Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d5c7349-7cb7-3896-a2ae-5e4ec711a9f9.roa
File:                     1d5c7349-7cb7-3896-a2ae-5e4ec711a9f9.roa (raw, json)
Hash identifier:          IaUFTgE8L5jXNaGz86Z0Qr+IV8Qb9EfyYCLmBto5Oak=
Subject key identifier:   AE:DE:F7:F8:D9:6E:E7:BE:DC:DD:BB:53:F0:F6:B6:44:48:B5:6C:5E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49747F64139F91552863EE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d5c7349-7cb7-3896-a2ae-5e4ec711a9f9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:a128::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:7f:64:13:9f:91:55:28:63:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b3f75615-9bdf-4235-93d9-00109850c4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:a5:f5:8b:25:59:82:85:8c:e0:b0:ea:86:
                    23:4b:2e:1e:03:d2:06:42:3d:81:79:b6:ae:11:91:
                    35:8b:fc:b9:60:1c:e8:2c:ee:cc:71:6e:c6:b3:21:
                    23:83:29:c1:72:5e:be:e6:33:df:1e:47:5f:16:e5:
                    13:c6:23:35:88:c6:69:bb:7f:c0:10:ad:37:19:2d:
                    81:49:53:6b:07:2f:76:02:db:05:87:ac:f1:42:4f:
                    c8:86:6d:6d:6b:06:b8:f4:9a:f2:5a:0d:99:ba:d3:
                    0d:ef:71:60:eb:86:87:ab:d9:d1:d1:98:45:d0:bd:
                    5f:f9:95:07:4b:54:6b:b6:05:ac:df:71:a2:1d:f3:
                    33:b3:fd:00:5a:1a:48:34:58:60:de:88:f7:8d:d6:
                    ef:94:9c:3d:c2:a7:36:c5:b1:ab:da:92:11:47:fc:
                    85:d1:f5:44:9b:90:1c:05:b4:22:53:b3:0b:b8:3b:
                    5c:d3:a3:2f:b2:47:76:0e:3e:ff:62:2a:ad:d4:29:
                    a0:ca:c7:e3:38:d0:f4:e2:38:64:11:ab:06:50:82:
                    7d:a8:47:f4:b2:a2:50:89:e2:de:b9:4c:9e:6c:9a:
                    3c:7a:e5:5b:b0:c0:5c:53:ff:fa:0e:88:8f:b2:86:
                    e7:cb:e3:59:76:95:b7:c0:ca:db:a4:d6:ca:14:e0:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DE:F7:F8:D9:6E:E7:BE:DC:DD:BB:53:F0:F6:B6:44:48:B5:6C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d5c7349-7cb7-3896-a2ae-5e4ec711a9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a128::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:93:9a:65:f6:85:86:24:3d:d1:76:9e:f1:a5:a3:79:26:d8:
         de:15:16:f3:18:4e:a1:37:9f:db:d4:2a:24:4e:18:a6:15:a7:
         7d:ed:28:09:aa:c3:3f:a4:84:41:4d:c9:c3:ad:c4:04:be:59:
         b2:b3:a1:44:45:d0:9e:7d:da:8b:19:87:d6:43:f4:41:40:9c:
         89:b7:3e:1c:9a:9c:2f:57:c8:af:65:93:ae:60:df:03:2b:8d:
         5b:db:df:68:41:0c:77:7f:5c:2f:12:57:ce:9b:9f:22:c6:c5:
         7d:17:46:1b:fc:a4:69:b2:f8:b6:ce:14:40:24:a2:25:01:de:
         ce:9a:a0:51:0d:0a:0b:82:d9:b5:06:c1:6c:f7:f0:49:3a:0d:
         55:f3:3c:ff:26:3e:ff:f3:76:72:82:99:21:82:e4:17:27:06:
         73:97:a8:b1:68:0e:2a:56:64:fc:1d:e0:2c:2a:87:5d:44:f9:
         4b:e4:ab:a6:95:3f:5f:62:37:8c:53:ea:06:57:6b:8c:9d:dc:
         cc:a3:c2:87:3e:c5:e2:eb:14:5b:78:96:66:23:ca:c0:17:e8:
         54:c6:c7:ee:20:5b:5f:47:45:4a:5c:97:a5:b5:88:de:6a:82:
         95:02:12:47:3e:99:ba:eb:1a:0a:47:c9:92:7d:14:a1:af:31:
         9d:df:d7:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdH9kE5+RVShj7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjNmNzU2MTUtOWJkZi00MjM1LTkzZDktMDAxMDk4NTBjNGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Wl9YslWYKFjOCw6oYjSy4eA9IGQj2Bebau
EZE1i/y5YBzoLO7McW7GsyEjgynBcl6+5jPfHkdfFuUTxiM1iMZpu3/AEK03GS2B
SVNrBy92AtsFh6zxQk/Ihm1tawa49JryWg2ZutMN73Fg64aHq9nR0ZhF0L1f+ZUH
S1RrtgWs33GiHfMzs/0AWhpINFhg3oj3jdbvlJw9wqc2xbGr2pIRR/yF0fVEm5Ac
BbQiU7MLuDtc06Mvskd2Dj7/Yiqt1CmgysfjOND04jhkEasGUIJ9qEf0sqJQieLe
uUyebJo8euVbsMBcU//6DoiPsobny+NZdpW3wMrbpNbKFOCi7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK7e9/jZbue+3N27U/D2tkRItWxeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWQ1YzczNDktN2NiNy0z
ODk2LWEyYWUtNWU0ZWM3MTFhOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDaEo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC+TmmX2hYYkPdF2nvGlo3km2N4VFvMYTqE3n9vUKiROGKYVp33t
KAmqwz+khEFNycOtxAS+WbKzoURF0J592osZh9ZD9EFAnIm3PhyanC9XyK9lk65g
3wMrjVvb32hBDHd/XC8SV86bnyLGxX0XRhv8pGmy+LbOFEAkoiUB3s6aoFENCguC
2bUGwWz38Ek6DVXzPP8mPv/zdnKCmSGC5BcnBnOXqLFoDipWZPwd4Cwqh11E+Uvk
q6aVP19iN4xT6gZXa4yd3Myjwoc+xeLrFFt4lmYjysAX6FTGx+4gW19HRUpcl6W1
iN5qgpUCEkc+mbrrGgpHyZJ9FKGvMZ3f128=
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:30:35 2026 by rpki-client