Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3b08d93-af55-3894-acd8-80b522ff8962.roa
File:                     b3b08d93-af55-3894-acd8-80b522ff8962.roa (raw, json)
Hash identifier:          gETmbGIK269H1a5+1Ne1BeDE78Rk6ZcKxdD0WrIkxAY=
Subject key identifier:   3F:A2:3F:14:81:7F:9C:79:0D:E1:DB:AE:00:FC:93:35:8C:73:69:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE2FBC658EC019007A58D67E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3b08d93-af55-3894-acd8-80b522ff8962.roa
Signing time:             Sun 17 Aug 2025 13:00:41 +0000
ROA not before:           Sun 17 Aug 2025 13:00:41 +0000
ROA not after:            Sat 15 Nov 2025 14:00:41 +0000
asID:                     6167
IP address blocks:        2600:1016:b1c8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e2:fb:c6:58:ec:01:90:07:a5:8d:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 13:00:41 2025 GMT
            Not After : Nov 15 14:00:41 2025 GMT
        Subject: CN=a76e8512-fcbc-4721-8f0c-187ffc6548c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:d4:09:05:9b:90:d1:b2:0e:0c:b0:f2:30:
                    6f:09:42:86:dd:79:c7:54:42:42:39:69:1d:40:4a:
                    b6:2a:e2:4e:fd:1c:b1:9a:65:a4:6b:c9:84:7b:d2:
                    c5:90:89:91:e6:fa:8c:5a:61:21:51:19:9d:c7:1d:
                    0e:03:7e:c0:b4:f2:fe:ac:0b:c3:13:48:a2:ea:61:
                    20:b3:2b:d8:66:09:28:3f:da:ee:1a:90:ff:99:0c:
                    48:8b:a2:ab:61:f4:2b:73:54:8a:ea:ab:72:a9:c3:
                    3e:6d:0c:7b:7a:54:e3:0a:34:f9:7e:cc:e1:cb:49:
                    f7:20:26:5a:6f:e6:13:71:39:d2:ab:ec:6d:ba:ee:
                    06:d2:1e:18:70:b0:5a:0f:2a:41:43:10:cf:65:ea:
                    93:e7:87:38:20:e1:b2:47:8b:21:2f:2b:9c:53:6e:
                    c9:fb:d5:e2:32:6b:38:84:d9:d2:3c:92:40:a9:d7:
                    64:93:c5:89:71:bb:f9:c9:ed:c8:86:f8:e2:42:86:
                    ae:21:c7:cf:fe:6f:22:a0:8b:8e:ba:32:83:a5:06:
                    c8:18:84:12:22:4b:68:13:98:40:d1:a7:b5:1e:c4:
                    64:9d:33:9c:6b:96:86:66:bb:5d:b9:31:ec:88:a5:
                    a0:36:e2:10:a3:b3:7d:86:c1:68:60:53:23:06:3e:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A2:3F:14:81:7F:9C:79:0D:E1:DB:AE:00:FC:93:35:8C:73:69:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3b08d93-af55-3894-acd8-80b522ff8962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b1c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a0:b3:a4:64:47:bd:13:bd:33:16:9f:6b:6b:4d:ac:46:63:
         9f:5c:fe:2c:91:74:a9:f3:12:cc:87:75:de:65:59:98:4a:28:
         e5:75:4f:4b:44:ef:d8:f0:7d:c5:b8:99:79:88:cf:4e:f3:f8:
         39:ca:24:64:99:46:90:4e:d4:5a:7a:d4:28:59:10:02:01:63:
         19:36:36:b4:75:c8:cf:e3:16:01:43:91:5a:38:1c:75:53:b9:
         4d:c9:25:37:f0:b8:dc:24:79:9a:ac:15:ed:c2:4c:05:ae:70:
         8e:d6:d0:35:d8:0e:2a:91:95:02:2c:fb:eb:d9:c7:93:78:38:
         e1:62:cf:fc:d2:d3:30:0e:48:6a:47:8d:eb:96:f3:6c:44:d8:
         3a:ba:e0:be:90:11:47:ba:df:c3:fc:59:6d:d4:dd:30:2e:e8:
         81:65:a8:4b:d0:79:03:41:d3:b2:be:24:63:77:37:4d:ca:41:
         d6:97:09:d1:47:1f:be:55:74:23:46:53:63:f4:2c:47:1d:87:
         2a:9b:eb:3d:f1:ec:34:a6:99:a3:3d:42:6a:ae:15:17:d8:7e:
         0e:fb:04:77:62:2d:50:b4:c4:b6:8d:6b:d4:aa:25:61:d3:e1:
         29:8f:fb:de:8d:42:d8:73:ac:b4:4f:fb:81:89:b7:c1:82:54:
         de:6d:1f:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEri+8ZY7AGQB6WNZ+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk
YTc2ZTg1MTItZmNiYy00NzIxLThmMGMtMTg3ZmZjNjU0OGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7TUCQWbkNGyDgyw8jBvCUKG3XnHVEJCOWkd
QEq2KuJO/RyxmmWka8mEe9LFkImR5vqMWmEhURmdxx0OA37AtPL+rAvDE0ii6mEg
syvYZgkoP9ruGpD/mQxIi6KrYfQrc1SK6qtyqcM+bQx7elTjCjT5fszhy0n3ICZa
b+YTcTnSq+xtuu4G0h4YcLBaDypBQxDPZeqT54c4IOGyR4shLyucU27J+9XiMms4
hNnSPJJAqddkk8WJcbv5ye3IhvjiQoauIcfP/m8ioIuOujKDpQbIGIQSIktoE5hA
0ae1HsRknTOca5aGZrtduTHsiKWgNuIQo7N9hsFoYFMjBj7MPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD+iPxSBf5x5DeHbrgD8kzWMc2m1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjNiMDhkOTMtYWY1NS0z
ODk0LWFjZDgtODBiNTIyZmY4OTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQFrHI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIOgs6RkR70TvTMWn2trTaxGY59c/iyRdKnzEsyHdd5lWZhKKOV1
T0tE79jwfcW4mXmIz07z+DnKJGSZRpBO1Fp61ChZEAIBYxk2NrR1yM/jFgFDkVo4
HHVTuU3JJTfwuNwkeZqsFe3CTAWucI7W0DXYDiqRlQIs++vZx5N4OOFiz/zS0zAO
SGpHjeuW82xE2Dq64L6QEUe638P8WW3U3TAu6IFlqEvQeQNB07K+JGN3N03KQdaX
CdFHH75VdCNGU2P0LEcdhyqb6z3x7DSmmaM9QmquFRfYfg77BHdiLVC0xLaNa9Sq
JWHT4SmP+96NQthzrLRP+4GJt8GCVN5tHwk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:26 2025 by rpki-client