Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a7185c7-454a-3e70-a99d-0f1f88eb9267.roa
File:                     8a7185c7-454a-3e70-a99d-0f1f88eb9267.roa (raw, json)
Hash identifier:          pGsA2wrVa4yAZgFQAZpAn9NUY+OeOU8oSgVW8KpozyE=
Subject key identifier:   E3:A9:DF:7C:5F:8D:0F:7F:8D:D9:85:4A:6C:B4:88:6F:A0:D1:F3:88
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290AF5700AC97DF9A43AD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a7185c7-454a-3e70-a99d-0f1f88eb9267.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100e:b210::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:af:57:00:ac:97:df:9a:43:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=ab3c4273-b82f-4a6c-9562-ca8bec58b695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:08:cc:d0:2d:3b:d5:90:9b:c5:69:49:4c:
                    27:3d:ea:16:0b:b9:08:14:79:28:e1:37:07:4f:71:
                    92:5e:8c:f1:a5:12:87:85:0a:aa:8d:48:39:20:83:
                    c0:d9:80:24:d0:78:02:22:fd:30:05:39:49:ab:07:
                    0f:d8:25:e2:c0:c3:00:53:17:cf:20:fb:0e:be:43:
                    95:6d:bc:98:16:99:14:7f:f0:9f:5b:19:b7:24:cb:
                    ca:35:55:31:b9:a5:84:36:ce:f7:b6:55:f9:75:7b:
                    3c:61:79:bf:ef:d7:66:66:d5:6f:dd:e7:5a:01:86:
                    41:fa:d7:5e:67:02:56:ea:6f:88:5f:34:ad:d7:cb:
                    31:fe:2f:65:2b:85:87:95:21:40:0d:24:e5:59:7c:
                    91:77:78:f9:26:6f:8c:b5:2f:7e:04:af:70:08:37:
                    f3:34:79:58:84:c5:53:3c:14:32:87:fa:c2:6a:84:
                    14:fc:48:8e:7b:65:0d:f9:2a:c0:0d:9d:fe:bf:73:
                    18:32:0c:a5:1e:5d:b4:9e:07:1b:1e:96:f6:6b:d4:
                    29:39:ab:73:ab:45:13:7e:8a:4d:f8:c0:12:33:1c:
                    c7:14:5c:9c:63:31:cb:66:3b:44:95:ba:94:8a:bc:
                    f3:57:d7:44:73:89:68:56:b4:eb:ed:85:79:02:f7:
                    49:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A9:DF:7C:5F:8D:0F:7F:8D:D9:85:4A:6C:B4:88:6F:A0:D1:F3:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a7185c7-454a-3e70-a99d-0f1f88eb9267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b210::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6e:e4:6b:70:0e:65:99:44:06:a5:fa:53:1b:54:26:60:a5:
         de:5c:d5:00:32:ae:77:65:bd:4a:9f:04:6a:60:24:4a:0f:d3:
         d5:3a:04:ea:ff:84:d6:27:9e:4c:83:bc:7b:3e:54:0d:e1:24:
         50:10:e5:09:10:c0:61:0e:42:9b:8b:8d:cc:a7:d5:31:ec:0b:
         a9:d1:c8:05:5f:15:eb:6e:3b:e8:a0:0a:cd:b5:5c:51:a4:8a:
         bc:10:1e:76:ef:f9:cc:0b:16:e3:51:1f:89:3a:7b:6f:f5:8a:
         5d:3e:46:64:50:4c:3a:29:9e:e3:82:93:93:23:90:16:bb:37:
         7d:dd:7e:e6:5a:32:22:56:7d:2d:97:f5:56:b5:18:77:ee:39:
         1e:a7:0c:78:29:aa:9c:b5:17:4b:4f:99:c2:5a:6e:d5:43:14:
         29:db:19:b7:3b:0c:2c:17:d1:62:d1:c1:00:00:cc:7e:e7:00:
         4a:85:2f:4c:26:a5:4f:bf:99:88:1d:82:e0:6c:b0:df:ae:3c:
         31:88:4c:ac:19:39:10:32:b5:ff:54:a8:ce:44:67:67:9a:f0:
         3e:79:15:dc:6d:3b:45:3b:eb:4f:d1:48:0b:bb:10:53:1b:70:
         db:cb:8a:ae:37:c5:3e:6e:da:4e:89:78:20:97:e9:bd:12:dc:
         18:68:7e:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikK9XAKyX35pDrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
YWIzYzQyNzMtYjgyZi00YTZjLTk1NjItY2E4YmVjNThiNjk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon4IzNAtO9WQm8VpSUwnPeoWC7kIFHko4TcH
T3GSXozxpRKHhQqqjUg5IIPA2YAk0HgCIv0wBTlJqwcP2CXiwMMAUxfPIPsOvkOV
bbyYFpkUf/CfWxm3JMvKNVUxuaWENs73tlX5dXs8YXm/79dmZtVv3edaAYZB+tde
ZwJW6m+IXzSt18sx/i9lK4WHlSFADSTlWXyRd3j5Jm+MtS9+BK9wCDfzNHlYhMVT
PBQyh/rCaoQU/EiOe2UN+SrADZ3+v3MYMgylHl20ngcbHpb2a9QpOatzq0UTfopN
+MASMxzHFFycYzHLZjtElbqUirzzV9dEc4loVrTr7YV5AvdJVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOOp33xfjQ9/jdmFSmy0iG+g0fOIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGE3MTg1YzctNDU0YS0z
ZTcwLWE5OWQtMGYxZjg4ZWI5MjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDrIQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFhu5GtwDmWZRAal+lMbVCZgpd5c1QAyrndlvUqfBGpgJEoP09U6
BOr/hNYnnkyDvHs+VA3hJFAQ5QkQwGEOQpuLjcyn1THsC6nRyAVfFetuO+igCs21
XFGkirwQHnbv+cwLFuNRH4k6e2/1il0+RmRQTDopnuOCk5MjkBa7N33dfuZaMiJW
fS2X9Va1GHfuOR6nDHgpqpy1F0tPmcJabtVDFCnbGbc7DCwX0WLRwQAAzH7nAEqF
L0wmpU+/mYgdguBssN+uPDGITKwZORAytf9UqM5EZ2ea8D55FdxtO0U760/RSAu7
EFMbcNvLiq43xT5u2k6JeCCX6b0S3BhofiY=
-----END CERTIFICATE-----
Generated at Wed Jul 9 21:27:39 2025 by rpki-client