Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32c3ad1e-5e30-328c-8ba2-3b84658dd879.roa
File:                     32c3ad1e-5e30-328c-8ba2-3b84658dd879.roa (raw, json)
Hash identifier:          yFytm+q2Wrh0tgfasG82wo9y1oc2/s0UD4nQpdOQvJU=
Subject key identifier:   80:75:27:57:87:AB:93:09:46:CC:B6:6C:90:BB:D5:6A:D1:0B:A7:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F25DCE5DEC71502183680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32c3ad1e-5e30-328c-8ba2-3b84658dd879.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100e:a022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:25:dc:e5:de:c7:15:02:18:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=51db0fb8-de7b-4494-a2b9-716feddea0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:e4:9f:36:85:14:d6:31:7f:ff:6b:b0:20:
                    32:aa:77:f4:6d:ca:21:c9:f4:48:1d:30:78:04:29:
                    8f:64:52:ce:b4:2d:48:17:34:dc:fd:f5:7c:96:54:
                    97:55:4a:45:45:35:f4:2e:3a:9c:f2:32:d1:94:1a:
                    bf:c5:57:35:13:80:ee:b0:d3:30:b4:12:12:67:66:
                    9f:b7:6e:3d:b4:9f:a6:da:4a:e8:cb:03:11:46:69:
                    0d:0b:2a:93:34:e0:d1:25:af:58:8d:6b:47:8d:0d:
                    78:23:10:de:c6:af:65:d8:2b:7d:d3:04:d6:98:d2:
                    0e:f4:e4:7c:01:47:15:3c:38:3b:4b:99:9a:3f:87:
                    b7:4d:fd:74:bf:d8:18:a7:55:7c:f9:f0:2a:ba:6d:
                    c0:cf:7f:9b:98:85:84:0e:22:91:f1:ba:64:d1:17:
                    8a:16:0d:19:75:35:08:2b:84:0c:43:13:53:f3:7c:
                    d2:52:de:3a:8c:79:98:34:c1:15:a2:43:b5:99:ba:
                    bd:10:ce:bb:69:d8:f1:e5:76:e0:72:5e:6e:67:5c:
                    d4:c9:b0:99:9e:e9:f9:d5:60:12:e0:7a:dd:a5:9c:
                    ad:27:a7:f5:2d:83:90:de:05:87:e5:71:69:a8:c9:
                    c5:5f:82:0b:fb:8c:f0:b9:4f:68:4d:be:9b:1b:f7:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:75:27:57:87:AB:93:09:46:CC:B6:6C:90:BB:D5:6A:D1:0B:A7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/32c3ad1e-5e30-328c-8ba2-3b84658dd879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:51:9c:97:1a:0e:4c:20:aa:0a:c7:21:c5:0e:f6:08:ad:87:
         15:10:9c:e9:cd:cb:72:99:78:24:cc:51:e8:06:1b:28:02:38:
         f9:31:9e:e4:36:0a:ee:b6:0a:b3:26:5d:3d:12:e7:4a:85:7d:
         b3:b5:ea:69:a2:ae:cb:09:6a:e3:8f:83:da:38:84:9f:34:04:
         29:d3:70:25:16:c5:a8:0b:8a:11:b5:e7:79:4e:e6:1d:36:b8:
         ef:3b:f5:b2:46:46:21:f5:ef:1c:58:72:75:cc:56:5b:cd:dc:
         cf:11:76:fb:fc:f8:ed:38:55:05:ea:9b:95:14:4e:c2:46:d1:
         d7:23:71:5d:0d:89:56:4b:df:2e:18:e4:d1:8b:24:74:d2:74:
         9b:9e:79:0c:93:38:58:88:67:e8:77:a3:b6:61:33:d7:28:5a:
         07:89:a9:c4:9e:a1:bb:7b:53:e4:d3:d6:3d:3c:cb:01:9c:42:
         98:8d:c9:4e:96:6a:f4:13:2d:e8:5d:cd:0a:08:ba:96:f1:e1:
         da:e8:2b:75:78:2e:f2:79:f2:e7:25:e5:e5:8e:08:0e:ab:6f:
         17:6d:db:87:45:cf:de:57:60:55:9c:4f:be:de:27:32:b4:73:
         79:75:a2:fe:e1:77:5d:74:74:35:12:4f:7d:f2:15:b6:f2:17:
         90:dc:1b:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JfyXc5d7HFQIYNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTFkYjBmYjgtZGU3Yi00NDk0LWEyYjktNzE2ZmVkZGVhMGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5HknzaFFNYxf/9rsCAyqnf0bcohyfRIHTB4
BCmPZFLOtC1IFzTc/fV8llSXVUpFRTX0Ljqc8jLRlBq/xVc1E4DusNMwtBISZ2af
t249tJ+m2kroywMRRmkNCyqTNODRJa9YjWtHjQ14IxDexq9l2Ct90wTWmNIO9OR8
AUcVPDg7S5maP4e3Tf10v9gYp1V8+fAqum3Az3+bmIWEDiKR8bpk0ReKFg0ZdTUI
K4QMQxNT83zSUt46jHmYNMEVokO1mbq9EM67adjx5Xbgcl5uZ1zUybCZnun51WAS
4HrdpZytJ6f1LYOQ3gWH5XFpqMnFX4IL+4zwuU9oTb6bG/dUnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIB1J1eHq5MJRsy2bJC71WrRC6eQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzJjM2FkMWUtNWUzMC0z
MjhjLThiYTItM2I4NDY1OGRkODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDqAi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHhRnJcaDkwgqgrHIcUO9githxUQnOnNy3KZeCTMUegGGygCOPkx
nuQ2Cu62CrMmXT0S50qFfbO16mmirssJauOPg9o4hJ80BCnTcCUWxagLihG153lO
5h02uO879bJGRiH17xxYcnXMVlvN3M8Rdvv8+O04VQXqm5UUTsJG0dcjcV0NiVZL
3y4Y5NGLJHTSdJueeQyTOFiIZ+h3o7ZhM9coWgeJqcSeobt7U+TT1j08ywGcQpiN
yU6WavQTLehdzQoIupbx4droK3V4LvJ58ucl5eWOCA6rbxdt24dFz95XYFWcT77e
JzK0c3l1ov7hd110dDUST33yFbbyF5DcG4w=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:48:19 2026 by rpki-client