Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5de4c899-db23-3372-921a-2a7a972beaa5.roa
File:                     5de4c899-db23-3372-921a-2a7a972beaa5.roa (raw, json)
Hash identifier:          mkJeJfSvLxlSd3sEyBCK792KVFJohSDsXe7l3nVShnA=
Subject key identifier:   29:91:40:62:DD:EF:C5:A9:7F:E3:76:4B:31:FC:F2:13:75:3C:BD:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A9B25E2AA0934F36C40847D6C
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5de4c899-db23-3372-921a-2a7a972beaa5.roa
Signing time:             Tue 22 Jul 2025 19:27:23 +0000
ROA not before:           Tue 22 Jul 2025 19:27:23 +0000
ROA not after:            Mon 20 Oct 2025 19:27:23 +0000
asID:                     6167
IP address blocks:        2600:1011:a03b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:25:e2:aa:09:34:f3:6c:40:84:7d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 22 19:27:23 2025 GMT
            Not After : Oct 20 19:27:23 2025 GMT
        Subject: CN=72d88055-fc9e-49aa-9a24-10a2d20c2f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:94:99:94:50:a3:78:95:69:43:fe:07:b3:
                    1a:b7:37:d6:7f:23:f6:1d:74:f1:f3:49:56:f3:06:
                    f3:ef:e7:6f:9b:05:8e:24:d9:1d:5b:42:bf:e2:63:
                    0b:eb:8b:1b:f9:bb:2d:15:f0:38:d9:1f:9d:2b:8c:
                    06:52:1c:ab:e0:c5:c5:a2:5d:1a:13:a8:92:d3:bb:
                    3a:57:95:9d:6e:2e:25:e8:c0:e6:61:92:7d:a6:a5:
                    33:4e:dc:8f:a9:f9:a4:d2:ec:64:5c:65:ea:88:69:
                    81:bf:f7:43:d0:2b:ce:8d:97:fa:a8:d3:34:5c:2c:
                    22:3a:e3:f7:14:16:5f:1b:61:8c:b1:38:6c:9f:34:
                    f0:13:e2:5e:c6:c1:cd:ac:5b:c3:f2:72:49:a9:b2:
                    b0:d9:f6:33:ea:04:d8:81:09:e7:18:ff:13:4d:23:
                    70:a0:40:a3:54:84:3c:f8:39:70:5f:61:95:85:6d:
                    88:c1:43:04:de:5f:5c:7f:28:c3:52:c8:20:a7:1b:
                    19:6d:e7:17:19:e2:36:f0:ab:51:32:07:62:89:d8:
                    f4:e8:72:57:64:32:ef:50:00:f0:4b:e3:71:26:f7:
                    d8:03:9b:6e:d2:90:35:e6:ed:30:c1:a2:74:3d:dd:
                    24:4a:3a:88:b3:d3:f5:e2:6e:cc:aa:b9:74:5a:cc:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:91:40:62:DD:EF:C5:A9:7F:E3:76:4B:31:FC:F2:13:75:3C:BD:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5de4c899-db23-3372-921a-2a7a972beaa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a03b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b0:9a:f1:ed:d8:ef:3e:94:ee:cc:fd:9b:43:3b:a6:51:79:
         24:da:c3:41:30:2b:a1:b5:1b:f4:0a:fe:a8:f2:1d:6e:8d:fc:
         2e:44:31:bc:37:27:9a:19:c5:47:bd:21:37:37:41:4b:ef:f7:
         85:d3:27:bd:a0:22:a3:ad:da:25:be:ca:63:52:95:1a:81:ce:
         78:cf:c7:ba:eb:a9:13:f1:76:0b:9a:5b:fb:e4:8e:79:11:bc:
         f8:80:ff:df:9d:1e:a4:41:ff:73:b6:a6:bc:46:a4:19:fa:7a:
         4c:59:ae:28:7d:6b:6d:b9:94:6a:57:93:6c:9a:ae:db:cd:cd:
         b6:dc:09:92:e0:d7:63:16:65:0a:7c:af:33:46:76:0e:f2:2f:
         87:f9:4c:8d:11:94:f4:cc:78:b8:29:f2:f0:8b:ab:8e:7f:7c:
         d2:b9:04:7a:8f:93:b0:b7:03:c2:2a:a3:b4:3c:6c:18:6b:ef:
         8f:b9:3d:7f:56:58:e9:d4:31:82:1b:73:f8:a6:c1:08:8a:0c:
         5b:40:73:e6:6e:8b:9d:79:d0:6e:58:44:b9:ee:dc:39:a9:db:
         32:1f:34:ff:f8:6f:40:7b:ca:9c:41:62:25:af:08:9a:83:7c:
         21:ef:df:1a:87:b6:ab:99:cf:a8:70:ae:c0:54:29:48:9e:7e:
         a3:59:46:10
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqbJeKqCTTzbECEfWwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcyMjE5MjcyM1oXDTI1MTAyMDE5MjcyM1owLzEtMCsGA1UEAxMk
NzJkODgwNTUtZmM5ZS00OWFhLTlhMjQtMTBhMmQyMGMyZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntWUmZRQo3iVaUP+B7MatzfWfyP2HXTx80lW
8wbz7+dvmwWOJNkdW0K/4mML64sb+bstFfA42R+dK4wGUhyr4MXFol0aE6iS07s6
V5Wdbi4l6MDmYZJ9pqUzTtyPqfmk0uxkXGXqiGmBv/dD0CvOjZf6qNM0XCwiOuP3
FBZfG2GMsThsnzTwE+JexsHNrFvD8nJJqbKw2fYz6gTYgQnnGP8TTSNwoECjVIQ8
+DlwX2GVhW2IwUME3l9cfyjDUsggpxsZbecXGeI28KtRMgdiidj06HJXZDLvUADw
S+NxJvfYA5tu0pA15u0wwaJ0Pd0kSjqIs9P14m7Mqrl0Wsy/LQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCmRQGLd78Wpf+N2SzH88hN1PL0LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWRlNGM4OTktZGIyMy0z
MzcyLTkyMWEtMmE3YTk3MmJlYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEaA7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADGwmvHt2O8+lO7M/ZtDO6ZReSTaw0EwK6G1G/QK/qjyHW6N/C5E
Mbw3J5oZxUe9ITc3QUvv94XTJ72gIqOt2iW+ymNSlRqBznjPx7rrqRPxdguaW/vk
jnkRvPiA/9+dHqRB/3O2prxGpBn6ekxZrih9a225lGpXk2yartvNzbbcCZLg12MW
ZQp8rzNGdg7yL4f5TI0RlPTMeLgp8vCLq45/fNK5BHqPk7C3A8Iqo7Q8bBhr74+5
PX9WWOnUMYIbc/imwQiKDFtAc+Zui5150G5YRLnu3Dmp2zIfNP/4b0B7ypxBYiWv
CJqDfCHv3xqHtquZz6hwrsBUKUiefqNZRhA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:57:43 2025 by rpki-client