Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad24892b-d927-3140-aa3c-35bd960b9726.roa
File:                     ad24892b-d927-3140-aa3c-35bd960b9726.roa (raw, json)
Hash identifier:          gEhB/CFs69Z0EBf06vcXJ/q/wWaY4M9raeiwQII14Uc=
Subject key identifier:   1E:24:54:3D:41:ED:8D:11:D5:FB:1B:7F:15:09:F9:65:08:3F:F1:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196C19FF23A9A62DCF40A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad24892b-d927-3140-aa3c-35bd960b9726.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        2001:4888:a620::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c1:9f:f2:3a:9a:62:dc:f4:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4f7efb1f-4ffb-4695-8a97-632a9b7aa29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2e:67:45:4a:af:0f:d8:81:61:a1:2e:55:f3:
                    b8:48:a0:36:95:7c:75:ea:47:7c:66:2d:fc:ce:85:
                    04:22:64:72:4c:c6:1b:09:5b:2f:c6:0f:e4:64:61:
                    28:32:28:f1:fe:31:23:ac:2c:0d:ec:94:26:df:3c:
                    00:10:63:6b:f5:b9:17:8b:01:33:98:8b:52:f0:ac:
                    85:5c:02:d9:df:f7:69:d4:e0:e7:2f:67:b1:b2:5f:
                    81:2d:4f:23:8f:94:60:5b:0b:c7:fc:61:13:aa:ac:
                    bf:9a:36:3c:b8:4d:1c:01:b1:7b:c2:d0:95:1d:87:
                    ef:1d:a6:0e:1a:a0:a8:75:c8:46:c0:a6:cd:59:fa:
                    43:9c:59:21:04:28:6a:eb:a0:f6:b7:aa:5a:db:22:
                    dc:43:0d:bc:29:7b:46:6d:05:34:db:c7:ef:f9:ca:
                    fb:b2:b1:70:45:c1:f1:7d:8d:dc:8b:d0:9b:0c:e6:
                    db:d7:41:db:a3:f7:46:1a:33:8c:ca:e1:bd:ca:e9:
                    f3:03:ca:cc:5e:3e:91:ca:a2:b8:49:b4:99:c7:1d:
                    55:91:6b:1e:a2:ea:73:f4:f3:66:f2:ac:ed:6a:f3:
                    d3:88:b2:bb:ec:d3:7e:e1:6c:67:98:71:a2:a7:dc:
                    1f:c0:bf:e5:d0:83:cd:93:66:36:90:42:9b:e8:48:
                    dc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:24:54:3D:41:ED:8D:11:D5:FB:1B:7F:15:09:F9:65:08:3F:F1:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ad24892b-d927-3140-aa3c-35bd960b9726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:a620::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2c:87:1c:43:85:bf:14:fb:a1:e2:41:b8:3b:be:d6:9e:e6:
         b6:89:36:5c:0b:2e:5e:c2:93:d7:58:3c:ca:f9:be:0d:b4:aa:
         37:43:08:d3:bb:50:64:de:cb:19:05:21:f1:0e:67:fd:5c:e6:
         74:f4:9b:a7:79:f3:78:9c:7f:8c:43:f9:23:c1:53:2c:26:93:
         6a:0c:8b:62:04:37:c1:95:b8:ca:3a:82:e4:85:e9:20:44:2c:
         3e:2b:25:46:1b:c9:62:41:b8:5c:9e:e4:10:07:de:7a:77:55:
         d3:4d:36:91:6b:21:19:f8:21:cb:d0:a3:d1:6e:b7:38:36:12:
         37:b1:b3:33:d3:69:bf:bb:cd:6f:6d:5c:e6:bd:3c:ae:a6:ba:
         fc:d9:54:c3:4e:db:2b:87:a1:7b:15:06:0b:98:82:56:a9:1d:
         88:dd:c5:d6:2f:4a:91:2d:13:67:62:32:ce:6a:7f:b8:90:c2:
         72:63:25:e8:d6:6c:9e:61:10:fc:9f:eb:85:a4:c9:14:72:6a:
         8a:43:5f:eb:4d:87:08:af:8d:d3:6f:9c:6f:23:06:ef:e6:61:
         05:45:5c:bf:6e:2f:16:a1:82:cf:58:3a:98:55:f0:aa:d7:ff:
         b1:eb:28:7a:64:31:79:94:9d:4a:26:84:05:0d:5b:c7:88:6b:
         d8:56:b4:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErhlsGf8jqaYtz0CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NGY3ZWZiMWYtNGZmYi00Njk1LThhOTctNjMyYTliN2FhMjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6i5nRUqvD9iBYaEuVfO4SKA2lXx16kd8Zi38
zoUEImRyTMYbCVsvxg/kZGEoMijx/jEjrCwN7JQm3zwAEGNr9bkXiwEzmItS8KyF
XALZ3/dp1ODnL2exsl+BLU8jj5RgWwvH/GETqqy/mjY8uE0cAbF7wtCVHYfvHaYO
GqCodchGwKbNWfpDnFkhBChq66D2t6pa2yLcQw28KXtGbQU028fv+cr7srFwRcHx
fY3ci9CbDObb10Hbo/dGGjOMyuG9yunzA8rMXj6RyqK4SbSZxx1VkWseoupz9PNm
8qztavPTiLK77NN+4WxnmHGip9wfwL/l0IPNk2Y2kEKb6EjccQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB4kVD1B7Y0R1fsbfxUJ+WUIP/F0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWQyNDg5MmItZDkyNy0z
MTQwLWFhM2MtMzViZDk2MGI5NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIiKYg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAkshxxDhb8U+6HiQbg7vtae5raJNlwLLl7Ck9dYPMr5vg20qjdD
CNO7UGTeyxkFIfEOZ/1c5nT0m6d583icf4xD+SPBUywmk2oMi2IEN8GVuMo6guSF
6SBELD4rJUYbyWJBuFye5BAH3np3VdNNNpFrIRn4IcvQo9Futzg2EjexszPTab+7
zW9tXOa9PK6muvzZVMNO2yuHoXsVBguYglapHYjdxdYvSpEtE2diMs5qf7iQwnJj
JejWbJ5hEPyf64WkyRRyaopDX+tNhwivjdNvnG8jBu/mYQVFXL9uLxahgs9YOphV
8KrX/7HrKHpkMXmUnUomhAUNW8eIa9hWtDU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:22 2025 by rpki-client