Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a107b8-1de7-3714-8384-4323cf4e3b53.roa
File:                     60a107b8-1de7-3714-8384-4323cf4e3b53.roa (raw, json)
Hash identifier:          8+sTNTcxrUG7fEXKpqNV2dveNaxiGoUKGNkCD/Qjdbo=
Subject key identifier:   B1:EA:FA:97:93:3F:F4:4F:DA:7F:91:FF:94:9E:08:05:51:53:6B:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7DDD566DB84884B28ABC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a107b8-1de7-3714-8384-4323cf4e3b53.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        129.44.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:dd:d5:66:db:84:88:4b:28:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=f04e67e6-29b0-4191-9421-edc389113ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:9e:28:7f:c0:8a:6b:08:d4:a9:9f:e6:84:
                    45:5a:ec:08:eb:42:82:e1:5d:64:c3:48:5f:d8:2e:
                    43:88:78:e2:f9:72:d9:71:6b:2b:67:dd:ee:0a:0c:
                    0b:f0:fc:0f:63:ce:57:54:9e:da:d9:b1:9b:37:e9:
                    70:18:19:67:5c:b3:52:a3:3f:c6:c9:f2:0d:0f:b7:
                    e7:ce:26:0a:55:fd:45:4a:56:3b:df:d1:6c:6e:40:
                    85:13:0d:d2:cc:18:56:92:32:6a:8e:bf:e9:55:d3:
                    99:62:bc:a2:20:3e:75:73:a3:43:db:3d:aa:73:9a:
                    c9:6a:e4:ba:0c:59:a9:68:d4:24:c5:e2:70:bf:6c:
                    09:72:18:83:82:51:29:05:7a:f2:7c:95:c8:2f:90:
                    d4:90:ab:5b:05:c0:1e:b1:bb:e3:43:de:bc:f1:9f:
                    0c:2f:d1:d2:38:21:ef:dc:6f:e6:97:57:46:cf:14:
                    01:30:07:ac:b7:b1:61:20:1b:54:65:af:9e:44:77:
                    8e:a2:c1:1b:b4:a7:66:ac:be:fb:64:74:b6:f6:12:
                    7b:e2:16:6c:0a:72:c1:a0:53:38:db:ac:8f:12:96:
                    e9:c2:a0:56:80:a7:a6:bb:5f:60:c4:60:b8:89:9b:
                    fc:db:31:79:f8:e2:eb:15:ac:2b:7b:ce:27:8f:5b:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EA:FA:97:93:3F:F4:4F:DA:7F:91:FF:94:9E:08:05:51:53:6B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a107b8-1de7-3714-8384-4323cf4e3b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.44.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:76:ce:7c:a7:eb:ab:86:6a:3c:46:df:7d:a0:0a:40:29:ba:
         37:6b:ea:25:14:0d:33:6a:a6:e4:9b:a4:5c:4b:8f:6c:43:cc:
         b2:8c:37:09:ab:cf:dc:af:df:e3:df:5e:0e:94:a9:96:21:0b:
         6b:29:6e:5b:aa:8d:97:35:bf:a5:f6:c5:9e:67:4e:fb:6a:d1:
         3c:0f:65:a3:db:fb:9c:d5:3b:f7:44:04:18:b1:ea:e8:97:93:
         15:40:73:dd:dd:59:78:68:1a:da:49:bd:4d:d0:a9:12:f6:7c:
         a2:c2:7a:9f:0c:9a:17:fe:7f:63:bd:b6:2c:6f:14:f4:86:10:
         b2:33:de:0e:c8:68:fc:d4:10:42:8f:ee:21:f5:c8:a8:34:4c:
         1d:f0:f9:8b:d0:ed:71:00:ea:af:5a:52:f9:b0:f4:92:9b:70:
         7b:fc:ea:de:9e:24:38:0a:91:a2:8c:d9:c3:4f:38:5d:51:66:
         b2:10:77:a8:59:02:a1:c4:1d:c4:60:c0:87:b0:8b:67:82:08:
         ad:a2:7b:8e:90:74:7f:be:d8:fa:1b:8a:a8:6c:a7:a9:d7:f5:
         8c:fe:3d:ac:ea:1e:f2:0a:71:e0:51:09:29:af:c0:3f:c1:0c:
         2b:b4:1c:92:b2:cf:c7:53:a7:fa:4e:e0:7e:c2:af:79:70:89:
         03:dc:16:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy993VZtuEiEsoq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
ZjA0ZTY3ZTYtMjliMC00MTkxLTk0MjEtZWRjMzg5MTEzY2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW2eKH/AimsI1Kmf5oRFWuwI60KC4V1kw0hf
2C5DiHji+XLZcWsrZ93uCgwL8PwPY85XVJ7a2bGbN+lwGBlnXLNSoz/GyfIND7fn
ziYKVf1FSlY739FsbkCFEw3SzBhWkjJqjr/pVdOZYryiID51c6ND2z2qc5rJauS6
DFmpaNQkxeJwv2wJchiDglEpBXryfJXIL5DUkKtbBcAesbvjQ9688Z8ML9HSOCHv
3G/ml1dGzxQBMAest7FhIBtUZa+eRHeOosEbtKdmrL77ZHS29hJ74hZsCnLBoFM4
26yPEpbpwqBWgKemu19gxGC4iZv82zF5+OLrFawre84nj1usawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHq+peTP/RP2n+R/5SeCAVRU2stMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjBhMTA3YjgtMWRlNy0z
NzE0LTgzODQtNDMyM2NmNGUzYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgSxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEN2znyn66uGajxG332gCkApujdr6iUUDTNqpuSbpFxLj2xDzLKMNwmr
z9yv3+PfXg6UqZYhC2spbluqjZc1v6X2xZ5nTvtq0TwPZaPb+5zVO/dEBBix6uiX
kxVAc93dWXhoGtpJvU3QqRL2fKLCep8Mmhf+f2O9tixvFPSGELIz3g7IaPzUEEKP
7iH1yKg0TB3w+YvQ7XEA6q9aUvmw9JKbcHv86t6eJDgKkaKM2cNPOF1RZrIQd6hZ
AqHEHcRgwIewi2eCCK2ie46QdH++2Pobiqhsp6nX9Yz+PazqHvIKceBRCSmvwD/B
DCu0HJKyz8dTp/pO4H7Cr3lwiQPcFiw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:32 2025 by rpki-client