Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa
File:                     3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa (raw, json)
Hash identifier:          BSAwIKSNOTBxtsjq+6bTYg5lAkvhkPr0QuYfhYWSUYA=
Subject key identifier:   26:2B:B3:9F:32:D6:8D:57:2D:EA:44:E0:04:4F:A0:97:C1:8D:81:FD
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584B64CCC14F206C10912DA2FF80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     2734
IP address blocks:        2604:3fc0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:c1:4f:20:6c:10:91:2d:a2:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2f36f42b-57f4-4aa2-a22f-79f0b6cd7bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:83:4b:fe:1c:43:52:bf:e0:e1:12:15:b3:
                    9d:ab:fa:88:5a:ae:2d:b7:bd:0a:f8:35:11:88:e3:
                    04:75:32:61:3f:61:81:a0:b1:9c:b4:a2:d0:33:ae:
                    d9:6b:1d:0e:ed:c9:9a:2a:69:fa:0a:06:e5:ad:cd:
                    e9:47:c4:64:86:0c:1a:73:46:02:a1:fc:df:2c:6b:
                    12:46:4a:af:d9:41:47:71:85:e0:de:5d:a5:03:1a:
                    76:96:74:7b:09:8b:dd:6f:fd:51:b9:87:17:bc:cd:
                    29:c7:c3:ff:b8:8b:b0:4e:20:b2:9c:d0:06:3c:6b:
                    ef:b8:68:48:23:43:3f:20:4d:76:fc:08:2d:9d:1a:
                    66:6e:bd:c3:f1:df:5e:39:55:3e:e3:9a:4b:81:3e:
                    4c:9b:61:80:01:dd:8d:c6:f0:a4:1a:3b:33:68:f4:
                    5b:f5:dc:9a:86:73:20:c8:70:d3:01:74:19:59:7c:
                    cb:06:8e:c8:f5:7d:ce:b0:62:35:95:d9:07:7f:75:
                    18:00:1f:ed:11:cb:bd:dc:f6:00:7c:b6:8c:55:8e:
                    f2:12:1b:48:53:c5:04:b4:8d:d9:9c:8f:27:c1:f5:
                    eb:89:0b:87:18:ce:de:f7:33:ad:ea:bb:90:07:cc:
                    6b:42:e3:46:85:13:82:04:7a:37:28:8a:dd:8d:56:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2B:B3:9F:32:D6:8D:57:2D:EA:44:E0:04:4F:A0:97:C1:8D:81:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/3d60f64f-d714-3b72-9146-0dd0f62e3cb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3fc0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c2:03:0d:a8:04:5d:ef:41:be:31:21:61:3b:6b:4e:32:d0:
         fb:d0:e1:df:78:90:28:10:6f:08:03:bd:13:88:ca:ff:26:29:
         00:97:56:69:e6:ec:91:47:5c:9c:83:c4:f6:32:d8:ab:24:b2:
         4e:17:8e:be:21:b7:82:70:b6:0d:31:72:28:17:27:0b:d7:72:
         6d:92:46:74:43:2a:10:6d:d9:3a:91:4e:8b:47:b5:18:ef:dd:
         f9:ba:23:b8:4e:19:2e:9f:49:5d:93:87:05:fb:9c:a4:fa:94:
         14:cf:2f:fe:2c:aa:3e:ff:b9:f1:32:05:96:42:a0:11:dc:d9:
         84:88:a4:b1:a6:97:d6:62:74:9c:83:5d:ca:46:42:8c:48:58:
         10:dd:65:13:a9:1e:f3:a9:45:29:41:58:48:be:c2:8a:8c:4f:
         09:11:ee:2d:41:29:45:b4:ec:2f:53:aa:fd:53:db:94:28:b6:
         73:da:f8:19:b3:f0:28:c5:26:1d:ec:a7:fb:87:c1:2f:8b:68:
         1d:6f:a9:25:6c:37:fc:f2:92:0a:9a:c4:24:83:50:49:d5:79:
         98:60:fc:dc:02:13:3d:6e:bb:76:e0:0c:69:14:ca:6e:43:6e:
         d4:6a:5c:c7:2a:c2:d0:6b:f2:53:44:f0:6a:aa:ea:0c:84:5a:
         ec:0e:63:32
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEtkzMFPIGwQkS2i/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MmYzNmY0MmItNTdmNC00YWEyLWEyMmYtNzlmMGI2Y2Q3YmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5WDS/4cQ1K/4OESFbOdq/qIWq4tt70K+DUR
iOMEdTJhP2GBoLGctKLQM67Zax0O7cmaKmn6Cgblrc3pR8Rkhgwac0YCofzfLGsS
Rkqv2UFHcYXg3l2lAxp2lnR7CYvdb/1RuYcXvM0px8P/uIuwTiCynNAGPGvvuGhI
I0M/IE12/AgtnRpmbr3D8d9eOVU+45pLgT5Mm2GAAd2NxvCkGjszaPRb9dyahnMg
yHDTAXQZWXzLBo7I9X3OsGI1ldkHf3UYAB/tEcu93PYAfLaMVY7yEhtIU8UEtI3Z
nI8nwfXriQuHGM7e9zOt6ruQB8xrQuNGhROCBHo3KIrdjVZnvQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCYrs58y1o1XLepE4ARPoJfBjYH9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvM2Q2MGY2NGYtZDcxNC0z
YjcyLTkxNDYtMGRkMGY2MmUzY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgQ/wCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQsIDDagEXe9BvjEhYTtrTjLQ+9Dh33iQKBBvCAO9E4jK/yYpAJdW
aebskUdcnIPE9jLYqySyTheOviG3gnC2DTFyKBcnC9dybZJGdEMqEG3ZOpFOi0e1
GO/d+bojuE4ZLp9JXZOHBfucpPqUFM8v/iyqPv+58TIFlkKgEdzZhIiksaaX1mJ0
nINdykZCjEhYEN1lE6ke86lFKUFYSL7CioxPCRHuLUEpRbTsL1Oq/VPblCi2c9r4
GbPwKMUmHeyn+4fBL4toHW+pJWw3/PKSCprEJINQSdV5mGD83AITPW67duAMaRTK
bkNu1GpcxyrC0GvyU0TwaqrqDIRa7A5jMg==
-----END CERTIFICATE-----
Generated at Fri Oct 17 20:41:09 2025 by rpki-client