Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a107b8-1de7-3714-8384-4323cf4e3b53.roa
File:                     60a107b8-1de7-3714-8384-4323cf4e3b53.roa (raw, json)
Hash identifier:          nooN/pryrXGOciWZZyfs15Y5rO8s8FkeOYuIoQJZuz0=
Subject key identifier:   52:28:90:5C:80:7A:65:07:97:0D:57:9A:D5:62:05:37:74:FD:A7:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68871C3D5306137337AF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a107b8-1de7-3714-8384-4323cf4e3b53.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        129.44.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:87:1c:3d:53:06:13:73:37:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=99c6b490-a977-418c-bdd3-accc0d6a0a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:60:89:6f:a9:2c:9e:7e:ef:76:d1:ad:99:
                    98:8c:4d:34:ab:20:41:23:ec:2b:95:a3:59:ba:db:
                    69:0a:bf:0a:bc:67:79:63:04:57:90:f0:52:2f:e3:
                    1b:3e:19:3a:c8:5a:65:90:48:24:5b:fc:66:77:cf:
                    06:36:12:a2:65:cc:b8:5c:0c:a0:b0:3a:58:19:35:
                    a7:85:38:59:69:c9:07:ff:a2:6f:41:72:5d:42:f2:
                    b7:f3:66:9f:34:34:9f:78:00:f8:a7:a2:1f:9c:d6:
                    b9:c7:0e:ed:41:37:6c:6b:2d:1d:96:4a:09:4a:23:
                    6a:93:a8:27:b8:5d:ff:9c:c2:1f:c8:1b:2f:79:aa:
                    02:9b:29:9b:0c:93:10:b4:37:58:30:18:32:85:5b:
                    b7:38:72:d7:8a:2a:81:a4:43:76:a7:eb:66:b3:e6:
                    45:30:89:9c:f8:c3:79:6d:60:4b:a3:2d:00:26:0a:
                    a2:65:a0:a0:29:b0:9c:ce:29:98:3c:8e:87:30:4a:
                    19:74:e5:92:b7:60:76:58:39:fc:a3:49:ff:b0:25:
                    aa:bc:58:6a:d9:69:d9:d2:d1:dc:03:9d:fb:91:df:
                    da:43:e1:5e:ba:8d:df:db:e8:1c:17:4b:f6:09:76:
                    2e:5b:47:89:a8:40:e8:14:3a:60:8f:c8:fe:9c:94:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:28:90:5C:80:7A:65:07:97:0D:57:9A:D5:62:05:37:74:FD:A7:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a107b8-1de7-3714-8384-4323cf4e3b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.44.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6a:77:51:ab:40:50:71:61:e6:e6:99:d0:a3:a4:f2:25:d4:
         98:aa:3a:65:36:87:a1:50:53:81:d5:64:5b:bc:c7:2b:7c:7a:
         36:95:ea:9c:c9:6f:4b:f2:18:4e:98:90:8d:bc:08:69:ba:0f:
         ee:34:38:fa:b1:bf:c8:8a:36:40:c9:e5:8e:c9:0f:59:3f:64:
         51:2b:29:d8:49:04:e8:4c:a9:de:e6:60:dd:e8:22:c8:e0:0f:
         fa:d6:0a:89:18:cc:68:12:ba:b5:b2:2f:97:a0:5d:82:b1:46:
         3b:ba:73:f4:19:a0:91:19:4d:21:7d:7d:c8:2d:a5:cf:21:bc:
         34:93:b3:15:00:52:d1:33:d3:91:f0:35:ee:61:fc:07:b8:36:
         a1:0b:42:02:4d:a2:d6:18:83:7f:1b:63:1a:45:b3:9d:a9:cc:
         d0:66:90:0b:d1:26:8d:17:79:13:3b:a9:9a:2a:29:34:7a:de:
         25:57:02:55:6c:2b:ee:1d:e5:2d:de:7e:e3:32:49:a8:85:18:
         ce:07:fe:97:c6:1d:51:3e:43:15:ca:9b:2e:30:f1:85:b9:3a:
         f9:6d:b6:bb:3e:5e:0d:fc:80:93:58:e0:ce:c8:fc:7a:35:ea:
         a9:79:6d:30:a8:2b:f0:e5:74:aa:6d:5b:b3:30:82:0e:51:7c:
         ce:19:1c:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIccPVMGE3M3rwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
OTljNmI0OTAtYTk3Ny00MThjLWJkZDMtYWNjYzBkNmEwYTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuidgiW+pLJ5+73bRrZmYjE00qyBBI+wrlaNZ
uttpCr8KvGd5YwRXkPBSL+MbPhk6yFplkEgkW/xmd88GNhKiZcy4XAygsDpYGTWn
hThZackH/6JvQXJdQvK382afNDSfeAD4p6IfnNa5xw7tQTdsay0dlkoJSiNqk6gn
uF3/nMIfyBsveaoCmymbDJMQtDdYMBgyhVu3OHLXiiqBpEN2p+tms+ZFMImc+MN5
bWBLoy0AJgqiZaCgKbCczimYPI6HMEoZdOWSt2B2WDn8o0n/sCWqvFhq2WnZ0tHc
A537kd/aQ+Feuo3f2+gcF0v2CXYuW0eJqEDoFDpgj8j+nJR/YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFIokFyAemUHlw1XmtViBTd0/ad/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjBhMTA3YjgtMWRlNy0z
NzE0LTgzODQtNDMyM2NmNGUzYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgSxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlqd1GrQFBxYebmmdCjpPIl1JiqOmU2h6FQU4HVZFu8xyt8ejaV6pzJ
b0vyGE6YkI28CGm6D+40OPqxv8iKNkDJ5Y7JD1k/ZFErKdhJBOhMqd7mYN3oIsjg
D/rWCokYzGgSurWyL5egXYKxRju6c/QZoJEZTSF9fcgtpc8hvDSTsxUAUtEz05Hw
Ne5h/Ae4NqELQgJNotYYg38bYxpFs52pzNBmkAvRJo0XeRM7qZoqKTR63iVXAlVs
K+4d5S3efuMySaiFGM4H/pfGHVE+QxXKmy4w8YW5Ovlttrs+Xg38gJNY4M7I/Ho1
6ql5bTCoK/DldKptW7Mwgg5RfM4ZHHw=
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:05:03 2026 by rpki-client