Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b7cc76-c996-3888-bb17-8fdf289c420f.roa
File:                     28b7cc76-c996-3888-bb17-8fdf289c420f.roa (raw, json)
Hash identifier:          gvuJUKT2wLWIX9E+AfYR47TyIoJaJ6GOCWFPTmMqwm8=
Subject key identifier:   95:39:B1:10:5D:7B:04:4D:63:8A:F0:88:62:91:1F:D4:F0:C8:FD:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E8B2508C0150BF715E0AC4A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b7cc76-c996-3888-bb17-8fdf289c420f.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        2600:1016:a010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:08:c0:15:0b:f7:15:e0:ac:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=23cd5b02-0ed9-415d-996d-1e2a759c264d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:0d:32:8f:74:e4:20:35:de:95:13:90:f6:
                    45:39:79:0f:33:9d:e6:94:c6:37:0b:df:bf:86:c0:
                    84:f1:c6:fd:4d:66:7f:ed:53:4c:d3:1e:c3:d3:68:
                    88:32:bc:9c:4f:6e:f8:f5:b9:a0:4b:79:10:8f:69:
                    2e:b1:43:cb:19:8f:14:de:11:78:eb:d7:fa:70:41:
                    4a:04:2e:98:13:9c:ff:24:37:71:06:4e:3d:e8:e3:
                    e2:2a:e1:70:c8:cd:78:66:1d:08:e9:43:7f:f8:71:
                    c5:94:7c:ee:5a:f0:2b:8a:5a:de:1d:7f:58:41:9b:
                    a8:8e:35:6f:c0:10:d6:ec:01:44:61:b4:b3:1e:31:
                    25:46:5a:71:89:a4:20:e9:f5:77:1a:ef:cc:ef:04:
                    c9:e3:14:a4:aa:f0:1e:42:b1:26:7c:0f:35:50:54:
                    84:77:37:dc:04:20:46:5c:ea:10:ad:79:fe:f7:ca:
                    bd:f0:55:3e:57:50:4f:3f:15:09:2a:c1:8e:f1:32:
                    a1:dd:6c:23:c5:21:c8:3c:71:c3:2c:de:53:31:d5:
                    f2:79:be:a7:4f:1f:22:4d:cf:1b:15:a2:0d:a4:e6:
                    52:65:4c:60:d8:a2:b9:0d:b3:ee:b9:c8:80:bd:60:
                    20:90:69:46:5d:34:52:86:9f:d5:3d:5c:08:0d:e5:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:39:B1:10:5D:7B:04:4D:63:8A:F0:88:62:91:1F:D4:F0:C8:FD:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28b7cc76-c996-3888-bb17-8fdf289c420f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:a010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:02:da:f6:39:e4:ae:3b:88:9f:db:cb:cb:96:a5:bb:c2:ae:
         f3:eb:04:9c:01:54:45:ad:f1:d1:41:ac:d5:e7:c1:55:d0:5d:
         fe:1b:43:f1:c7:5e:85:f9:b3:9b:c4:1c:1b:95:09:99:c4:67:
         ac:50:c9:03:11:ae:2e:56:c2:73:63:fc:9e:38:e2:88:5e:66:
         bb:5e:1e:20:4b:de:5d:09:be:6a:b1:45:4c:5c:ca:37:81:be:
         7b:68:5f:08:64:4a:29:fe:99:54:66:12:01:52:2a:55:56:d1:
         1c:2a:9c:ed:c0:22:70:18:fe:99:53:41:b0:8d:ad:83:f5:04:
         99:8d:6b:17:4e:7c:e3:cb:9f:81:d0:cb:95:99:d1:83:cf:b1:
         f4:ea:3f:31:fe:8e:7b:8d:d0:f1:6f:60:29:0e:f2:29:83:bd:
         bf:77:a6:c9:f9:c8:fb:ec:a4:3c:7e:ac:7b:ad:37:15:65:4b:
         a2:d4:2d:03:b9:dd:51:e0:f5:aa:c7:99:b5:77:e4:26:cf:2c:
         ea:40:62:0b:61:3f:7d:c5:b8:e1:74:c3:de:b9:fa:3f:33:3d:
         23:de:2f:26:60:ee:56:60:18:a0:bc:33:ab:dc:02:6d:15:57:
         5a:01:bb:e8:c5:80:99:e0:cd:2b:9d:75:ee:33:9f:f2:db:10:
         0d:22:9b:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6LJQjAFQv3FeCsSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
MjNjZDViMDItMGVkOS00MTVkLTk5NmQtMWUyYTc1OWMyNjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztUNMo905CA13pUTkPZFOXkPM53mlMY3C9+/
hsCE8cb9TWZ/7VNM0x7D02iIMrycT2749bmgS3kQj2kusUPLGY8U3hF469f6cEFK
BC6YE5z/JDdxBk496OPiKuFwyM14Zh0I6UN/+HHFlHzuWvArilreHX9YQZuojjVv
wBDW7AFEYbSzHjElRlpxiaQg6fV3Gu/M7wTJ4xSkqvAeQrEmfA81UFSEdzfcBCBG
XOoQrXn+98q98FU+V1BPPxUJKsGO8TKh3WwjxSHIPHHDLN5TMdXyeb6nTx8iTc8b
FaINpOZSZUxg2KK5DbPuuciAvWAgkGlGXTRShp/VPVwIDeWeNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJU5sRBdewRNY4rwiGKRH9TwyP1NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjhiN2NjNzYtYzk5Ni0z
ODg4LWJiMTctOGZkZjI4OWM0MjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQFqAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGwC2vY55K47iJ/by8uWpbvCrvPrBJwBVEWt8dFBrNXnwVXQXf4b
Q/HHXoX5s5vEHBuVCZnEZ6xQyQMRri5WwnNj/J444oheZrteHiBL3l0JvmqxRUxc
yjeBvntoXwhkSin+mVRmEgFSKlVW0RwqnO3AInAY/plTQbCNrYP1BJmNaxdOfOPL
n4HQy5WZ0YPPsfTqPzH+jnuN0PFvYCkO8imDvb93psn5yPvspDx+rHutNxVlS6LU
LQO53VHg9arHmbV35CbPLOpAYgthP33FuOF0w965+j8zPSPeLyZg7lZgGKC8M6vc
Am0VV1oBu+jFgJngzSudde4zn/LbEA0imwk=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:40 2026 by rpki-client