Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e26ffb1e-f805-3fe2-863d-f16db0f045aa.roa
File:                     e26ffb1e-f805-3fe2-863d-f16db0f045aa.roa (raw, json)
Hash identifier:          i7fgi6CD48A9AP3Ttxzvz2CE+skBttzZi0+4orRK7BM=
Subject key identifier:   50:22:EF:D1:BD:06:9B:CE:79:29:AF:DE:00:2B:1C:15:43:89:2F:6C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A1185E68F4CF407B7BCF4E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e26ffb1e-f805-3fe2-863d-f16db0f045aa.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1015:a122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:85:e6:8f:4c:f4:07:b7:bc:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=9c8d101c-3e70-4df9-8eb1-8946bd57cb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:d0:7e:3e:f9:78:9e:4b:4d:01:a7:d2:60:
                    a0:c0:e7:b8:d9:ae:82:16:25:9b:30:8a:6b:f0:ab:
                    eb:e8:a9:ce:d8:09:34:cf:24:4f:36:ef:6b:ad:7c:
                    03:c4:6a:c4:cb:ca:de:db:99:a5:9f:52:3e:d8:95:
                    2e:aa:92:9e:4b:91:35:52:bc:c6:0a:3a:ae:4e:af:
                    57:04:58:80:1e:3b:4e:f5:75:f9:ce:b8:97:ca:e3:
                    74:c0:66:e7:13:81:c5:39:b8:57:2a:73:00:9c:09:
                    ce:2f:be:8c:13:c2:67:69:54:7e:32:79:ae:f0:00:
                    d0:9d:5a:42:4b:11:32:e2:fb:67:c4:ed:9b:d1:f5:
                    d1:4f:c6:8b:5d:1d:7b:e0:13:24:cc:36:30:9e:4e:
                    07:07:db:31:b8:8d:77:8a:24:27:83:80:de:20:16:
                    71:ee:11:e9:8b:a2:2e:62:91:b0:8e:0b:35:a0:87:
                    17:a9:70:9c:87:85:81:68:50:6b:8e:ec:51:28:59:
                    17:c1:f4:7d:eb:a5:fb:ca:db:63:51:50:45:30:09:
                    0b:7a:f8:fd:ab:4b:dc:4c:3e:ec:5a:54:51:19:8f:
                    d3:b8:08:71:78:f1:cb:c0:69:34:a7:37:27:28:e4:
                    1f:cf:b3:f7:29:69:8d:57:39:e1:12:37:0c:f1:86:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:22:EF:D1:BD:06:9B:CE:79:29:AF:DE:00:2B:1C:15:43:89:2F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e26ffb1e-f805-3fe2-863d-f16db0f045aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0c:ce:1c:2a:e9:5c:28:ee:fd:a0:df:c5:7a:7c:dd:f2:ea:
         04:4d:6f:27:ea:ce:8c:a7:b4:7c:a8:83:d8:44:71:bf:19:7b:
         e9:89:20:f2:d7:84:fd:be:ec:50:47:da:39:96:84:54:1c:ec:
         58:0f:5c:8e:b7:5c:69:14:db:ab:51:30:da:79:a6:33:97:d9:
         1c:d8:6f:3a:f4:12:8f:7f:81:bf:97:c1:06:cc:66:8f:84:8b:
         7d:40:67:a6:ad:35:bf:bf:ab:8b:c8:41:4c:b1:cb:58:70:8e:
         3b:ad:e1:4f:55:8f:65:b5:48:cb:f2:00:49:3c:2c:25:ca:fb:
         fe:8f:05:e3:5b:e0:ab:32:8b:13:9c:e5:fe:4f:ab:e1:1d:47:
         84:38:2d:c6:4d:bf:8d:dd:25:cf:d6:2e:2f:66:5c:c4:a7:d4:
         6d:38:28:55:d0:21:7e:62:1d:3b:1d:f5:cf:63:00:0b:df:49:
         16:f4:13:6a:a4:e3:85:c4:a5:87:92:77:2f:02:32:a2:41:9a:
         b3:86:7e:2c:47:c6:a8:83:8b:6b:b2:d7:2c:00:95:1a:d5:ef:
         77:09:f2:ff:46:a1:af:03:40:4f:21:37:a3:ff:a9:6e:a9:05:
         d9:49:4a:33:ba:d1:32:38:24:bb:1c:be:48:55:20:6c:75:39:
         80:a4:d9:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEYXmj0z0B7e89OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk
OWM4ZDEwMWMtM2U3MC00ZGY5LThlYjEtODk0NmJkNTdjYjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe/Qfj75eJ5LTQGn0mCgwOe42a6CFiWbMIpr
8Kvr6KnO2Ak0zyRPNu9rrXwDxGrEy8re25mln1I+2JUuqpKeS5E1UrzGCjquTq9X
BFiAHjtO9XX5zriXyuN0wGbnE4HFObhXKnMAnAnOL76ME8JnaVR+Mnmu8ADQnVpC
SxEy4vtnxO2b0fXRT8aLXR174BMkzDYwnk4HB9sxuI13iiQng4DeIBZx7hHpi6Iu
YpGwjgs1oIcXqXCch4WBaFBrjuxRKFkXwfR966X7yttjUVBFMAkLevj9q0vcTD7s
WlRRGY/TuAhxePHLwGk0pzcnKOQfz7P3KWmNVznhEjcM8YZ63QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFAi79G9BpvOeSmv3gArHBVDiS9sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTI2ZmZiMWUtZjgwNS0z
ZmUyLTg2M2QtZjE2ZGIwZjA0NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQFaEi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHIMzhwq6Vwo7v2g38V6fN3y6gRNbyfqzoyntHyog9hEcb8Ze+mJ
IPLXhP2+7FBH2jmWhFQc7FgPXI63XGkU26tRMNp5pjOX2RzYbzr0Eo9/gb+XwQbM
Zo+Ei31AZ6atNb+/q4vIQUyxy1hwjjut4U9Vj2W1SMvyAEk8LCXK+/6PBeNb4Ksy
ixOc5f5Pq+EdR4Q4LcZNv43dJc/WLi9mXMSn1G04KFXQIX5iHTsd9c9jAAvfSRb0
E2qk44XEpYeSdy8CMqJBmrOGfixHxqiDi2uy1ywAlRrV73cJ8v9Goa8DQE8hN6P/
qW6pBdlJSjO60TI4JLscvkhVIGx1OYCk2Vg=
-----END CERTIFICATE-----
Generated at Fri Oct 10 17:51:28 2025 by rpki-client