Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eee55aaa-0799-3557-8d4f-ce541992bb69.roa
File:                     eee55aaa-0799-3557-8d4f-ce541992bb69.roa (raw, json)
Hash identifier:          1QMsa4nMqtvriT60xX5d7YSlHIsHYJN9P8kuiWKK/Oc=
Subject key identifier:   AD:50:33:B3:78:6C:05:2F:5E:D1:6D:87:3B:99:58:69:1C:AB:31:F0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD5C33987F7BD62AEABA86100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eee55aaa-0799-3557-8d4f-ce541992bb69.roa
Signing time:             Tue 12 Aug 2025 19:21:18 +0000
ROA not before:           Tue 12 Aug 2025 19:21:18 +0000
ROA not after:            Mon 10 Nov 2025 20:21:18 +0000
asID:                     6167
IP address blocks:        2600:1010:d170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:c3:39:87:f7:bd:62:ae:ab:a8:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 19:21:18 2025 GMT
            Not After : Nov 10 20:21:18 2025 GMT
        Subject: CN=d7672529-cb7c-4751-a813-ee125653fc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:d1:3f:5d:0f:f1:64:22:5b:b5:b8:22:44:
                    b5:d9:cc:6a:08:cb:cc:6f:d2:d6:96:32:c9:e0:4b:
                    f4:ff:42:49:a6:01:a1:46:26:71:48:01:41:19:8f:
                    8e:5b:91:eb:5d:22:fa:4e:ca:08:fc:42:f3:26:e5:
                    63:10:bb:92:24:b9:81:bd:6d:16:fb:e6:54:0b:e5:
                    45:d0:32:3c:79:8d:d7:08:3d:60:31:3e:10:50:82:
                    b8:e9:72:fb:27:76:23:ce:ce:52:2b:e0:33:74:c3:
                    14:f6:14:a3:1d:7b:94:1d:98:46:40:6e:15:ed:db:
                    04:79:ff:81:64:4b:1a:6e:0a:68:d2:16:23:40:6f:
                    d3:f4:f6:04:86:25:12:76:9e:e2:9f:5b:64:d6:a1:
                    f5:f4:56:da:fa:6a:1a:24:2d:a8:ab:3e:3a:d4:59:
                    27:70:35:a5:aa:48:53:d5:98:3b:98:bc:0d:4a:c4:
                    d9:f4:36:c8:86:0e:68:25:81:34:3b:bc:3d:e8:55:
                    f5:ff:46:c0:f9:5b:93:69:31:0a:e3:59:a6:37:fe:
                    b2:ff:b3:ca:70:e8:57:cd:29:57:5c:32:16:c8:ad:
                    bb:be:d9:0b:f2:05:6a:a1:34:3d:36:35:91:79:f9:
                    86:09:97:11:44:2e:7c:2b:13:0a:58:3e:f1:59:1f:
                    9b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:50:33:B3:78:6C:05:2F:5E:D1:6D:87:3B:99:58:69:1C:AB:31:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eee55aaa-0799-3557-8d4f-ce541992bb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:d170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:36:79:24:76:b0:a8:db:6d:4f:ff:20:75:66:d1:9d:f3:0d:
         38:02:3e:a9:cc:6c:88:c4:d5:c7:f5:e3:d6:f8:73:59:1f:03:
         21:a3:9f:cd:7d:df:92:d6:3a:f4:97:91:0c:90:f9:62:5b:92:
         d6:e7:38:26:cd:e1:2a:1f:21:b4:5e:d9:5b:3b:86:2b:fd:86:
         9e:5d:e0:04:09:9e:5f:af:18:c4:1f:2e:c3:e3:a1:7e:5e:1f:
         bd:1b:89:a3:9e:be:a7:0f:f4:72:97:9a:bf:4b:47:bc:ee:33:
         4b:9a:de:e7:62:49:f2:9c:be:75:34:ea:fb:3c:11:70:e2:17:
         14:62:bf:d3:4c:ad:cb:c2:a6:5e:44:24:79:c7:f3:86:57:d3:
         60:a4:38:91:8d:d6:e1:99:3c:eb:77:ac:6c:09:e3:c5:02:f6:
         62:ff:fb:c3:d7:51:0b:b6:30:e9:d4:97:7c:1f:f7:eb:be:55:
         03:b0:d0:15:eb:7b:6a:bc:58:84:e8:9f:ed:50:4e:03:14:f3:
         f9:f4:b9:8b:05:ed:9b:32:64:0b:83:20:5e:b5:9b:7a:b2:92:
         cd:c4:0b:11:91:5f:1c:3f:5a:c3:52:09:4c:a4:0c:d7:1d:27:
         97:f3:d1:13:95:e7:95:97:7f:d6:29:59:21:18:c5:ca:6c:e5:
         dc:6e:e6:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErVwzmH971irquoYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDgxMjE5MjExOFoXDTI1MTExMDIwMjExOFowLzEtMCsGA1UEAxMk
ZDc2NzI1MjktY2I3Yy00NzUxLWE4MTMtZWUxMjU2NTNmYzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA/RP10P8WQiW7W4IkS12cxqCMvMb9LWljLJ
4Ev0/0JJpgGhRiZxSAFBGY+OW5HrXSL6TsoI/ELzJuVjELuSJLmBvW0W++ZUC+VF
0DI8eY3XCD1gMT4QUIK46XL7J3Yjzs5SK+AzdMMU9hSjHXuUHZhGQG4V7dsEef+B
ZEsabgpo0hYjQG/T9PYEhiUSdp7in1tk1qH19Fba+moaJC2oqz461FkncDWlqkhT
1Zg7mLwNSsTZ9DbIhg5oJYE0O7w96FX1/0bA+VuTaTEK41mmN/6y/7PKcOhXzSlX
XDIWyK27vtkL8gVqoTQ9NjWRefmGCZcRRC58KxMKWD7xWR+beQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK1QM7N4bAUvXtFthzuZWGkcqzHwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWVlNTVhYWEtMDc5OS0z
NTU3LThkNGYtY2U1NDE5OTJiYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQENFw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC02eSR2sKjbbU//IHVm0Z3zDTgCPqnMbIjE1cf149b4c1kfAyGj
n81935LWOvSXkQyQ+WJbktbnOCbN4SofIbRe2Vs7hiv9hp5d4AQJnl+vGMQfLsPj
oX5eH70biaOevqcP9HKXmr9LR7zuM0ua3udiSfKcvnU06vs8EXDiFxRiv9NMrcvC
pl5EJHnH84ZX02CkOJGN1uGZPOt3rGwJ48UC9mL/+8PXUQu2MOnUl3wf9+u+VQOw
0BXre2q8WITon+1QTgMU8/n0uYsF7ZsyZAuDIF61m3qyks3ECxGRXxw/WsNSCUyk
DNcdJ5fz0ROV55WXf9YpWSEYxcps5dxu5nE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:46 2025 by rpki-client