Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca7d96b0-1980-3482-8bfc-852595d02978.roa
File:                     ca7d96b0-1980-3482-8bfc-852595d02978.roa (raw, json)
Hash identifier:          gPCOmiWTxEz8dnkPT3s0dPKQsaznabzRkujiYkjnGSw=
Subject key identifier:   1B:24:4B:FF:1C:51:BD:1F:AD:0D:A4:22:34:55:01:41:7C:77:F4:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3722C4C6CD051C3D4C5F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca7d96b0-1980-3482-8bfc-852595d02978.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1003:b0fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:22:c4:c6:cd:05:1c:3d:4c:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=52e53d8d-574c-4198-985f-bc4197a17ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f1:70:f5:b5:e8:7b:38:d3:80:5a:c5:d8:43:
                    91:3d:08:1e:f8:40:8f:ad:c3:fe:1e:93:51:6b:72:
                    24:d5:41:51:51:3d:f3:9c:9e:f9:fa:81:28:2c:9b:
                    f4:f3:3c:58:11:8e:89:e2:52:1f:4e:2a:01:77:08:
                    7c:3f:56:a5:5c:f8:aa:83:53:3d:54:76:59:d0:b4:
                    a5:86:55:00:0b:ce:6a:74:79:28:5b:51:65:48:bc:
                    f1:a3:62:ed:42:59:ba:e7:a8:70:82:15:76:96:86:
                    d7:8b:83:5f:21:ed:5d:f5:b7:3d:b5:72:72:72:8b:
                    cf:c3:50:18:23:42:2a:ca:35:aa:59:81:53:6c:4d:
                    37:ed:63:7e:47:2f:43:cb:79:d0:a4:fe:c1:1f:48:
                    55:b6:ea:7b:f6:5d:45:91:df:51:ac:ab:3b:19:18:
                    c0:ec:bc:82:dd:e9:5e:bf:79:a9:0b:26:38:5f:22:
                    3f:c7:ce:1c:6d:c2:d0:70:94:5e:fa:91:ec:5f:85:
                    ee:98:41:c6:4a:54:c2:12:2c:1a:31:d2:32:d9:77:
                    c5:ad:d7:3b:58:7b:ca:04:93:a9:f9:fe:91:d2:92:
                    a4:06:1e:80:61:ce:7d:e3:7d:25:39:71:28:ae:88:
                    61:99:b9:f4:26:dd:a5:e9:cc:30:7a:00:b3:ab:99:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:24:4B:FF:1C:51:BD:1F:AD:0D:A4:22:34:55:01:41:7C:77:F4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca7d96b0-1980-3482-8bfc-852595d02978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b0fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d4:57:84:e4:e9:dc:b0:ce:17:2d:cd:c3:f3:7c:54:e5:88:
         25:73:61:49:28:71:02:f4:08:67:2a:32:d7:19:d3:a8:f2:ad:
         61:de:fc:09:21:8a:99:48:ff:8e:6c:89:81:c1:e8:65:62:4c:
         23:ca:45:e5:24:20:b6:92:58:f1:be:fa:9f:7b:4f:08:f3:c0:
         1d:2d:90:81:d4:e1:e2:03:cb:ef:15:f6:ee:55:7e:66:0e:50:
         95:c3:da:4c:17:d7:e8:b5:56:a0:98:85:81:d4:b7:fb:96:1f:
         e7:9e:70:70:56:31:61:6a:26:9d:31:17:9a:28:2d:45:83:2b:
         06:cc:42:47:e9:0b:fe:d7:55:fa:9a:0f:03:bf:d4:f8:9f:cc:
         4d:9b:d2:05:30:09:a4:ef:3b:c4:90:6d:af:48:70:58:c6:68:
         de:ac:06:7b:12:15:f1:cd:b3:c0:91:29:1e:db:66:e6:05:05:
         96:16:12:86:20:b6:af:8b:d7:b1:3a:8a:b8:84:28:66:0d:5a:
         d8:bb:c6:9a:92:b5:73:b5:4f:28:f7:6b:fa:e0:dd:53:6c:d5:
         39:a7:a9:a6:44:b6:96:9b:ed:eb:c8:1d:66:65:75:c1:e3:fc:
         f7:ad:c7:f2:04:35:81:ea:28:7e:bc:5f:83:8b:e5:cb:0b:22:
         ff:aa:14:cd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNyLExs0FHD1MX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NTJlNTNkOGQtNTc0Yy00MTk4LTk4NWYtYmM0MTk3YTE3ZWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofFw9bXoezjTgFrF2EORPQge+ECPrcP+HpNR
a3Ik1UFRUT3znJ75+oEoLJv08zxYEY6J4lIfTioBdwh8P1alXPiqg1M9VHZZ0LSl
hlUAC85qdHkoW1FlSLzxo2LtQlm656hwghV2lobXi4NfIe1d9bc9tXJycovPw1AY
I0IqyjWqWYFTbE037WN+Ry9Dy3nQpP7BH0hVtup79l1Fkd9RrKs7GRjA7LyC3ele
v3mpCyY4XyI/x84cbcLQcJRe+pHsX4XumEHGSlTCEiwaMdIy2XfFrdc7WHvKBJOp
+f6R0pKkBh6AYc59430lOXEorohhmbn0Jt2l6cwwegCzq5nW4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBskS/8cUb0frQ2kIjRVAUF8d/RNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2E3ZDk2YjAtMTk4MC0z
NDgyLThiZmMtODUyNTk1ZDAyOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQA7D8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALPUV4Tk6dywzhctzcPzfFTliCVzYUkocQL0CGcqMtcZ06jyrWHe
/AkhiplI/45siYHB6GViTCPKReUkILaSWPG++p97TwjzwB0tkIHU4eIDy+8V9u5V
fmYOUJXD2kwX1+i1VqCYhYHUt/uWH+eecHBWMWFqJp0xF5ooLUWDKwbMQkfpC/7X
VfqaDwO/1PifzE2b0gUwCaTvO8SQba9IcFjGaN6sBnsSFfHNs8CRKR7bZuYFBZYW
EoYgtq+L17E6iriEKGYNWti7xpqStXO1Tyj3a/rg3VNs1TmnqaZEtpab7evIHWZl
dcHj/Petx/IENYHqKH68X4OL5csLIv+qFM0=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:03:28 2025 by rpki-client