Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859ff9-2ff0-3259-8eec-85420d4c126d.roa
File:                     14859ff9-2ff0-3259-8eec-85420d4c126d.roa (raw, json)
Hash identifier:          jxlOspYvojKJB/S+0YcU7LV+vRuUEGhNqFbvQRNLqvY=
Subject key identifier:   3C:5C:E6:8C:38:CA:51:37:9A:B2:FD:02:CE:58:4E:91:3A:0D:21:39
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8DD5FFD860C9909CE4036940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859ff9-2ff0-3259-8eec-85420d4c126d.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     6167
IP address blocks:        2600:1008:a032::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:ff:d8:60:c9:90:9c:e4:03:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=a9a139e6-5168-4107-bc44-ed7b52d12bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:57:41:56:17:99:a8:08:28:4b:4e:f6:62:e1:
                    22:d1:d8:be:e4:36:2e:b5:bf:65:f6:2d:b0:d9:64:
                    e2:17:94:c7:21:35:e9:3b:2e:22:7a:2d:e7:d5:65:
                    d2:35:86:68:5b:56:04:41:62:4b:0f:6a:1d:fd:4b:
                    54:48:2b:ed:96:a9:0a:7c:17:fb:08:a0:14:8a:38:
                    14:9f:1e:58:b0:7d:11:f1:32:91:1e:33:53:ab:be:
                    9d:08:cb:f1:c9:ef:71:0c:d3:cd:63:af:c8:81:42:
                    c2:95:f5:cc:d8:57:f9:af:2d:4d:a0:f0:35:3f:04:
                    14:c0:c3:a1:d6:99:55:e2:16:2b:9b:01:cf:7f:97:
                    43:76:b6:1a:97:25:c2:a3:dd:d1:f4:6b:9e:fe:98:
                    58:9a:a5:c8:b1:c0:a3:05:69:64:32:e6:b7:72:9a:
                    4e:ca:b3:41:4d:2d:15:1d:ff:2a:8a:bd:e1:46:c8:
                    9b:db:79:9d:be:1d:66:b1:06:72:67:62:e8:83:df:
                    21:d3:fe:02:91:5a:e0:a9:34:b3:54:8e:0e:2c:e2:
                    af:dc:52:f0:e9:f0:0a:3f:1b:f1:de:c5:97:de:b6:
                    10:7f:7a:18:82:cd:eb:26:e9:6e:59:c7:72:63:c2:
                    5a:76:2b:d7:a5:18:c1:bf:9b:bd:f6:92:bd:4a:eb:
                    09:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5C:E6:8C:38:CA:51:37:9A:B2:FD:02:CE:58:4E:91:3A:0D:21:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14859ff9-2ff0-3259-8eec-85420d4c126d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:a032::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:78:40:e4:59:09:8d:b5:35:07:87:f3:6c:41:23:a9:50:fe:
         c0:f2:96:cb:fa:16:6a:55:0d:bb:e1:b1:5c:19:56:9e:63:ec:
         a7:34:5c:60:9f:f6:1c:76:c2:c5:e7:fe:52:eb:ee:58:8d:b3:
         6f:bc:ea:9f:0c:e2:ee:f1:03:49:00:e7:55:5a:7c:c6:11:aa:
         f2:97:92:e1:49:26:fd:62:7c:99:db:73:2f:45:96:1d:b7:43:
         cc:00:53:6f:a6:ac:96:3c:9e:77:da:89:e9:cf:65:07:d4:49:
         e4:91:76:a8:d1:28:7d:40:cb:a1:e8:45:8e:20:44:05:0f:a2:
         de:1a:bd:ca:e0:6d:75:5e:fd:4c:3e:54:e8:b0:44:9c:99:b2:
         1d:6e:80:25:1e:7f:70:1c:ca:ac:ae:ab:db:5a:95:fa:fe:0b:
         69:5b:09:bb:47:7f:70:c5:a9:e2:6f:d9:d9:4e:fa:2f:7f:9a:
         bf:c8:79:0c:22:8d:15:01:ef:7b:fd:73:0e:e1:a8:2a:28:c6:
         fd:33:33:36:c8:f8:da:86:94:68:0c:39:c2:20:d2:39:c0:ed:
         9c:b5:ac:fa:33:1d:8a:51:b0:2d:32:a2:81:e5:ad:eb:5d:2c:
         18:d3:29:e8:d3:60:d8:35:da:91:d0:49:88:21:b6:f2:fb:56:
         4b:31:1b:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqN1f/YYMmQnOQDaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk
YTlhMTM5ZTYtNTE2OC00MTA3LWJjNDQtZWQ3YjUyZDEyYmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71dBVheZqAgoS072YuEi0di+5DYutb9l9i2w
2WTiF5THITXpOy4iei3n1WXSNYZoW1YEQWJLD2od/UtUSCvtlqkKfBf7CKAUijgU
nx5YsH0R8TKRHjNTq76dCMvxye9xDNPNY6/IgULClfXM2Ff5ry1NoPA1PwQUwMOh
1plV4hYrmwHPf5dDdrYalyXCo93R9Gue/phYmqXIscCjBWlkMua3cppOyrNBTS0V
Hf8qir3hRsib23mdvh1msQZyZ2Log98h0/4CkVrgqTSzVI4OLOKv3FLw6fAKPxvx
3sWX3rYQf3oYgs3rJuluWcdyY8JadivXpRjBv5u99pK9SusJcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDxc5ow4ylE3mrL9As5YTpE6DSE5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTQ4NTlmZjktMmZmMC0z
MjU5LThlZWMtODU0MjBkNGMxMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCKAy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJN4QORZCY21NQeH82xBI6lQ/sDylsv6FmpVDbvhsVwZVp5j7Kc0
XGCf9hx2wsXn/lLr7liNs2+86p8M4u7xA0kA51VafMYRqvKXkuFJJv1ifJnbcy9F
lh23Q8wAU2+mrJY8nnfaienPZQfUSeSRdqjRKH1Ay6HoRY4gRAUPot4avcrgbXVe
/Uw+VOiwRJyZsh1ugCUef3Acyqyuq9talfr+C2lbCbtHf3DFqeJv2dlO+i9/mr/I
eQwijRUB73v9cw7hqCooxv0zMzbI+NqGlGgMOcIg0jnA7Zy1rPozHYpRsC0yooHl
retdLBjTKejTYNg12pHQSYghtvL7VksxG5g=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:01 2025 by rpki-client