Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/098595e1-6740-3a3c-8a8d-3dbfc8de524a.roa
File:                     098595e1-6740-3a3c-8a8d-3dbfc8de524a.roa (raw, json)
Hash identifier:          T3HG9GlSDgjwfbb0d+W29Ms9czLtmw/tHRtS5fufGoA=
Subject key identifier:   2E:08:1C:AB:FB:B5:EE:AC:7E:11:2C:C8:BF:60:E6:1A:D4:8A:F9:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D948AA72FF20428595AC026D8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/098595e1-6740-3a3c-8a8d-3dbfc8de524a.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1012:b390::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:a7:2f:f2:04:28:59:5a:c0:26:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=da4fee30-c63e-4e63-9398-6e30ba164d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:d1:88:02:e9:7f:8a:32:70:b8:c8:9d:89:
                    df:61:eb:9d:ab:28:00:a3:23:bb:51:c9:d2:66:eb:
                    bd:d9:2b:d3:4b:01:9e:43:6c:d7:f1:ac:2c:21:47:
                    fd:5c:97:b1:26:7a:8b:9f:1f:ed:3c:3d:75:af:0f:
                    ee:12:7b:b7:45:90:aa:53:7f:56:70:9e:32:e2:73:
                    9d:a4:c4:69:d2:9f:2f:06:ac:08:7b:9b:d3:d1:94:
                    88:ed:cf:40:6b:b6:a3:37:e5:90:88:e8:0d:d3:75:
                    d0:65:99:af:26:45:62:54:51:5a:4b:5c:63:a2:be:
                    ba:68:c5:ba:59:de:42:2a:3c:a0:eb:53:55:cb:c5:
                    89:9b:21:6d:c1:fe:30:98:d0:da:04:3c:8a:43:25:
                    a8:92:b5:3e:03:89:c1:30:68:fe:7a:99:f5:55:fe:
                    88:42:30:c0:b9:ba:9d:9c:a5:a7:11:27:80:71:a1:
                    c5:12:14:5a:db:27:58:d5:5d:fd:e9:cc:40:7e:26:
                    35:5e:ec:88:2b:a3:c9:15:b2:f6:07:f1:5b:2b:13:
                    74:42:c9:ef:c2:8c:a4:35:3f:16:40:fe:ca:21:a0:
                    12:13:17:ef:c9:b1:0d:d8:38:e8:07:eb:c7:ff:f0:
                    04:d4:56:93:41:e7:77:77:ab:6d:f0:91:46:b5:66:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:08:1C:AB:FB:B5:EE:AC:7E:11:2C:C8:BF:60:E6:1A:D4:8A:F9:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/098595e1-6740-3a3c-8a8d-3dbfc8de524a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b390::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:3e:4a:8e:f9:c9:20:a0:f5:a0:e5:90:78:38:46:99:1a:80:
         ee:90:f0:3b:05:08:39:83:1a:99:6f:b5:59:b5:48:1f:f7:77:
         7f:a7:21:a5:87:91:87:71:1e:80:b4:ec:9a:54:67:0b:0d:50:
         ff:53:fb:47:84:99:1d:82:73:ec:16:0e:6a:5a:33:be:b4:60:
         b2:41:a5:97:5f:77:6a:b1:d0:98:5a:ad:53:bd:bf:83:c7:6d:
         88:13:8c:6e:0b:9f:0d:5e:56:6b:c5:45:60:28:e2:f4:d3:c4:
         ac:01:fc:93:bb:0f:9b:c5:6c:f2:2f:69:6d:6f:27:de:36:67:
         d5:95:a0:e7:5a:66:54:a8:97:5b:a7:8f:76:23:7f:7b:db:3d:
         e7:c3:70:38:6a:7a:93:2d:60:31:8f:72:3a:b3:f2:5a:d5:0d:
         93:d6:4e:08:89:7a:7d:da:0b:1c:e6:5c:5b:87:ea:c8:4d:0d:
         af:5b:84:fa:35:61:b6:63:9e:d7:b6:70:eb:35:ce:c9:b9:a2:
         a6:ea:1c:ef:53:c4:50:52:bd:b2:86:79:fe:aa:34:70:0d:fa:
         2e:28:c1:cb:96:c3:e9:29:73:3c:c4:81:ce:d4:87:f8:3a:83:
         8e:b4:12:ef:e1:c7:a8:d4:05:17:f6:a7:02:80:99:41:30:a1:
         ec:0d:ae:6e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Uiqcv8gQoWVrAJtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk
ZGE0ZmVlMzAtYzYzZS00ZTYzLTkzOTgtNmUzMGJhMTY0ZDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu7RiALpf4oycLjInYnfYeudqygAoyO7UcnS
Zuu92SvTSwGeQ2zX8awsIUf9XJexJnqLnx/tPD11rw/uEnu3RZCqU39WcJ4y4nOd
pMRp0p8vBqwIe5vT0ZSI7c9Aa7ajN+WQiOgN03XQZZmvJkViVFFaS1xjor66aMW6
Wd5CKjyg61NVy8WJmyFtwf4wmNDaBDyKQyWokrU+A4nBMGj+epn1Vf6IQjDAubqd
nKWnESeAcaHFEhRa2ydY1V396cxAfiY1XuyIK6PJFbL2B/FbKxN0QsnvwoykNT8W
QP7KIaASExfvybEN2DjoB+vH//AE1FaTQed3d6tt8JFGtWZmKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC4IHKv7te6sfhEsyL9g5hrUivl5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDk4NTk1ZTEtNjc0MC0z
YTNjLThhOGQtM2RiZmM4ZGU1MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQErOQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACc+So75ySCg9aDlkHg4RpkagO6Q8DsFCDmDGplvtVm1SB/3d3+n
IaWHkYdxHoC07JpUZwsNUP9T+0eEmR2Cc+wWDmpaM760YLJBpZdfd2qx0JharVO9
v4PHbYgTjG4Lnw1eVmvFRWAo4vTTxKwB/JO7D5vFbPIvaW1vJ942Z9WVoOdaZlSo
l1unj3Yjf3vbPefDcDhqepMtYDGPcjqz8lrVDZPWTgiJen3aCxzmXFuH6shNDa9b
hPo1YbZjnte2cOs1zsm5oqbqHO9TxFBSvbKGef6qNHAN+i4owcuWw+kpczzEgc7U
h/g6g460Eu/hx6jUBRf2pwKAmUEwoewNrm4=
-----END CERTIFICATE-----
Generated at Wed May 13 09:09:56 2026 by rpki-client