66:c9:c3:37:b7:73:84:92:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2B:8D:0B:0F:5E:35:68:D2:19:34:64:39:7F:EC:E2:1C:17:F4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8b5546d-85cc-3132-92b7-b8524e952f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e8:98:62:f8:71:a8:73:00:fc:38:04:b4:62:e1:56:30:ac:
         40:2d:fd:88:84:f6:c8:d9:4b:f1:6e:03:1b:6b:5a:77:e6:a1:
         f5:e7:8a:2f:48:04:91:67:75:82:37:90:76:0b:6b:88:18:6e:
         47:a2:2b:c9:a6:6e:55:b7:5f:52:4c:83:a1:db:4b:c4:99:be:
         04:84:43:fa:8a:02:82:6c:3a:24:70:c1:6c:be:5a:48:0f:ed:
         03:54:df:de:78:e0:cf:c8:18:1c:46:00:a8:07:9c:bc:55:b9:
         a3:16:78:45:d1:99:9d:c6:d9:36:91:c1:44:71:0a:5d:69:5e:
         3b:14:ed:e7:4b:99:e7:30:fe:2d:13:53:74:8d:71:cf:66:1a:
         fe:0f:76:ea:e3:94:af:ab:bd:a5:a1:b3:6c:2a:91:16:79:8f:
         c6:c0:d9:49:9c:d6:b5:bf:be:4c:1d:25:b3:f3:09:eb:81:ac:
         25:23:b4:9a:9c:4a:87:c7:74:05:e8:87:e1:79:b6:b9:26:7a:
         cc:c0:93:b8:82:83:61:16:67:1a:8f:2c:06:da:90:db:39:6c:
         a4:80:94:ea:18:41:bf:03:d8:cf:9b:4d:38:ad:ee:1d:03:82:
         09:40:bf:3c:03:7d:ba:be:38:99:9e:d5:f8:8f:24:ad:09:78:
         ba:fe:42:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNuo1zPlPmZ74JoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NzRhY2Y5YjItMzk2Ni00NGRkLTgyNDItNzQxNzcwMmI3NGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXmE4NH5+khtoEd5Tq9EcSEY7rqRtWZHnSbz
ER/iNs3N7Xs6YuUm5KpL/wEPfGzWhF1Kfq1M9Wj7YhYTZLR6vHq7s+h8GeV63zY8
alpkrZMQA8YXOQ6Tq/fTbGbJWZ4GW8gwMVtkpHZCBwMCC/7ICIrJCywMbQZQ/L/9
LXcSErgO7+J0I6Ho1d41ad/TwMHxjMNXy5dXUDq55I3r+tK/Xu6O4yw6vV84TIpw
pe7tFxSuaqqSTP+SPBOszQXyd47t+8PUq9FM4Lwjtc8ED+AYIug7rBVX1y1zPEuL
B7PI2i8Wc7357V0tzyZRUNNTqM3FBBAEEI1oZsnDN7dzhJJhwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKUrjQsPXjVo0hk0ZDl/7OIcF/RMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzhiNTU0NmQtODVjYy0z
MTMyLTkyYjctYjg1MjRlOTUyZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBaAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAInomGL4cahzAPw4BLRi4VYwrEAt/YiE9sjZS/FuAxtrWnfmofXn
ii9IBJFndYI3kHYLa4gYbkeiK8mmblW3X1JMg6HbS8SZvgSEQ/qKAoJsOiRwwWy+
WkgP7QNU39544M/IGBxGAKgHnLxVuaMWeEXRmZ3G2TaRwURxCl1pXjsU7edLmecw
/i0TU3SNcc9mGv4PdurjlK+rvaWhs2wqkRZ5j8bA2Umc1rW/vkwdJbPzCeuBrCUj
tJqcSofHdAXoh+F5trkmeszAk7iCg2EWZxqPLAbakNs5bKSAlOoYQb8D2M+bTTit
7h0DgglAvzwDfbq+OJme1fiPJK0JeLr+Qjk=
-----END CERTIFICATE-----
Generated at Sat Oct 11 00:10:19 2025 by rpki-client