Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39996b2a-0bb6-3563-bc7a-6b2abc0fb8ea.roa
File:                     39996b2a-0bb6-3563-bc7a-6b2abc0fb8ea.roa (raw, json)
Hash identifier:          b309BtcKsXygcS+rWvnEsOpmOAKl5qCcGPOV7GZs2rY=
Subject key identifier:   EF:39:B5:F9:44:D2:88:9A:70:9D:DD:71:4D:85:AF:09:13:D3:24:D9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A7D15EE745C61EAD6958F3900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39996b2a-0bb6-3563-bc7a-6b2abc0fb8ea.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     6167
IP address blocks:        2600:1015:a128::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:ee:74:5c:61:ea:d6:95:8f:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=2a0a21ff-635a-410d-a16b-b8baa712c221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:3e:2d:54:69:5d:36:94:9d:e2:c6:67:ba:
                    6b:52:65:75:a7:af:43:27:00:a5:59:d1:a9:d2:d2:
                    0d:80:eb:9e:35:60:68:cf:66:18:dd:00:0f:67:96:
                    46:cb:c3:a4:12:19:dd:08:1a:5a:bf:1d:21:d6:35:
                    59:9b:4d:43:c1:6e:ef:94:be:bf:f5:5a:68:2d:c6:
                    c6:76:71:d9:30:8b:1b:eb:2c:8f:d5:53:8c:40:fc:
                    6b:3b:b1:0a:cb:95:69:fa:26:34:9a:55:9f:e9:dd:
                    0b:a3:ba:0a:5f:d8:a3:02:2e:95:88:ba:a0:52:31:
                    8a:b1:c0:d5:f8:19:a1:6d:f5:b0:a8:9e:c7:b7:bc:
                    87:5a:86:8e:20:d4:da:ca:cc:c2:74:a8:47:1d:e0:
                    08:61:ec:38:63:2d:5b:82:88:7d:30:5c:60:df:5e:
                    d7:ad:7a:b6:ef:c9:8c:e2:a2:ab:a5:0a:02:fe:2f:
                    fd:ae:a8:56:58:7e:98:e5:cc:11:19:9f:e9:e2:0c:
                    00:43:b9:8a:a3:aa:f6:d7:50:aa:87:db:c4:b8:ab:
                    ee:d4:07:eb:ae:49:77:30:ce:54:79:fe:bc:30:7a:
                    ae:c5:dd:bd:11:b9:b7:bc:76:33:d1:f0:f9:14:06:
                    3b:75:7b:3c:a1:3e:f3:ec:8a:fe:29:aa:95:b8:ab:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:B5:F9:44:D2:88:9A:70:9D:DD:71:4D:85:AF:09:13:D3:24:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39996b2a-0bb6-3563-bc7a-6b2abc0fb8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a128::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6a:20:b5:77:6f:ea:16:eb:d5:83:16:49:3a:14:ee:44:1b:
         b7:e3:9b:26:8b:46:9a:b8:c4:e2:0a:c2:d3:c1:86:d9:ec:03:
         41:93:df:86:b1:98:11:51:3e:7d:67:12:ea:73:1c:fa:89:a2:
         1c:ea:eb:09:73:b6:25:54:ac:61:13:1f:fb:77:12:41:78:3f:
         7f:07:46:5b:bb:88:d9:8d:66:3c:26:12:3c:50:90:a0:b5:32:
         e5:5c:4d:e9:a4:c1:30:31:82:c1:b1:4e:fd:2b:f7:70:1c:4b:
         d6:aa:ac:5a:90:3e:d1:46:15:f9:24:60:1c:80:d1:69:0f:ff:
         a6:e4:c0:7f:5d:33:ac:59:2d:5f:86:2a:82:26:4c:50:bd:cc:
         9f:ad:3b:43:be:cb:c2:fc:d5:2e:be:2a:13:60:c2:28:b2:dd:
         38:52:62:4c:20:de:72:ba:f9:25:d7:e9:4e:df:d2:fd:bc:b0:
         17:34:83:2a:eb:09:47:82:b8:1a:76:64:a4:96:d2:59:e4:ad:
         0e:c9:52:23:78:4c:c1:86:e9:4f:eb:29:3c:b7:96:1a:b3:d1:
         bb:dd:1a:25:17:54:b6:2f:e0:bd:fd:1c:22:c0:fa:25:74:5c:
         30:58:68:82:56:53:ad:25:ba:0e:1e:5b:f7:59:c8:fc:d0:8d:
         cb:f3:37:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEp9Fe50XGHq1pWPOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
MmEwYTIxZmYtNjM1YS00MTBkLWExNmItYjhiYWE3MTJjMjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8c+LVRpXTaUneLGZ7prUmV1p69DJwClWdGp
0tINgOueNWBoz2YY3QAPZ5ZGy8OkEhndCBpavx0h1jVZm01DwW7vlL6/9VpoLcbG
dnHZMIsb6yyP1VOMQPxrO7EKy5Vp+iY0mlWf6d0Lo7oKX9ijAi6ViLqgUjGKscDV
+BmhbfWwqJ7Ht7yHWoaOINTayszCdKhHHeAIYew4Yy1bgoh9MFxg317XrXq278mM
4qKrpQoC/i/9rqhWWH6Y5cwRGZ/p4gwAQ7mKo6r211Cqh9vEuKvu1Afrrkl3MM5U
ef68MHquxd29Ebm3vHYz0fD5FAY7dXs8oT7z7Ir+KaqVuKtaQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO85tflE0oiacJ3dcU2FrwkT0yTZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzk5OTZiMmEtMGJiNi0z
NTYzLWJjN2EtNmIyYWJjMGZiOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQFaEo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADdqILV3b+oW69WDFkk6FO5EG7fjmyaLRpq4xOIKwtPBhtnsA0GT
34axmBFRPn1nEupzHPqJohzq6wlztiVUrGETH/t3EkF4P38HRlu7iNmNZjwmEjxQ
kKC1MuVcTemkwTAxgsGxTv0r93AcS9aqrFqQPtFGFfkkYByA0WkP/6bkwH9dM6xZ
LV+GKoImTFC9zJ+tO0O+y8L81S6+KhNgwiiy3ThSYkwg3nK6+SXX6U7f0v28sBc0
gyrrCUeCuBp2ZKSW0lnkrQ7JUiN4TMGG6U/rKTy3lhqz0bvdGiUXVLYv4L39HCLA
+iV0XDBYaIJWU60lug4eW/dZyPzQjcvzN6A=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:57:15 2025 by rpki-client