Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1dabcaa-20e1-3b23-b1e4-7940f9fa1813.roa
File:                     b1dabcaa-20e1-3b23-b1e4-7940f9fa1813.roa (raw, json)
Hash identifier:          XXXrinVP0s4cHUaJ05kiPVIQQECHoC7/g9kj7iEOaFs=
Subject key identifier:   66:3F:F2:0D:04:F6:95:E1:D5:EA:DD:F8:CE:DD:61:E8:7D:03:5F:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BC270A2D7FF97440901471060
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1dabcaa-20e1-3b23-b1e4-7940f9fa1813.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     6167
IP address blocks:        2607:f160:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:a2:d7:ff:97:44:09:01:47:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=2d8c433f-e8a0-4764-966b-f9394ff70077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:0b:82:aa:ea:16:31:c7:4d:d8:d8:22:0d:
                    b9:a1:5f:2f:37:a5:88:7c:5e:2b:72:19:94:bb:16:
                    3d:1f:d8:6c:da:8e:82:e9:fe:23:b7:2c:52:38:97:
                    40:1a:89:51:78:7a:7b:14:c3:12:b2:ca:3e:da:12:
                    39:83:37:97:e6:47:8d:68:55:52:43:3a:1e:71:82:
                    5b:4b:3c:d0:71:52:57:4f:23:5e:cb:ce:13:60:8e:
                    21:6d:99:1e:42:85:41:f4:c6:15:d5:c0:70:e6:74:
                    bb:e9:ed:a9:39:94:10:9e:3c:24:15:4a:8a:d4:59:
                    48:eb:0c:8c:81:6e:8b:fb:ef:68:b1:4a:a7:5b:a6:
                    f7:c6:5f:64:a2:f8:c6:8b:53:4e:b5:07:53:8e:50:
                    c7:c8:34:a0:03:8a:08:a0:41:c8:6b:f7:56:d2:7f:
                    ab:31:b0:d3:fe:1e:e0:01:b2:52:ef:e6:cf:e4:60:
                    13:d0:6b:bf:67:a1:90:89:3d:74:99:1b:46:50:4f:
                    2f:c1:69:74:db:b3:47:06:a3:3c:a5:b0:bd:0d:99:
                    1b:3f:ce:a9:b1:62:b8:c5:60:5d:b9:f2:31:4e:e1:
                    76:8a:b7:d3:79:82:bb:c9:54:83:13:4f:81:01:b4:
                    29:f6:75:a2:82:19:c8:8b:a6:0f:82:13:46:f6:df:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3F:F2:0D:04:F6:95:E1:D5:EA:DD:F8:CE:DD:61:E8:7D:03:5F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1dabcaa-20e1-3b23-b1e4-7940f9fa1813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:ff00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:18:7f:f1:d4:02:5c:41:f5:89:58:f1:67:0e:25:89:7b:d9:
         f9:a4:60:5e:95:d1:a4:b0:44:a5:28:23:aa:29:32:5c:bf:2a:
         37:6d:75:8c:5a:b9:a3:31:d7:74:9e:eb:27:f8:47:f8:41:a6:
         b6:68:a2:08:5a:e8:7c:12:d0:1a:73:05:45:7d:30:8d:98:f9:
         35:3a:be:9a:b7:ca:c7:cc:91:82:9e:a9:db:01:2c:49:7e:71:
         67:b3:d1:18:4a:6a:b4:d7:f0:f7:1d:0d:7d:a4:fe:c4:d2:c2:
         20:c0:b6:36:20:6b:75:c2:da:0e:47:7d:62:90:50:d3:15:3a:
         e5:25:86:2a:fe:f0:e6:eb:36:7c:10:3f:20:47:7a:d0:ba:18:
         1f:b1:cb:45:d8:f6:9b:8e:b0:c3:76:1e:59:cc:db:00:60:85:
         e2:03:9c:ca:49:ba:b3:44:fe:cc:3a:89:83:4a:d7:ca:65:46:
         41:3a:c9:ae:8c:fb:fa:af:6c:a9:18:6d:d1:c5:a0:08:1d:7f:
         95:2c:06:63:5b:1d:32:9e:dd:2f:e1:f7:c5:b8:a7:bd:76:0e:
         63:b8:aa:01:f1:a6:99:20:d0:0f:61:d8:72:af:8f:63:69:60:
         6d:c0:f2:1a:83:b0:3b:f3:11:93:0c:48:9e:bc:25:55:6e:1a:
         e7:36:0b:0e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvCcKLX/5dECQFHEGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk
MmQ4YzQzM2YtZThhMC00NzY0LTk2NmItZjkzOTRmZjcwMDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgELgqrqFjHHTdjYIg25oV8vN6WIfF4rchmU
uxY9H9hs2o6C6f4jtyxSOJdAGolReHp7FMMSsso+2hI5gzeX5keNaFVSQzoecYJb
SzzQcVJXTyNey84TYI4hbZkeQoVB9MYV1cBw5nS76e2pOZQQnjwkFUqK1FlI6wyM
gW6L++9osUqnW6b3xl9kovjGi1NOtQdTjlDHyDSgA4oIoEHIa/dW0n+rMbDT/h7g
AbJS7+bP5GAT0Gu/Z6GQiT10mRtGUE8vwWl027NHBqM8pbC9DZkbP86psWK4xWBd
ufIxTuF2irfTeYK7yVSDE0+BAbQp9nWighnIi6YPghNG9t+ZGwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGY/8g0E9pXh1erd+M7dYeh9A18+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjFkYWJjYWEtMjBlMS0z
YjIzLWIxZTQtNzk0MGY5ZmExODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfxYP8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKRh/8dQCXEH1iVjxZw4liXvZ+aRgXpXRpLBEpSgjqikyXL8qN211
jFq5ozHXdJ7rJ/hH+EGmtmiiCFrofBLQGnMFRX0wjZj5NTq+mrfKx8yRgp6p2wEs
SX5xZ7PRGEpqtNfw9x0NfaT+xNLCIMC2NiBrdcLaDkd9YpBQ0xU65SWGKv7w5us2
fBA/IEd60LoYH7HLRdj2m46ww3YeWczbAGCF4gOcykm6s0T+zDqJg0rXymVGQTrJ
roz7+q9sqRht0cWgCB1/lSwGY1sdMp7dL+H3xbinvXYOY7iqAfGmmSDQD2HYcq+P
Y2lgbcDyGoOwO/MRkwxInrwlVW4a5zYLDg==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:11:04 2025 by rpki-client