Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa
File:                     9dcab617-7807-367e-9401-361064e28966.roa (raw, json)
Hash identifier:          LFSKX7PiTI5HQgV07SJzqI1YZ474UkXTw7cH+3RXYW8=
Subject key identifier:   CC:76:AA:F7:50:87:9D:93:14:3F:C8:DE:CD:DB:DD:9C:6E:10:00:5A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BB2F7E172C3B4B66F9367F9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     701
IP address blocks:        100.33.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:e1:72:c3:b4:b6:6f:93:67:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=c154538b-8430-4d68-b5a9-a5509e9acadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:24:81:de:fc:f2:fc:8a:fd:aa:0e:8e:d7:
                    37:0b:19:74:25:20:62:99:48:78:a8:3b:4d:b5:b6:
                    2c:66:ea:f2:30:00:d4:cf:b8:99:3e:f9:13:3a:fd:
                    0a:bc:c1:24:4d:93:9b:e2:20:e9:39:1f:96:a7:2b:
                    06:46:ba:cb:19:3d:7a:4f:3d:08:0a:f3:43:2f:72:
                    05:48:c5:5e:88:e9:4d:dc:9b:1c:d2:d2:ea:a9:0d:
                    51:6d:f5:8a:b4:8b:64:97:40:fb:2f:dc:10:64:25:
                    57:32:f4:d1:d1:8d:f9:ff:cd:d7:82:ec:03:69:5e:
                    e5:f5:78:22:45:fa:d4:98:43:21:28:f7:7b:ee:f7:
                    46:9d:f0:89:16:16:2a:65:41:ca:f9:a4:b4:75:1a:
                    3e:f0:e4:da:e4:bc:c1:6a:03:2f:86:c1:24:b5:7d:
                    f8:0b:d8:e0:7a:87:26:81:65:ca:99:17:3f:c2:73:
                    fb:61:cb:2c:2a:e8:1b:d4:53:3f:8c:f4:0e:2f:1a:
                    d1:68:1f:d9:48:c8:4c:e3:cc:09:9f:8f:75:5b:68:
                    31:2f:d1:41:9f:d0:49:ab:dd:de:de:a2:42:c0:98:
                    44:7e:f9:e4:11:61:e8:7d:e5:e2:ac:cd:fb:0f:c1:
                    35:43:d8:29:23:01:1e:af:7b:37:60:67:ee:c3:73:
                    cd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:76:AA:F7:50:87:9D:93:14:3F:C8:DE:CD:DB:DD:9C:6E:10:00:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9dcab617-7807-367e-9401-361064e28966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.33.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ed:7e:ae:1d:2f:c8:79:7f:c5:18:d5:ca:c5:69:88:c4:d8:
         b9:85:45:80:93:d3:fa:b4:12:7e:9d:0b:89:5d:cc:3b:49:34:
         7f:cc:73:27:d7:44:2c:97:59:cb:36:23:4f:8b:f3:e0:74:d2:
         a5:b2:3c:6a:e9:fb:7d:62:77:5b:49:7b:8a:38:b8:85:27:5e:
         b3:8f:5e:31:2a:a3:29:ce:ee:10:0f:88:ed:21:64:6b:50:47:
         bf:05:f2:90:47:2c:43:67:c2:ef:2f:5c:86:aa:a5:42:34:4e:
         84:72:b2:43:d9:10:07:5d:e6:49:91:ad:e3:04:4c:20:12:fb:
         ee:f5:3c:5e:aa:3a:26:90:ed:3e:f7:5f:0b:42:99:71:4b:46:
         a7:84:f6:3a:0c:52:a1:83:e6:0d:f8:0d:ad:1b:ed:08:c5:b0:
         f7:f5:c2:a0:67:f7:2f:c3:2a:08:19:44:56:46:47:7d:d1:d1:
         a5:8b:ce:cc:b4:00:1e:53:73:01:de:be:35:1a:b5:10:e9:f1:
         4f:4a:fa:7e:d7:17:ec:39:5f:b9:97:a0:6c:24:bd:4c:14:04:
         35:d8:f9:84:97:22:67:0a:2b:d1:38:c7:7f:97:35:58:9b:70:
         6b:fb:38:9b:eb:16:2c:9f:3d:c5:ef:82:74:3f:75:16:a9:60:
         84:22:c2:cd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy9+Fyw7S2b5Nn+cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk
YzE1NDUzOGItODQzMC00ZDY4LWI1YTktYTU1MDllOWFjYWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYwkgd788vyK/aoOjtc3Cxl0JSBimUh4qDtN
tbYsZuryMADUz7iZPvkTOv0KvMEkTZOb4iDpOR+WpysGRrrLGT16Tz0ICvNDL3IF
SMVeiOlN3Jsc0tLqqQ1RbfWKtItkl0D7L9wQZCVXMvTR0Y35/83XguwDaV7l9Xgi
RfrUmEMhKPd77vdGnfCJFhYqZUHK+aS0dRo+8OTa5LzBagMvhsEktX34C9jgeocm
gWXKmRc/wnP7YcssKugb1FM/jPQOLxrRaB/ZSMhM48wJn491W2gxL9FBn9BJq93e
3qJCwJhEfvnkEWHofeXirM37D8E1Q9gpIwEer3s3YGfuw3PN9wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMx2qvdQh52TFD/I3s3b3ZxuEABaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWRjYWI2MTctNzgwNy0z
NjdlLTk0MDEtMzYxMDY0ZTI4OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZCEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkO1+rh0vyHl/xRjVysVpiMTYuYVFgJPT+rQSfp0LiV3MO0k0f8xzJ9dE
LJdZyzYjT4vz4HTSpbI8aun7fWJ3W0l7iji4hSdes49eMSqjKc7uEA+I7SFka1BH
vwXykEcsQ2fC7y9chqqlQjROhHKyQ9kQB13mSZGt4wRMIBL77vU8Xqo6JpDtPvdf
C0KZcUtGp4T2OgxSoYPmDfgNrRvtCMWw9/XCoGf3L8MqCBlEVkZHfdHRpYvOzLQA
HlNzAd6+NRq1EOnxT0r6ftcX7DlfuZegbCS9TBQENdj5hJciZwor0TjHf5c1WJtw
a/s4m+sWLJ89xe+CdD91FqlghCLCzQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:16:55 2025 by rpki-client