Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/713441f8-36f1-36d5-a50c-2635e4547291.roa
File:                     713441f8-36f1-36d5-a50c-2635e4547291.roa (raw, json)
Hash identifier:          UxqSg0bTjMwAyIrQtStm2NcfFmTWDc+XpzAkn5Sl47o=
Subject key identifier:   3F:A2:21:E5:A8:1A:FD:72:90:74:D2:CA:9E:52:1D:13:EF:D5:9B:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ADECBD9F20790061425F91900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/713441f8-36f1-36d5-a50c-2635e4547291.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1014:b320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d9:f2:07:90:06:14:25:f9:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=bdca6f81-05c1-482b-96ab-6abbf79ad7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:60:5b:b4:7b:3d:cd:7a:c1:ed:01:e5:ae:96:
                    78:f8:c1:b8:a5:80:d4:ed:1b:4b:ea:86:78:86:ed:
                    d7:b6:df:03:da:16:87:52:7b:1f:8c:97:68:61:4f:
                    08:36:ab:2f:1a:f2:52:76:55:8f:12:00:a4:b9:a6:
                    40:c1:48:b0:97:64:7a:ee:21:56:e5:ed:a0:a8:e8:
                    da:9c:60:a1:7f:25:63:c3:7d:d2:c5:4d:eb:8e:ac:
                    92:73:85:77:63:c3:c7:04:df:08:4a:8a:f0:20:cc:
                    5b:91:60:1d:43:37:39:bf:bf:8c:3b:49:56:65:22:
                    45:ab:db:42:79:2b:88:8c:77:55:fd:e0:bf:6f:c3:
                    5a:57:d1:42:63:d4:54:49:13:1c:93:3f:ac:1a:6d:
                    5e:17:b2:23:e3:d9:d1:b0:52:38:f0:d9:10:c2:2e:
                    8d:8d:18:37:1f:33:e8:e6:1b:3e:a5:8d:32:74:f1:
                    07:9f:32:ee:f0:07:a4:79:67:73:c2:6b:ba:1f:b5:
                    21:71:86:cc:9a:12:24:e8:8b:44:e6:30:9e:ad:58:
                    2f:24:79:73:f6:68:94:d9:6f:67:9c:cd:ca:04:77:
                    16:30:da:e6:f3:97:54:5f:09:95:35:28:75:42:94:
                    1d:90:fd:e5:64:17:27:b5:d1:5a:78:52:bf:8f:37:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A2:21:E5:A8:1A:FD:72:90:74:D2:CA:9E:52:1D:13:EF:D5:9B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/713441f8-36f1-36d5-a50c-2635e4547291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1a:2b:36:9e:26:c7:66:77:d2:98:28:f2:fc:31:84:8d:39:
         97:40:32:20:f7:c2:39:ed:4b:6c:8c:9f:b7:91:c5:db:57:33:
         13:66:20:c2:e2:04:f1:9c:5f:c6:66:06:81:74:52:73:6e:6a:
         9a:89:d9:96:85:24:91:25:1e:18:c8:63:8a:cc:f1:63:5d:de:
         19:7b:20:a2:26:34:c9:5b:12:b3:ee:4a:2e:69:8c:e4:7d:c7:
         ad:1e:53:fd:e8:bc:4f:57:bc:76:8d:ac:e6:6f:43:5d:8d:71:
         d8:08:ee:08:47:4c:3b:f0:f9:f1:40:72:4b:4f:e7:7a:ce:d7:
         3c:f3:29:d0:58:f6:eb:ad:1a:33:05:4e:78:ad:0c:d2:45:3f:
         5c:fa:68:55:29:eb:19:87:a3:3a:cc:15:b5:3e:65:e7:b6:58:
         79:89:35:04:73:6d:87:2c:16:a2:e8:f0:36:c0:8d:56:22:3e:
         83:20:f5:29:f5:00:59:7d:46:9c:e8:5c:82:47:c7:bd:7f:88:
         3f:ee:a4:44:8a:c7:eb:bd:47:08:19:99:20:e9:aa:b0:00:df:
         e9:1f:2d:f7:c3:ca:13:ce:31:03:b7:4f:a2:c8:5a:3f:5c:7c:
         74:5a:2e:af:df:e5:13:c9:bd:1c:b3:5c:9b:82:83:93:07:0c:
         04:e7:88:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErey9nyB5AGFCX5GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
YmRjYTZmODEtMDVjMS00ODJiLTk2YWItNmFiYmY3OWFkN2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWBbtHs9zXrB7QHlrpZ4+MG4pYDU7RtL6oZ4
hu3Xtt8D2haHUnsfjJdoYU8INqsvGvJSdlWPEgCkuaZAwUiwl2R67iFW5e2gqOja
nGChfyVjw33SxU3rjqySc4V3Y8PHBN8ISorwIMxbkWAdQzc5v7+MO0lWZSJFq9tC
eSuIjHdV/eC/b8NaV9FCY9RUSRMckz+sGm1eF7Ij49nRsFI48NkQwi6NjRg3HzPo
5hs+pY0ydPEHnzLu8AekeWdzwmu6H7UhcYbMmhIk6ItE5jCerVgvJHlz9miU2W9n
nM3KBHcWMNrm85dUXwmVNSh1QpQdkP3lZBcntdFaeFK/jzfM/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD+iIeWoGv1ykHTSyp5SHRPv1ZvLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzEzNDQxZjgtMzZmMS0z
NmQ1LWE1MGMtMjYzNWU0NTQ3MjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFLMg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAEaKzaeJsdmd9KYKPL8MYSNOZdAMiD3wjntS2yMn7eRxdtXMxNm
IMLiBPGcX8ZmBoF0UnNuapqJ2ZaFJJElHhjIY4rM8WNd3hl7IKImNMlbErPuSi5p
jOR9x60eU/3ovE9XvHaNrOZvQ12NcdgI7ghHTDvw+fFAcktP53rO1zzzKdBY9uut
GjMFTnitDNJFP1z6aFUp6xmHozrMFbU+Zee2WHmJNQRzbYcsFqLo8DbAjVYiPoMg
9Sn1AFl9RpzoXIJHx71/iD/upESKx+u9RwgZmSDpqrAA3+kfLffDyhPOMQO3T6LI
Wj9cfHRaLq/f5RPJvRyzXJuCg5MHDATniOs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:13:07 2025 by rpki-client