Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4fa60a4-1cdb-31f8-a694-c8e539777897.roa
File:                     c4fa60a4-1cdb-31f8-a694-c8e539777897.roa (raw, json)
Hash identifier:          k0yF2m/8S4az95UCmMrFTM7zEqsYE1OMO9CuidI2Y/A=
Subject key identifier:   03:B0:DA:41:8E:32:94:2D:90:61:04:B9:09:90:D8:44:B3:38:94:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3721294AB47E540CA6BF40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4fa60a4-1cdb-31f8-a694-c8e539777897.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:b13c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:21:29:4a:b4:7e:54:0c:a6:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=09b7c99c-9637-4f76-91d5-ccac79907e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:1e:60:a4:9a:1e:89:59:a1:41:75:e1:23:
                    32:9a:ee:69:04:84:c1:92:d4:84:90:a5:78:d4:fb:
                    73:55:83:c3:cd:a9:11:87:95:11:67:c9:3c:f8:90:
                    34:fa:b7:7e:98:c1:17:b3:1f:62:81:aa:8d:77:12:
                    8c:6e:a6:a6:0e:92:f2:aa:2b:75:4b:2b:61:81:c8:
                    a3:9f:e3:cc:9b:ea:83:c4:47:d4:55:ff:33:aa:bb:
                    c7:96:8f:f3:06:04:f5:3c:38:cd:eb:50:c4:9c:b0:
                    8f:9f:88:fa:9a:9c:36:98:47:01:3d:ee:33:6c:ca:
                    e5:92:53:65:c7:d3:5a:20:45:7e:55:3c:2f:a0:a8:
                    9a:01:51:d0:3b:34:43:27:0b:b5:af:c7:80:40:02:
                    e4:a1:33:fd:57:4e:e0:ef:37:0b:8e:ea:0e:c7:02:
                    5a:b1:4a:e6:1f:87:56:39:f8:c2:07:ea:74:5b:67:
                    a0:ce:dc:c8:09:dd:a9:2b:9c:72:5b:e1:14:e6:7d:
                    99:b6:f3:1e:87:71:fa:ba:56:f0:16:5f:27:82:08:
                    fa:ca:e0:00:dd:41:c2:7e:c9:de:19:2a:97:de:88:
                    78:82:ee:1d:99:b4:e2:45:4b:d8:e2:d2:31:ff:a0:
                    dd:33:b3:9f:5c:bf:f1:6d:05:03:9b:de:ce:1c:1c:
                    c1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B0:DA:41:8E:32:94:2D:90:61:04:B9:09:90:D8:44:B3:38:94:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4fa60a4-1cdb-31f8-a694-c8e539777897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b13c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:7f:1a:3d:b9:bf:ee:e3:a4:af:f6:b9:0b:01:4e:d7:cf:
         55:9a:c5:92:d6:78:a0:5c:ff:d9:4a:71:90:63:89:7a:c7:aa:
         12:df:da:4f:c3:28:04:90:fe:ff:61:93:a5:71:2c:fd:8f:5e:
         eb:b8:84:e6:f5:3a:53:34:87:39:66:f0:3a:1d:de:8c:e0:3d:
         ec:f0:54:dc:8f:e5:07:5c:81:be:cb:f7:c1:2c:b3:de:85:98:
         32:bc:eb:4a:5f:43:ef:9f:7a:04:29:d8:03:a2:ef:e6:f1:03:
         70:26:75:9a:3e:0a:a1:21:33:53:db:87:48:b5:e4:06:43:30:
         5f:03:ec:ff:8f:6b:cd:80:c3:5e:98:a6:76:f3:8b:46:a3:cf:
         22:70:70:eb:f8:bb:7d:83:42:99:ca:76:7a:62:f5:56:8a:11:
         a8:15:2b:fc:c8:fc:6b:f9:7a:80:a4:c4:26:89:fc:95:3a:78:
         fc:02:f9:aa:b8:19:9b:d0:2e:a3:f1:22:4d:d1:6f:d4:28:91:
         eb:96:d1:84:ad:e1:a8:0c:73:14:ce:d1:8b:19:ad:ed:e4:69:
         48:94:64:d2:41:dd:97:fa:ac:68:44:57:24:b8:c3:e0:3c:75:
         01:65:7a:1e:d3:c2:1e:49:c9:47:ca:d4:3e:01:28:45:37:89:
         c8:c2:24:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEscNyEpSrR+VAymv0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk
MDliN2M5OWMtOTYzNy00Zjc2LTkxZDUtY2NhYzc5OTA3ZTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC8eYKSaHolZoUF14SMymu5pBITBktSEkKV4
1PtzVYPDzakRh5URZ8k8+JA0+rd+mMEXsx9igaqNdxKMbqamDpLyqit1Sythgcij
n+PMm+qDxEfUVf8zqrvHlo/zBgT1PDjN61DEnLCPn4j6mpw2mEcBPe4zbMrlklNl
x9NaIEV+VTwvoKiaAVHQOzRDJwu1r8eAQALkoTP9V07g7zcLjuoOxwJasUrmH4dW
OfjCB+p0W2egztzICd2pK5xyW+EU5n2ZtvMeh3H6ulbwFl8nggj6yuAA3UHCfsne
GSqX3oh4gu4dmbTiRUvY4tIx/6DdM7OfXL/xbQUDm97OHBzBjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAOw2kGOMpQtkGEEuQmQ2ESzOJSKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRmYTYwYTQtMWNkYi0z
MWY4LWE2OTQtYzhlNTM5Nzc3ODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQAbE8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAKjfxo9ub/u46Sv9rkLAU7Xz1WaxZLWeKBc/9lKcZBjiXrHqhLf
2k/DKASQ/v9hk6VxLP2PXuu4hOb1OlM0hzlm8Dod3ozgPezwVNyP5Qdcgb7L98Es
s96FmDK860pfQ++fegQp2AOi7+bxA3AmdZo+CqEhM1Pbh0i15AZDMF8D7P+Pa82A
w16Ypnbzi0ajzyJwcOv4u32DQpnKdnpi9VaKEagVK/zI/Gv5eoCkxCaJ/JU6ePwC
+aq4GZvQLqPxIk3Rb9QokeuW0YSt4agMcxTO0YsZre3kaUiUZNJB3Zf6rGhEVyS4
w+A8dQFleh7Twh5JyUfK1D4BKEU3icjCJEk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:33:29 2025 by rpki-client