Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2be3e4a1-ea46-345c-a23f-ae36d1a42184.roa
File:                     2be3e4a1-ea46-345c-a23f-ae36d1a42184.roa (raw, json)
Hash identifier:          hDtJ1vf2Dm5+9/JcLZt9R77S2dySCSPczaqeYMYCJE0=
Subject key identifier:   AB:AC:BD:F4:2A:D6:A9:95:DF:9B:09:49:5E:09:02:6E:C0:24:06:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE047C148AF795BF2D430C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2be3e4a1-ea46-345c-a23f-ae36d1a42184.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1015:d010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:47:c1:48:af:79:5b:f2:d4:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=d2500635-97c0-4ace-a4c8-1a3d78be9e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:ca:35:7a:4c:b6:2e:90:bf:17:3b:0c:6e:
                    fa:0b:dc:be:2f:59:be:31:48:05:2d:c4:d0:28:ca:
                    14:b3:c4:ea:fc:57:41:fd:e5:33:58:4a:03:1e:84:
                    77:79:67:42:60:b6:f2:be:b7:7c:60:c1:9f:d7:a4:
                    b0:3e:af:ed:4d:d6:74:e0:bc:38:99:c7:bf:65:19:
                    3c:76:f8:62:7a:e5:68:2b:7c:b5:5d:1d:c0:c4:81:
                    56:3e:38:70:ba:91:93:48:04:e1:e8:74:53:bf:e0:
                    55:2a:0c:34:6c:14:5e:71:78:3f:86:64:f2:75:d2:
                    dc:65:46:5a:7f:46:a9:3b:29:48:4a:f6:75:70:d2:
                    12:36:4e:78:b8:cf:db:fb:46:de:a9:8d:48:84:11:
                    86:2d:f4:0b:bf:0c:63:65:97:e6:2d:8a:84:a0:d4:
                    0c:3c:b2:a1:46:74:e6:ea:4e:18:78:03:c0:d0:e0:
                    0f:d8:49:4a:b5:a6:10:91:4d:d2:c9:af:2b:30:40:
                    5e:5d:5f:89:99:a9:3a:99:65:2e:9b:5c:c0:a7:b4:
                    5d:94:a8:bb:5a:2d:92:4c:13:c2:30:e7:e4:ff:10:
                    73:cc:a1:cf:8f:d0:2d:3d:6f:37:16:f8:86:28:bb:
                    e6:04:4c:10:1f:66:87:6d:e3:0f:92:d5:f9:87:ae:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AC:BD:F4:2A:D6:A9:95:DF:9B:09:49:5E:09:02:6E:C0:24:06:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2be3e4a1-ea46-345c-a23f-ae36d1a42184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:d010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:58:96:24:2e:0c:7d:ec:65:1e:a8:a7:66:44:7a:3c:ba:4a:
         41:65:56:d8:b2:38:bf:a5:02:44:02:f8:e9:d7:94:64:37:1c:
         75:dd:89:50:e7:51:45:ba:d5:01:3d:9f:47:91:10:a8:e2:68:
         11:e6:a2:f5:cb:d6:ce:77:59:9d:07:49:69:5a:6a:48:44:30:
         7b:41:6d:1d:90:e7:21:55:40:af:70:92:45:c5:b2:f9:37:10:
         f2:3e:5e:50:ec:17:24:35:0a:f0:3c:44:0c:81:00:9b:c1:a7:
         84:7e:24:40:35:e5:c9:df:36:c7:7f:6f:df:28:1e:30:c0:98:
         50:a0:c1:a9:a0:c2:4b:7b:09:c3:96:da:6e:7e:5f:5d:fe:b3:
         05:b8:15:2f:61:ed:fd:57:81:19:f5:d9:5c:40:f7:d6:11:12:
         54:ff:ec:9a:25:ae:2c:88:15:ee:b7:bd:9a:0e:17:9c:7a:79:
         04:6a:9b:55:4d:df:b6:2e:35:df:5a:65:64:2f:e4:d4:79:93:
         ac:b8:99:d0:22:55:a7:32:b1:62:09:55:fe:74:f2:79:30:ac:
         3c:b6:8f:6a:07:a1:67:9b:4a:44:ad:82:ca:90:72:66:87:15:
         f7:ac:35:57:eb:39:6c:a4:f6:f9:b3:c0:f8:6d:12:de:3b:0d:
         c0:89:11:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4EfBSK95W/LUMMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
ZDI1MDA2MzUtOTdjMC00YWNlLWE0YzgtMWEzZDc4YmU5ZTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAbKNXpMti6Qvxc7DG76C9y+L1m+MUgFLcTQ
KMoUs8Tq/FdB/eUzWEoDHoR3eWdCYLbyvrd8YMGf16SwPq/tTdZ04Lw4mce/ZRk8
dvhieuVoK3y1XR3AxIFWPjhwupGTSATh6HRTv+BVKgw0bBRecXg/hmTyddLcZUZa
f0apOylISvZ1cNISNk54uM/b+0beqY1IhBGGLfQLvwxjZZfmLYqEoNQMPLKhRnTm
6k4YeAPA0OAP2ElKtaYQkU3Sya8rMEBeXV+Jmak6mWUum1zAp7RdlKi7Wi2STBPC
MOfk/xBzzKHPj9AtPW83FviGKLvmBEwQH2aHbeMPktX5h66TNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKusvfQq1qmV35sJSV4JAm7AJAZ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmJlM2U0YTEtZWE0Ni0z
NDVjLWEyM2YtYWUzNmQxYTQyMTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFdAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAtYliQuDH3sZR6op2ZEejy6SkFlVtiyOL+lAkQC+OnXlGQ3HHXd
iVDnUUW61QE9n0eREKjiaBHmovXL1s53WZ0HSWlaakhEMHtBbR2Q5yFVQK9wkkXF
svk3EPI+XlDsFyQ1CvA8RAyBAJvBp4R+JEA15cnfNsd/b98oHjDAmFCgwamgwkt7
CcOW2m5+X13+swW4FS9h7f1XgRn12VxA99YRElT/7JolriyIFe63vZoOF5x6eQRq
m1VN37YuNd9aZWQv5NR5k6y4mdAiVacysWIJVf508nkwrDy2j2oHoWebSkStgsqQ
cmaHFfesNVfrOWyk9vmzwPhtEt47DcCJETg=
-----END CERTIFICATE-----
Generated at Wed May 13 08:11:45 2026 by rpki-client