Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d97b3c-f694-318a-8402-3f17bc873953.roa
File:                     40d97b3c-f694-318a-8402-3f17bc873953.roa (raw, json)
Hash identifier:          uz8YZ4xe44WLQH1hipmuEhafKiu4j3NOvLzBo0vdZcY=
Subject key identifier:   CA:E5:60:DA:4E:96:56:52:83:73:78:C8:DA:C5:8D:BB:E1:33:8C:F7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE03ACA9033CC4C8F705300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d97b3c-f694-318a-8402-3f17bc873953.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1010:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:3a:ca:90:33:cc:4c:8f:70:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=83fb873f-a674-4152-8012-f1424e73ae8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f0:ee:aa:4c:1a:19:1e:84:da:ac:d4:f1:66:
                    0b:b5:ab:08:2b:bb:84:af:80:70:c9:a3:7b:c2:1e:
                    8d:73:01:c8:53:d8:cd:51:49:12:fe:2b:0e:00:6c:
                    44:4a:a9:e8:32:01:79:21:e0:c0:0b:05:70:d7:6a:
                    b0:e6:e6:5d:52:f7:44:7a:5b:39:8f:b5:ee:c1:78:
                    61:36:24:cd:cc:d3:06:23:52:9a:a2:3d:13:38:6c:
                    39:aa:c5:0a:21:8f:ce:0d:79:dd:4c:98:7c:43:df:
                    a9:1d:d7:30:64:29:94:b9:e0:bb:57:85:4b:80:17:
                    18:a5:1e:4d:22:4d:9b:74:41:fc:f6:d8:22:90:1d:
                    3f:c9:1e:9d:82:41:c1:c5:c7:10:1c:f8:4e:7b:b2:
                    97:15:0e:b9:a6:12:14:fb:4a:d5:5a:d9:1c:d0:7a:
                    cf:9c:29:4a:d0:c0:10:44:06:85:84:fb:a7:ee:6b:
                    67:63:81:e6:c3:c0:9c:0e:54:18:79:85:63:3a:d3:
                    7a:b1:f1:1a:83:36:de:31:ab:58:83:97:94:2f:47:
                    ee:1a:15:b5:4f:38:13:38:d5:ab:a2:7a:67:8d:44:
                    f4:da:a2:5a:28:88:44:0f:d2:56:d1:43:fa:f6:ff:
                    f9:fd:aa:4b:14:d1:07:b4:9b:0e:b2:02:6c:7a:66:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E5:60:DA:4E:96:56:52:83:73:78:C8:DA:C5:8D:BB:E1:33:8C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40d97b3c-f694-318a-8402-3f17bc873953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:97:27:01:21:5e:8e:88:af:a3:cb:56:4c:4e:da:cf:cd:36:
         a0:25:3c:aa:c6:8b:bd:89:23:1c:5f:7e:3a:57:ea:02:92:c9:
         cc:6d:b2:19:85:aa:f5:03:75:62:21:53:9a:f1:f8:fd:f3:77:
         ce:ab:d1:3e:d1:75:2e:e9:7d:88:c6:b8:01:f5:b0:c4:f3:94:
         f2:76:c0:3d:f9:3f:ab:e8:b9:26:3f:e7:3c:01:a4:59:7e:dc:
         a6:21:50:a8:85:c0:33:71:55:ed:24:ae:0e:1f:10:0f:ed:b4:
         31:8f:aa:63:10:14:1e:d9:37:b7:84:39:f6:15:23:52:71:6e:
         a5:39:33:ff:07:f6:89:41:07:f4:38:72:84:dc:08:a3:20:70:
         53:3a:9e:04:20:33:58:93:ca:2c:5a:d4:c4:27:14:b4:9b:00:
         d3:e5:c6:f6:6f:d0:e0:78:c4:20:15:ef:59:e3:f6:e9:95:f2:
         f1:fc:cd:ee:1a:33:89:84:d3:15:12:1d:98:79:b0:40:46:ab:
         62:55:a7:71:b8:74:8d:27:b1:76:ce:b6:eb:39:dd:f0:72:aa:
         d5:3c:a0:2f:eb:90:f7:dc:3b:a3:cc:e0:79:9b:d5:00:78:70:
         aa:2c:ef:74:2d:c0:02:ce:90:30:58:91:f6:57:2f:0f:9a:69:
         2a:d4:fe:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4DrKkDPMTI9wUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
ODNmYjg3M2YtYTY3NC00MTUyLTgwMTItZjE0MjRlNzNhZThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvDuqkwaGR6E2qzU8WYLtasIK7uEr4BwyaN7
wh6NcwHIU9jNUUkS/isOAGxESqnoMgF5IeDACwVw12qw5uZdUvdEels5j7XuwXhh
NiTNzNMGI1Kaoj0TOGw5qsUKIY/ODXndTJh8Q9+pHdcwZCmUueC7V4VLgBcYpR5N
Ik2bdEH89tgikB0/yR6dgkHBxccQHPhOe7KXFQ65phIU+0rVWtkc0HrPnClK0MAQ
RAaFhPun7mtnY4Hmw8CcDlQYeYVjOtN6sfEagzbeMatYg5eUL0fuGhW1TzgTONWr
onpnjUT02qJaKIhED9JW0UP69v/5/apLFNEHtJsOsgJsemabewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMrlYNpOllZSg3N4yNrFjbvhM4z3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDBkOTdiM2MtZjY5NC0z
MThhLTg0MDItM2YxN2JjODczOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQELAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKWXJwEhXo6Ir6PLVkxO2s/NNqAlPKrGi72JIxxffjpX6gKSycxt
shmFqvUDdWIhU5rx+P3zd86r0T7RdS7pfYjGuAH1sMTzlPJ2wD35P6vouSY/5zwB
pFl+3KYhUKiFwDNxVe0krg4fEA/ttDGPqmMQFB7ZN7eEOfYVI1JxbqU5M/8H9olB
B/Q4coTcCKMgcFM6ngQgM1iTyixa1MQnFLSbANPlxvZv0OB4xCAV71nj9umV8vH8
ze4aM4mE0xUSHZh5sEBGq2JVp3G4dI0nsXbOtus53fByqtU8oC/rkPfcO6PM4Hmb
1QB4cKos73QtwALOkDBYkfZXLw+aaSrU/lY=
-----END CERTIFICATE-----
Generated at Wed May 13 15:47:49 2026 by rpki-client