Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4813f34-148a-38bb-8004-9eea25a76a60.roa
File:                     d4813f34-148a-38bb-8004-9eea25a76a60.roa (raw, json)
Hash identifier:          jcCEk05tWBOqLugJ9vjqiRXLFBZGlh0ecMQ9IGK+jo0=
Subject key identifier:   0C:DD:75:A1:0B:0C:91:BE:7E:37:09:20:B1:0D:69:93:E3:DA:6F:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A118773E9E48D16171810E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4813f34-148a-38bb-8004-9eea25a76a60.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1015:b140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:87:73:e9:e4:8d:16:17:18:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=8ab15f7f-c2d1-4fc4-bb50-17e184c09069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:38:88:56:52:ce:c0:2d:49:75:e9:3a:b7:
                    a1:6e:57:ca:96:8f:c4:38:4e:30:ba:29:96:3a:8c:
                    ed:c8:85:2a:e0:ea:29:e6:88:33:65:68:15:5a:54:
                    9e:b4:3c:8e:c4:0c:d9:f1:4a:86:75:1f:aa:56:c1:
                    be:a7:76:24:f2:fe:18:eb:02:d7:47:3c:0f:0b:a8:
                    fa:cc:bc:78:e2:e4:25:6a:82:18:d6:97:b5:3d:f6:
                    19:02:4a:59:5e:5a:78:5a:7b:9f:22:6c:ca:56:bc:
                    3a:2d:0d:dd:d8:3d:6e:ae:4a:a6:1a:15:dd:a6:b2:
                    26:73:40:90:de:44:82:43:08:fa:3c:94:71:ea:70:
                    75:6e:c0:5a:30:fb:f1:14:e3:e7:e5:7a:e5:5e:d2:
                    9c:6d:98:3e:33:aa:b9:4f:7e:6f:61:d4:b9:f5:f8:
                    83:f6:68:6e:d7:03:64:66:ab:a7:19:b4:59:ff:57:
                    41:eb:65:b8:73:9e:28:b3:52:64:12:de:1d:65:60:
                    7a:29:95:d0:b4:53:21:1e:9e:8c:e0:81:6e:ce:87:
                    9d:8e:0c:bf:cf:5b:5a:c3:a0:c6:3d:ed:fe:9f:b8:
                    64:d3:2d:e7:53:a3:fe:8e:64:71:e7:d1:bf:11:8a:
                    ca:f0:bb:47:78:b7:21:d5:67:ac:dd:00:e3:a7:26:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DD:75:A1:0B:0C:91:BE:7E:37:09:20:B1:0D:69:93:E3:DA:6F:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4813f34-148a-38bb-8004-9eea25a76a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b0:42:d5:fa:bd:22:4f:fe:e7:17:11:cf:22:78:47:4d:92:
         d2:b9:4f:e0:2d:79:ea:02:36:27:d0:f5:f3:52:a7:35:51:2b:
         a1:94:f5:87:8b:e2:c3:2d:ca:41:54:da:9e:b3:7a:3f:28:bc:
         3c:30:4d:f7:d9:ba:2f:53:02:17:b4:8d:e7:34:2c:d2:74:15:
         4f:82:4e:94:15:ba:ba:34:47:82:6e:4a:7b:cc:5f:93:6e:20:
         78:9a:15:b0:09:b4:cc:e5:c4:5a:42:8a:8f:fc:f3:2d:e3:89:
         88:3f:0d:f1:94:b0:fd:e0:3a:e8:ae:25:ce:53:00:b9:f6:a3:
         f8:81:b9:ea:0c:bc:e3:b0:ca:4f:b3:20:38:35:9d:94:4b:ae:
         bf:ec:a3:bc:11:b9:75:f9:6d:10:e3:ad:83:32:d0:87:96:be:
         8b:05:ca:c7:23:6e:ed:3c:1c:21:b3:46:c2:e6:ca:85:79:05:
         1c:f1:be:fe:93:c8:30:78:c4:a9:89:26:f5:5b:82:d8:bf:56:
         ed:9f:62:0b:5d:45:33:2b:54:53:ff:cd:5f:c7:1d:11:27:2a:
         3b:d3:ce:ee:50:bc:3c:72:0a:e8:9d:a2:9d:2f:02:27:f2:dd:
         25:93:4f:d1:04:3b:36:fd:91:34:70:57:69:dd:4a:98:9e:05:
         2b:23:9d:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEYdz6eSNFhcYEOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
OGFiMTVmN2YtYzJkMS00ZmM0LWJiNTAtMTdlMTg0YzA5MDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJQ4iFZSzsAtSXXpOrehblfKlo/EOE4wuimW
OoztyIUq4Oop5ogzZWgVWlSetDyOxAzZ8UqGdR+qVsG+p3Yk8v4Y6wLXRzwPC6j6
zLx44uQlaoIY1pe1PfYZAkpZXlp4WnufImzKVrw6LQ3d2D1urkqmGhXdprImc0CQ
3kSCQwj6PJRx6nB1bsBaMPvxFOPn5XrlXtKcbZg+M6q5T35vYdS59fiD9mhu1wNk
ZqunGbRZ/1dB62W4c54os1JkEt4dZWB6KZXQtFMhHp6M4IFuzoedjgy/z1taw6DG
Pe3+n7hk0y3nU6P+jmRx59G/EYrK8LtHeLch1Wes3QDjpyY9YwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAzddaELDJG+fjcJILENaZPj2m8oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ4MTNmMzQtMTQ4YS0z
OGJiLTgwMDQtOWVlYTI1YTc2YTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFbFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH6wQtX6vSJP/ucXEc8ieEdNktK5T+AteeoCNifQ9fNSpzVRK6GU
9YeL4sMtykFU2p6zej8ovDwwTffZui9TAhe0jec0LNJ0FU+CTpQVuro0R4JuSnvM
X5NuIHiaFbAJtMzlxFpCio/88y3jiYg/DfGUsP3gOuiuJc5TALn2o/iBueoMvOOw
yk+zIDg1nZRLrr/so7wRuXX5bRDjrYMy0IeWvosFyscjbu08HCGzRsLmyoV5BRzx
vv6TyDB4xKmJJvVbgti/Vu2fYgtdRTMrVFP/zV/HHREnKjvTzu5QvDxyCuidop0v
Aify3SWTT9EEOzb9kTRwV2ndSpieBSsjnes=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:08 2025 by rpki-client