Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a107b8-1de7-3714-8384-4323cf4e3b53.roa
File:                     60a107b8-1de7-3714-8384-4323cf4e3b53.roa (raw, json)
Hash identifier:          PyM7yL+G2XQs31mVJ5clDRxJWKKaX6GG8CQEl5KfwBo=
Subject key identifier:   01:92:03:2D:DB:65:CB:01:D6:11:58:4D:57:40:6E:1D:49:D4:7A:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BE008DD5A9EF9988D4D40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a107b8-1de7-3714-8384-4323cf4e3b53.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        129.44.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:e0:08:dd:5a:9e:f9:98:8d:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=c87e840c-f966-4c3b-bc22-7d5662783ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0e:d3:de:20:df:3d:dc:7c:a6:bd:08:81:15:
                    a6:f9:05:23:b7:6d:20:d1:e6:79:3b:f1:5e:1d:4c:
                    63:49:72:0e:8a:81:54:74:76:cf:46:38:f6:49:b7:
                    e1:c3:eb:84:c9:77:23:af:ae:a7:e7:a6:e5:77:e1:
                    86:ad:e0:a2:12:b6:c2:b8:27:0f:89:5d:21:57:a9:
                    88:c1:f5:4b:28:b6:44:57:aa:5e:34:6a:14:9e:ee:
                    7c:60:2f:1d:c0:27:63:09:8d:c3:74:b2:79:66:e8:
                    27:3a:0a:08:c5:fe:de:49:24:73:66:61:67:e7:f6:
                    00:11:27:df:86:f9:7f:bb:31:54:60:86:bb:d0:95:
                    0c:d1:d9:1c:d9:bd:66:1a:e1:02:fd:db:28:39:8e:
                    93:66:3c:ad:ee:09:e2:00:0f:89:25:6f:3c:c0:5b:
                    09:de:cf:be:d1:80:1e:c5:37:d2:c6:b7:82:c6:c5:
                    ba:4d:b0:2d:b4:8f:8f:00:c6:32:c8:e9:66:c5:01:
                    27:3e:40:7d:6e:bc:d4:5b:ca:13:67:28:37:bc:bf:
                    51:8b:a5:44:2d:a4:b1:11:33:1f:e3:ea:7b:8a:40:
                    46:8a:f8:6c:6f:eb:73:55:a0:d5:72:4b:48:be:d0:
                    3e:3c:dc:ea:0b:2f:0c:de:d4:9f:e6:c5:ff:e1:51:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:92:03:2D:DB:65:CB:01:D6:11:58:4D:57:40:6E:1D:49:D4:7A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60a107b8-1de7-3714-8384-4323cf4e3b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.44.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:c7:4f:3a:46:4c:6c:95:58:13:c1:8a:f2:b5:fa:e6:7c:37:
         5a:21:b6:1f:25:bd:e9:a8:79:20:08:88:f1:75:37:9a:c7:01:
         40:92:c8:6f:a5:8c:62:9d:e0:4f:80:b7:ef:8a:22:3a:ac:2f:
         7b:78:1d:c5:3a:ba:bf:df:51:6f:9a:07:8e:be:c6:30:bb:51:
         e4:92:cd:ca:f3:ce:1a:36:15:cc:98:78:b3:99:a2:6d:18:71:
         26:97:39:6a:d2:c0:2f:16:58:de:5b:eb:1c:bf:b1:c5:ac:a9:
         fa:cd:59:53:27:48:6c:03:cd:45:39:ff:44:c2:90:aa:25:56:
         d3:cd:3b:eb:5d:5b:b5:30:24:32:5e:83:89:56:29:f2:ab:9e:
         ca:55:13:68:fc:57:0d:79:71:4f:6e:fb:6c:50:ce:25:ad:9e:
         a0:c8:5b:85:a2:8f:45:c5:1e:7d:d2:1a:08:94:ee:77:5b:c6:
         2d:ce:06:fd:21:50:91:13:dd:0a:8b:7d:96:6c:c8:56:3b:fb:
         9f:2e:14:09:9c:fb:59:f4:d3:3f:eb:ab:04:6e:2e:32:d6:c8:
         9b:fa:83:e2:7d:39:31:55:92:16:8a:a1:9f:9d:44:a8:66:36:
         1f:79:cd:2a:f5:3f:9d:02:37:29:0c:2b:5c:70:bf:58:ec:14:
         ac:75:53:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+AI3Vqe+ZiNTUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
Yzg3ZTg0MGMtZjk2Ni00YzNiLWJjMjItN2Q1NjYyNzgzY2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A7T3iDfPdx8pr0IgRWm+QUjt20g0eZ5O/Fe
HUxjSXIOioFUdHbPRjj2Sbfhw+uEyXcjr66n56bld+GGreCiErbCuCcPiV0hV6mI
wfVLKLZEV6peNGoUnu58YC8dwCdjCY3DdLJ5ZugnOgoIxf7eSSRzZmFn5/YAESff
hvl/uzFUYIa70JUM0dkc2b1mGuEC/dsoOY6TZjyt7gniAA+JJW88wFsJ3s++0YAe
xTfSxreCxsW6TbAttI+PAMYyyOlmxQEnPkB9brzUW8oTZyg3vL9Ri6VELaSxETMf
4+p7ikBGivhsb+tzVaDVcktIvtA+PNzqCy8M3tSf5sX/4VGshQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGSAy3bZcsB1hFYTVdAbh1J1HqPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjBhMTA3YjgtMWRlNy0z
NzE0LTgzODQtNDMyM2NmNGUzYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgSxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALfHTzpGTGyVWBPBivK1+uZ8N1ohth8lvemoeSAIiPF1N5rHAUCSyG+l
jGKd4E+At++KIjqsL3t4HcU6ur/fUW+aB46+xjC7UeSSzcrzzho2FcyYeLOZom0Y
cSaXOWrSwC8WWN5b6xy/scWsqfrNWVMnSGwDzUU5/0TCkKolVtPNO+tdW7UwJDJe
g4lWKfKrnspVE2j8Vw15cU9u+2xQziWtnqDIW4Wij0XFHn3SGgiU7ndbxi3OBv0h
UJET3QqLfZZsyFY7+58uFAmc+1n00z/rqwRuLjLWyJv6g+J9OTFVkhaKoZ+dRKhm
Nh95zSr1P50CNykMK1xwv1jsFKx1U6U=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:25 2025 by rpki-client