Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389794e9-a6ae-3a96-93bc-2c0b0e2909c2.roa
File:                     389794e9-a6ae-3a96-93bc-2c0b0e2909c2.roa (raw, json)
Hash identifier:          JNXYC45Zu5HBvf7FalLn8HyHRdS5D+CLjByzRBLExVY=
Subject key identifier:   37:BE:F4:AA:0D:DE:9C:0C:78:D5:42:BA:D8:E1:1A:6E:CE:37:A4:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05B6A33353FCC891F72040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389794e9-a6ae-3a96-93bc-2c0b0e2909c2.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1007:b058::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:b6:a3:33:53:fc:c8:91:f7:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=35292ab9-7247-4b9a-8fd7-351cdd602b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7c:7c:a0:06:9a:65:d7:28:d2:18:9a:8f:cb:
                    f9:42:bf:e6:d9:2e:82:e7:62:46:d6:5c:96:c9:9b:
                    7d:10:ea:6e:44:f6:15:99:c8:1c:d0:ef:9e:45:65:
                    ac:1a:12:64:84:ac:62:81:01:88:18:7b:1f:48:6d:
                    4b:41:81:37:af:3e:38:15:a7:46:e0:54:ae:43:e3:
                    ce:04:29:ef:b9:73:78:7e:47:e0:85:27:8f:5f:1b:
                    dd:82:14:22:22:2b:30:78:3d:94:2c:8f:05:58:38:
                    60:e8:02:4a:32:59:39:77:c9:99:34:fc:54:13:73:
                    68:ed:32:47:e1:34:09:bd:96:24:ae:f9:f9:75:b2:
                    f4:e9:01:de:f7:93:ea:18:9b:1c:ce:41:c2:30:ef:
                    ad:e9:cc:e0:b2:a1:0a:f9:f1:7a:38:4b:05:c8:e1:
                    69:fa:53:84:12:76:02:63:16:5c:e0:d5:41:ad:02:
                    e2:42:ce:fa:66:52:8d:e7:a0:ca:dc:48:25:32:a2:
                    67:59:73:76:f8:48:07:fe:3f:71:68:91:06:51:bc:
                    4c:7b:47:7a:50:c4:f8:6a:d9:a9:91:16:13:64:b8:
                    74:f8:fc:ce:05:76:b3:01:16:95:84:37:40:03:f1:
                    dc:59:ac:e6:8a:c0:77:a6:c0:dd:e2:e9:5e:ac:5b:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BE:F4:AA:0D:DE:9C:0C:78:D5:42:BA:D8:E1:1A:6E:CE:37:A4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/389794e9-a6ae-3a96-93bc-2c0b0e2909c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b058::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:7a:67:e0:90:25:54:a8:fe:b2:82:ad:3d:b1:d2:59:a9:95:
         a7:ec:91:66:e3:18:8e:c4:34:fc:f0:9d:d4:df:d9:85:2c:46:
         f7:eb:68:28:b1:14:e3:28:01:9f:8e:78:a3:b1:37:40:fa:26:
         d2:a0:5c:3f:1a:84:75:81:2a:a6:71:4f:9f:28:a4:ad:fd:c6:
         d1:b7:aa:8f:bf:a0:c5:3a:76:5b:df:fd:61:b7:1b:64:96:75:
         be:7a:fe:2d:f1:5f:5a:8f:c7:09:c1:84:6f:37:d2:a7:fb:61:
         7c:91:32:f5:98:9b:69:13:46:64:b2:3b:84:a4:8c:2a:d1:98:
         5f:90:59:01:7a:ee:0c:54:ad:cd:7d:a5:62:71:39:77:bd:dd:
         aa:95:a5:2d:b2:92:8d:a5:84:43:db:26:ef:98:e8:d5:7a:ba:
         d3:03:86:44:54:bc:67:70:e6:13:94:3c:5a:a2:05:55:5d:c3:
         d4:54:4a:eb:ea:a2:4b:9b:8b:9a:b9:bd:73:77:bc:ad:3f:3a:
         e1:ca:6c:11:cc:4a:e0:c4:68:14:57:af:43:f3:88:67:70:ef:
         2f:cc:89:0d:8a:75:0e:0e:b8:d7:8f:00:38:1b:53:74:4e:cb:
         a5:be:b4:8b:38:a4:8c:b3:ca:33:04:35:d2:20:79:da:0d:47:
         f8:9d:19:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE29BbajM1P8yJH3IEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
MzUyOTJhYjktNzI0Ny00YjlhLThmZDctMzUxY2RkNjAyYjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXx8oAaaZdco0hiaj8v5Qr/m2S6C52JG1lyW
yZt9EOpuRPYVmcgc0O+eRWWsGhJkhKxigQGIGHsfSG1LQYE3rz44FadG4FSuQ+PO
BCnvuXN4fkfghSePXxvdghQiIisweD2ULI8FWDhg6AJKMlk5d8mZNPxUE3No7TJH
4TQJvZYkrvn5dbL06QHe95PqGJsczkHCMO+t6czgsqEK+fF6OEsFyOFp+lOEEnYC
YxZc4NVBrQLiQs76ZlKN56DK3EglMqJnWXN2+EgH/j9xaJEGUbxMe0d6UMT4atmp
kRYTZLh0+PzOBXazARaVhDdAA/HcWazmisB3psDd4ulerFsNZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDe+9KoN3pwMeNVCutjhGm7ON6QSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg5Nzk0ZTktYTZhZS0z
YTk2LTkzYmMtMmMwYjBlMjkwOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQB7BY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHF6Z+CQJVSo/rKCrT2x0lmplafskWbjGI7ENPzwndTf2YUsRvfr
aCixFOMoAZ+OeKOxN0D6JtKgXD8ahHWBKqZxT58opK39xtG3qo+/oMU6dlvf/WG3
G2SWdb56/i3xX1qPxwnBhG830qf7YXyRMvWYm2kTRmSyO4SkjCrRmF+QWQF67gxU
rc19pWJxOXe93aqVpS2yko2lhEPbJu+Y6NV6utMDhkRUvGdw5hOUPFqiBVVdw9RU
Suvqokubi5q5vXN3vK0/OuHKbBHMSuDEaBRXr0PziGdw7y/MiQ2KdQ4OuNePADgb
U3ROy6W+tIs4pIyzyjMENdIgedoNR/idGfY=
-----END CERTIFICATE-----
Generated at Wed May 13 12:07:54 2026 by rpki-client