Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68c1d0bd-7d40-3c2f-a8b9-d8552c5a94ee.roa
File:                     68c1d0bd-7d40-3c2f-a8b9-d8552c5a94ee.roa (raw, json)
Hash identifier:          XcTlUnoWj6hezrn1BTCbabDHOuniVU1hA1J+jP8mb9o=
Subject key identifier:   9B:B8:61:F5:2B:58:D8:34:19:F1:BB:3D:99:C9:E0:EC:D7:1E:78:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A698B16B4E86E1FF104D5EB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68c1d0bd-7d40-3c2f-a8b9-d8552c5a94ee.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     6984
IP address blocks:        63.26.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:16:b4:e8:6e:1f:f1:04:d5:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=fd4838e3-912a-452b-b6e8-a65b037bd033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:1c:22:cf:2b:46:dc:ba:5c:15:e5:b0:bd:
                    ff:0d:31:c5:b3:64:9c:19:be:cd:b5:1e:60:bc:82:
                    b9:94:c3:94:c9:0a:a1:c2:58:58:23:61:99:9b:3d:
                    e9:5e:f9:76:8e:02:62:e9:ad:a6:a0:06:0c:b7:0d:
                    b9:16:2a:e3:d2:83:99:bd:70:aa:19:bd:e3:1c:9f:
                    10:d7:d9:7a:0c:42:37:73:02:51:00:f9:8b:2c:aa:
                    76:a4:50:90:51:a9:7f:fc:fa:b5:4f:3e:3d:e3:13:
                    db:cb:44:bd:be:a2:a8:1b:e0:48:61:8a:70:72:f1:
                    34:7b:24:93:53:9d:24:e3:12:66:5f:0c:54:df:0e:
                    a6:b8:8b:42:f0:0c:1f:c8:8a:d7:f0:18:e1:87:7d:
                    6e:14:ca:a5:a9:a2:e6:a1:c0:d4:21:8e:c4:46:fc:
                    9e:4a:a7:bf:de:33:1c:a2:b2:4b:27:e0:2f:d5:a0:
                    2d:e9:64:27:a6:18:36:6e:3f:9d:5a:b4:27:c8:67:
                    e9:a4:4b:2e:23:69:fb:20:0d:f7:70:19:1f:df:ef:
                    e5:d5:fa:1d:21:3a:42:ab:18:26:71:a4:be:07:74:
                    96:6a:a9:b5:3f:5f:bf:6a:fe:90:8b:18:ed:5e:0d:
                    9c:17:8b:28:4e:8e:2c:c0:a6:22:67:74:5f:ac:36:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B8:61:F5:2B:58:D8:34:19:F1:BB:3D:99:C9:E0:EC:D7:1E:78:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68c1d0bd-7d40-3c2f-a8b9-d8552c5a94ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.26.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:81:f6:0d:53:89:fa:e1:75:77:79:26:a7:dc:91:7e:29:45:
         0a:07:62:ac:8c:39:61:e0:11:67:69:79:4c:3a:54:f5:62:28:
         93:4e:08:15:fc:6f:7b:f7:1e:d2:dd:6c:26:16:70:60:0f:ec:
         81:e3:22:00:21:1e:9c:7a:e5:fd:e4:f8:b6:4f:8c:8e:3f:2d:
         01:e6:38:48:4a:cd:ac:c7:c0:7e:df:70:81:a8:45:8a:44:49:
         f1:44:dc:d1:5b:aa:31:26:ab:12:d2:c5:71:25:22:11:b9:71:
         73:24:20:9e:14:31:8a:33:2a:d3:14:41:12:00:96:1c:04:b4:
         ad:37:89:1e:d3:62:6c:39:77:c4:6a:e1:43:26:6d:81:c5:7d:
         45:66:99:3b:da:66:67:7a:d0:bf:2d:52:ed:c7:03:c0:22:8f:
         8a:3f:24:29:5e:84:d3:fb:c4:61:5d:ac:f2:5a:8c:14:0d:06:
         d4:c5:93:a5:29:5a:0f:01:b2:be:cc:c6:5e:1d:96:63:69:86:
         81:03:48:2d:6c:65:a0:4f:7f:15:db:2f:05:44:7d:da:24:94:
         79:81:57:fd:06:38:8b:66:64:09:4f:8c:39:9e:f7:b9:5a:24:
         c4:16:6e:d0:d4:33:49:32:a9:22:a6:45:6c:15:a0:63:a5:3c:
         a5:13:17:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixa06G4f8QTV64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZmQ0ODM4ZTMtOTEyYS00NTJiLWI2ZTgtYTY1YjAzN2JkMDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJMcIs8rRty6XBXlsL3/DTHFs2ScGb7NtR5g
vIK5lMOUyQqhwlhYI2GZmz3pXvl2jgJi6a2moAYMtw25Firj0oOZvXCqGb3jHJ8Q
19l6DEI3cwJRAPmLLKp2pFCQUal//Pq1Tz494xPby0S9vqKoG+BIYYpwcvE0eyST
U50k4xJmXwxU3w6muItC8AwfyIrX8Bjhh31uFMqlqaLmocDUIY7ERvyeSqe/3jMc
orJLJ+Av1aAt6WQnphg2bj+dWrQnyGfppEsuI2n7IA33cBkf3+/l1fodITpCqxgm
caS+B3SWaqm1P1+/av6QixjtXg2cF4soTo4swKYiZ3RfrDa5swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJu4YfUrWNg0GfG7PZnJ4OzXHngwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjhjMWQwYmQtN2Q0MC0z
YzJmLWE4YjktZDg1NTJjNWE5NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPxoJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmB9g1TifrhdXd5JqfckX4pRQoHYqyMOWHgEWdpeUw6VPViKJNOCBX8
b3v3HtLdbCYWcGAP7IHjIgAhHpx65f3k+LZPjI4/LQHmOEhKzazHwH7fcIGoRYpE
SfFE3NFbqjEmqxLSxXElIhG5cXMkIJ4UMYozKtMUQRIAlhwEtK03iR7TYmw5d8Rq
4UMmbYHFfUVmmTvaZmd60L8tUu3HA8Aij4o/JClehNP7xGFdrPJajBQNBtTFk6Up
Wg8Bsr7Mxl4dlmNphoEDSC1sZaBPfxXbLwVEfdoklHmBV/0GOItmZAlPjDme97la
JMQWbtDUM0kyqSKmRWwVoGOlPKUTFwI=
-----END CERTIFICATE-----
Generated at Wed Jul 9 20:59:56 2025 by rpki-client