Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bf05112-0097-3209-8f44-fdb9b9750060.roa
File:                     4bf05112-0097-3209-8f44-fdb9b9750060.roa (raw, json)
Hash identifier:          AVGgV1ejXysUIhSTba9fnBldDNiTwZoQ63GteCkBkOk=
Subject key identifier:   77:77:7F:90:F7:9F:B5:BD:55:73:7C:78:96:98:1F:7F:AC:C7:82:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8DD5FF94A2463934E17A9900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bf05112-0097-3209-8f44-fdb9b9750060.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     6167
IP address blocks:        2600:1012:a022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:ff:94:a2:46:39:34:e1:7a:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=71afd84e-1af7-42fb-bab5-4304ab666b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:88:0a:95:63:60:ae:79:3e:81:b8:47:04:cc:
                    a9:a6:e4:c8:d3:cf:f4:11:eb:b1:35:37:80:62:9d:
                    58:e4:b2:b9:5c:4e:d9:06:d2:23:a0:1b:83:dd:13:
                    70:d6:a2:5b:8e:f7:6d:b7:8a:d9:97:47:09:a5:c9:
                    2c:03:9a:ca:7c:03:4d:41:00:28:20:05:1d:6c:84:
                    98:04:82:a6:a1:67:a7:58:b7:de:ae:69:7f:96:b6:
                    8d:5f:35:85:23:57:5b:0b:19:ab:87:78:0c:9e:3b:
                    a1:28:17:6a:53:9e:00:3a:d9:0e:0f:79:35:6c:a4:
                    e4:03:d1:ca:62:cf:8b:21:f1:82:68:cb:85:83:d8:
                    c7:2c:da:7e:49:1f:28:d1:b7:f8:77:40:00:71:ed:
                    a3:02:ac:a3:a8:ba:80:81:7c:37:09:d9:d0:e6:ba:
                    6a:ca:5d:37:f8:40:17:70:e2:bc:04:54:29:ae:69:
                    a9:53:07:35:8f:2a:db:44:67:04:cc:ba:c8:98:34:
                    2c:06:bd:0f:22:86:e2:fd:ad:f7:e7:e4:60:02:59:
                    b1:20:6a:3d:67:8a:98:61:5d:a7:0a:79:70:a4:c1:
                    60:a3:34:83:bb:93:63:4a:d2:9c:b7:14:98:13:bf:
                    48:86:a2:8d:87:65:1f:d1:2a:d2:40:61:d0:c6:1c:
                    84:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:77:7F:90:F7:9F:B5:BD:55:73:7C:78:96:98:1F:7F:AC:C7:82:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bf05112-0097-3209-8f44-fdb9b9750060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:18:ad:70:ef:ea:f1:ca:93:e2:36:1f:c1:5e:3a:33:71:3d:
         43:58:5a:8a:0d:a1:73:89:b0:cf:7c:98:9e:8c:fc:2c:36:c1:
         00:08:a4:1d:a8:77:65:00:07:a0:fe:82:6f:55:f3:d2:65:f7:
         9d:06:8d:9f:3a:fa:18:fa:7f:00:d4:2a:ca:75:57:49:ab:7f:
         19:1c:f6:68:aa:1c:79:90:72:dd:f4:bb:29:12:6b:5e:70:7a:
         cc:19:f9:4c:7d:12:30:1a:3a:8f:b1:62:96:1f:6c:ef:55:e8:
         77:29:ad:ec:c7:da:f7:08:58:0b:45:e9:24:48:89:06:8a:7e:
         f3:69:e2:e0:b8:52:26:22:2e:0e:b3:d7:a0:23:df:15:af:7e:
         c1:68:e7:83:53:76:e3:80:5d:d0:b4:43:8b:56:88:f3:25:05:
         e9:d1:7f:af:1d:8b:3e:d0:5c:b8:79:9b:b5:4a:16:e7:01:fd:
         b1:80:c7:99:7e:d8:d4:93:7f:07:cd:a1:df:9b:ba:36:45:91:
         54:18:f0:c7:5a:34:72:ed:3d:c0:5e:b2:d6:23:07:8d:0b:9e:
         9d:2a:73:98:3e:7a:81:7a:f6:dd:52:7f:1f:e0:e8:39:12:74:
         f5:09:02:f1:dc:d8:cd:8f:a5:3a:f5:2b:d5:c4:a6:71:c1:5a:
         d2:08:c9:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqN1f+UokY5NOF6mQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk
NzFhZmQ4NGUtMWFmNy00MmZiLWJhYjUtNDMwNGFiNjY2YjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4gKlWNgrnk+gbhHBMyppuTI08/0EeuxNTeA
Yp1Y5LK5XE7ZBtIjoBuD3RNw1qJbjvdtt4rZl0cJpcksA5rKfANNQQAoIAUdbISY
BIKmoWenWLferml/lraNXzWFI1dbCxmrh3gMnjuhKBdqU54AOtkOD3k1bKTkA9HK
Ys+LIfGCaMuFg9jHLNp+SR8o0bf4d0AAce2jAqyjqLqAgXw3CdnQ5rpqyl03+EAX
cOK8BFQprmmpUwc1jyrbRGcEzLrImDQsBr0PIobi/a335+RgAlmxIGo9Z4qYYV2n
CnlwpMFgozSDu5NjStKctxSYE79IhqKNh2Uf0SrSQGHQxhyErwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHd3f5D3n7W9VXN8eJaYH3+sx4LzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGJmMDUxMTItMDA5Ny0z
MjA5LThmNDQtZmRiOWI5NzUwMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEqAi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACIYrXDv6vHKk+I2H8FeOjNxPUNYWooNoXOJsM98mJ6M/Cw2wQAI
pB2od2UAB6D+gm9V89Jl950GjZ86+hj6fwDUKsp1V0mrfxkc9miqHHmQct30uykS
a15weswZ+Ux9EjAaOo+xYpYfbO9V6HcprezH2vcIWAtF6SRIiQaKfvNp4uC4UiYi
Lg6z16Aj3xWvfsFo54NTduOAXdC0Q4tWiPMlBenRf68diz7QXLh5m7VKFucB/bGA
x5l+2NSTfwfNod+bujZFkVQY8MdaNHLtPcBestYjB40Lnp0qc5g+eoF69t1Sfx/g
6DkSdPUJAvHc2M2PpTr1K9XEpnHBWtIIyYI=
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:45 2025 by rpki-client