Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e71ab7b1-b666-38b8-8041-ad46358d155e.roa
File:                     e71ab7b1-b666-38b8-8041-ad46358d155e.roa (raw, json)
Hash identifier:          DkJVg/m3HwC8j6EGQIAeJaziEjFfPPeCPcDZnPOf/6U=
Subject key identifier:   0B:91:52:70:BD:E0:61:CF:67:BC:17:CC:A9:8D:D2:16:49:3B:0C:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C9A5F6E3CEC23C756A400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e71ab7b1-b666-38b8-8041-ad46358d155e.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:b0cc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9a:5f:6e:3c:ec:23:c7:56:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=8c0e1bc1-5675-4633-87ff-648d446643b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:21:96:01:e8:0b:fb:64:29:be:77:f2:b9:
                    55:35:bc:c3:f5:7a:d1:05:27:29:1a:d3:2e:c3:07:
                    c2:43:fc:a3:c3:c7:2b:97:4f:75:6e:55:a5:4d:f8:
                    09:3d:6c:a0:15:e3:71:ad:c7:54:d3:ed:50:5a:37:
                    9c:a6:cb:09:06:0f:29:32:ff:51:8b:a3:ce:de:46:
                    ff:68:9d:2a:f4:e4:87:f7:56:93:98:42:dc:ca:72:
                    bc:4c:4c:de:b8:a1:7a:ba:77:bc:ba:bd:8f:74:a3:
                    66:a3:6b:89:fc:e3:21:ca:51:2d:1f:a1:15:8c:f4:
                    1f:50:a1:f5:45:f6:dc:2e:9c:7d:0e:d8:48:88:6f:
                    59:3f:18:c9:ef:54:ed:5c:f9:43:29:13:7e:8b:2a:
                    35:bd:14:51:1b:b0:f7:23:71:31:24:3d:65:1f:76:
                    6a:51:e5:b8:cb:43:52:b1:e4:12:a6:1e:ce:06:c1:
                    be:11:f3:7a:90:74:f2:27:e7:61:1c:d0:e2:2b:5e:
                    c8:86:b1:c5:f9:6f:a4:41:50:4e:79:3d:05:0c:d5:
                    48:b3:62:53:50:a5:6e:60:ac:1a:b7:2e:40:ec:9d:
                    81:87:45:da:c7:23:69:da:88:50:31:d2:db:69:6a:
                    58:90:a4:e8:3e:b3:a6:b7:b0:94:fe:44:2f:af:c2:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:91:52:70:BD:E0:61:CF:67:BC:17:CC:A9:8D:D2:16:49:3B:0C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e71ab7b1-b666-38b8-8041-ad46358d155e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0cc::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:48:40:f9:ea:d6:fb:a6:d6:9d:29:82:6c:63:75:d3:2a:7e:
         a6:a4:5c:fe:09:50:60:e2:1a:e7:1d:15:36:0f:c5:d7:6f:36:
         b2:b6:ba:1f:83:71:78:c6:78:99:db:8a:47:1e:b5:85:41:d8:
         6e:37:5b:1b:fb:b2:94:a0:5d:71:8f:69:fd:6b:95:b5:23:45:
         49:62:16:76:de:b0:d1:6d:b2:3f:2b:6c:fe:b3:0d:cc:5a:00:
         94:de:e3:d7:b2:27:50:81:28:33:ae:90:3c:ad:1f:65:ac:8c:
         0a:df:73:c0:c1:53:2a:80:6d:38:1f:1b:c4:95:c6:79:a4:66:
         a9:8a:dc:40:3e:cd:fe:99:aa:e6:ac:4d:cf:05:5d:e8:29:2d:
         2d:b2:d2:35:10:a7:17:e9:d2:ae:31:c4:82:f9:49:f0:2d:98:
         8c:47:e8:22:6b:eb:15:58:f2:93:51:31:b2:c2:a3:44:ad:d3:
         d7:fd:93:42:76:08:cf:55:5a:8b:c9:93:72:26:ae:53:4a:65:
         51:ce:19:a2:e8:21:a3:5b:aa:e8:93:38:84:e5:3c:cb:7a:9b:
         89:cf:dd:c7:46:af:e3:30:71:2c:78:ee:d0:a2:26:65:0f:6f:
         25:4c:c7:87:e1:90:da:ba:76:53:93:93:28:35:fd:42:c5:be:
         b4:d2:51:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtDTJpfbjzsI8dWpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
OGMwZTFiYzEtNTY3NS00NjMzLTg3ZmYtNjQ4ZDQ0NjY0M2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNUhlgHoC/tkKb538rlVNbzD9XrRBScpGtMu
wwfCQ/yjw8crl091blWlTfgJPWygFeNxrcdU0+1QWjecpssJBg8pMv9Ri6PO3kb/
aJ0q9OSH91aTmELcynK8TEzeuKF6une8ur2PdKNmo2uJ/OMhylEtH6EVjPQfUKH1
RfbcLpx9DthIiG9ZPxjJ71TtXPlDKRN+iyo1vRRRG7D3I3ExJD1lH3ZqUeW4y0NS
seQSph7OBsG+EfN6kHTyJ+dhHNDiK17IhrHF+W+kQVBOeT0FDNVIs2JTUKVuYKwa
ty5A7J2Bh0XaxyNp2ohQMdLbaWpYkKToPrOmt7CU/kQvr8J1UwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAuRUnC94GHPZ7wXzKmN0hZJOwzfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTcxYWI3YjEtYjY2Ni0z
OGI4LTgwNDEtYWQ0NjM1OGQxNTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbDM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAVIQPnq1vum1p0pgmxjddMqfqakXP4JUGDiGucdFTYPxddvNrK2
uh+DcXjGeJnbikcetYVB2G43Wxv7spSgXXGPaf1rlbUjRUliFnbesNFtsj8rbP6z
DcxaAJTe49eyJ1CBKDOukDytH2WsjArfc8DBUyqAbTgfG8SVxnmkZqmK3EA+zf6Z
quasTc8FXegpLS2y0jUQpxfp0q4xxIL5SfAtmIxH6CJr6xVY8pNRMbLCo0St09f9
k0J2CM9VWovJk3ImrlNKZVHOGaLoIaNbquiTOITlPMt6m4nP3cdGr+MwcSx47tCi
JmUPbyVMx4fhkNq6dlOTkyg1/ULFvrTSURA=
-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:08 2025 by rpki-client