Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7cfadcd9-d53d-3692-ac05-fe5e5d9a6471.roa
File:                     7cfadcd9-d53d-3692-ac05-fe5e5d9a6471.roa (raw, json)
Hash identifier:          NFIiyu5E3ypGqJh2aOKu8plobzqxA5TOG7N7/nmfLuo=
Subject key identifier:   7B:85:B8:A2:4D:BE:81:F1:8E:19:2A:38:84:21:B8:FA:95:5B:B4:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A6290C0A51225442FC136A100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7cfadcd9-d53d-3692-ac05-fe5e5d9a6471.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     6167
IP address blocks:        2600:100a:f100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:c0:a5:12:25:44:2f:c1:36:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=5ba85d40-095f-4bd4-96d9-d15c575cb8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:4d:75:bc:2b:38:fa:46:d1:7c:de:36:66:
                    c5:1a:13:f6:4d:ed:eb:f0:8b:b1:f8:14:3f:cb:fa:
                    76:e1:91:c5:55:e6:22:e6:28:db:34:ac:68:d8:0c:
                    b2:78:44:67:d3:e6:9a:9c:c8:dc:e2:6d:85:3a:d0:
                    01:d4:7f:f8:0d:df:fb:38:76:58:7f:19:6c:ac:60:
                    b6:25:56:fa:35:90:0e:3f:4c:4a:8c:07:59:b0:7a:
                    e8:06:f3:75:00:7f:42:e5:95:17:c6:35:d2:48:d0:
                    1d:26:39:63:5d:fb:9c:86:2d:8d:8c:30:62:e2:9e:
                    fa:94:d5:63:92:19:31:a4:79:94:4a:2d:ab:1d:69:
                    b3:f9:3a:81:57:33:e6:bd:df:06:0a:ad:01:22:5d:
                    98:2a:3d:49:68:b0:33:ab:f6:5e:01:59:66:f7:fb:
                    73:5f:a8:4d:8a:b6:4f:a1:b2:e7:bb:57:d9:36:f8:
                    a1:80:75:8c:ae:26:64:57:36:2c:4e:d6:75:a4:b6:
                    db:67:c3:e5:1e:1c:dc:a1:34:49:00:7d:a8:e1:a8:
                    cf:e0:c2:fe:93:43:0f:3b:5d:96:93:ff:bb:f4:56:
                    73:e2:c4:b2:c4:5e:3a:12:f3:50:0b:4a:56:52:60:
                    da:41:08:af:20:8c:c5:56:a7:26:8c:3d:05:6c:53:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:85:B8:A2:4D:BE:81:F1:8E:19:2A:38:84:21:B8:FA:95:5B:B4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7cfadcd9-d53d-3692-ac05-fe5e5d9a6471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:da:67:ec:28:c7:ff:e8:d0:a3:9b:56:99:52:b4:00:8f:ad:
         39:48:69:0f:94:19:1e:5e:4f:b5:50:de:97:b2:c4:0a:d1:ee:
         31:27:5b:81:b8:c8:09:80:6b:36:4e:fb:8e:72:de:64:ca:8c:
         2a:7a:36:79:03:97:3b:ab:30:f3:ff:02:5f:bb:7a:ba:7e:28:
         0a:97:85:10:48:ba:7f:2b:a2:f6:3c:34:e9:74:99:20:41:71:
         2a:10:6b:62:94:d3:62:f6:a4:d9:d6:32:25:de:3b:fb:07:b8:
         48:ef:00:7f:c4:3d:1c:d8:92:5d:e9:4e:7b:a5:07:e7:ea:67:
         26:21:40:d2:bf:3f:38:b9:72:ad:07:99:d3:e7:2b:90:66:67:
         25:04:6b:c1:ad:f1:56:e9:7e:4a:f1:37:f7:be:68:a2:c6:c3:
         9a:4e:6c:4d:92:ee:cc:cb:c5:5b:04:85:bf:82:db:c0:b0:fd:
         d9:ea:5d:c4:bd:fd:85:02:87:fb:24:7c:4d:3f:1e:08:92:86:
         8d:ee:0c:41:73:f8:cf:d9:81:df:1d:4a:2b:6e:91:82:c2:d9:
         78:4e:d3:9b:da:56:32:d2:7e:7f:cf:43:d6:fb:0d:8e:b6:86:
         4e:01:5a:d3:0a:db:b6:53:4c:03:a5:74:32:6d:d7:86:be:8d:
         52:0b:0a:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpikMClEiVEL8E2oQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk
NWJhODVkNDAtMDk1Zi00YmQ0LTk2ZDktZDE1YzU3NWNiOGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLZNdbwrOPpG0XzeNmbFGhP2Te3r8Iux+BQ/
y/p24ZHFVeYi5ijbNKxo2AyyeERn0+aanMjc4m2FOtAB1H/4Dd/7OHZYfxlsrGC2
JVb6NZAOP0xKjAdZsHroBvN1AH9C5ZUXxjXSSNAdJjljXfuchi2NjDBi4p76lNVj
khkxpHmUSi2rHWmz+TqBVzPmvd8GCq0BIl2YKj1JaLAzq/ZeAVlm9/tzX6hNirZP
obLnu1fZNvihgHWMriZkVzYsTtZ1pLbbZ8PlHhzcoTRJAH2o4ajP4ML+k0MPO12W
k/+79FZz4sSyxF46EvNQC0pWUmDaQQivIIzFVqcmjD0FbFPUdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHuFuKJNvoHxjhkqOIQhuPqVW7S6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2NmYWRjZDktZDUzZC0z
NjkyLWFjMDUtZmU1ZTVkOWE2NDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCvEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGzaZ+wox//o0KObVplStACPrTlIaQ+UGR5eT7VQ3peyxArR7jEn
W4G4yAmAazZO+45y3mTKjCp6NnkDlzurMPP/Al+7erp+KAqXhRBIun8rovY8NOl0
mSBBcSoQa2KU02L2pNnWMiXeO/sHuEjvAH/EPRzYkl3pTnulB+fqZyYhQNK/Pzi5
cq0HmdPnK5BmZyUEa8Gt8VbpfkrxN/e+aKLGw5pObE2S7szLxVsEhb+C28Cw/dnq
XcS9/YUCh/skfE0/HgiSho3uDEFz+M/Zgd8dSitukYLC2XhO05vaVjLSfn/PQ9b7
DY62hk4BWtMK27ZTTAOldDJt14a+jVILCnM=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:10 2025 by rpki-client