Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4319b43c-b8df-3a71-a6f7-88a8df4b4f1a.roa
File:                     4319b43c-b8df-3a71-a6f7-88a8df4b4f1a.roa (raw, json)
Hash identifier:          vdoXnkzOBULurUVk2mWupACg5XMfPWOn8M1/9wIce6A=
Subject key identifier:   A6:DB:3D:3F:5D:9E:7D:F0:97:65:AE:4E:B6:C5:AA:E4:24:E2:81:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4986595529C7E972CD120780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4319b43c-b8df-3a71-a6f7-88a8df4b4f1a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100b:b110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:59:55:29:c7:e9:72:cd:12:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=46ab0258-8124-404a-b743-76bdcdeaf324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:dc:17:d2:85:f5:dd:39:df:e2:55:3c:9d:
                    84:59:d3:04:1b:de:45:22:6f:58:9c:b0:a3:9f:07:
                    1d:de:20:03:dc:dd:25:3e:23:6a:3d:51:94:e3:96:
                    d0:8e:14:31:ee:5c:d6:db:d8:c7:90:b1:12:32:b8:
                    a1:2f:7d:40:fb:1a:bf:2d:c8:ba:ed:e4:ed:7e:1d:
                    2e:c8:36:c6:1d:a6:30:7a:2d:60:14:97:9e:99:c2:
                    7f:0c:aa:d7:58:d6:0c:e2:e5:66:d7:2d:b4:91:4a:
                    ff:35:bc:16:ab:37:6f:cc:8f:41:f0:db:09:e4:ee:
                    f7:23:8f:06:a5:07:1a:45:e9:cc:15:74:3c:84:1d:
                    25:56:b4:69:a2:e9:68:d2:55:c3:29:45:5d:b4:6e:
                    52:74:b9:df:10:42:96:fd:7c:66:bb:92:e0:8f:4c:
                    01:6f:0f:6f:dc:85:43:d3:fc:3e:0a:e1:6a:8d:81:
                    b0:bd:56:af:fc:7a:7d:e2:14:05:4c:b9:9d:aa:d8:
                    3b:98:87:27:88:fb:01:7a:12:a5:ae:15:38:15:b8:
                    3e:9c:d6:9c:41:a1:5f:e3:7f:07:de:27:41:cb:7b:
                    b4:b3:f4:a0:a9:1f:7c:ff:9d:7b:d7:0f:26:c4:ff:
                    7a:55:dd:93:e6:9f:08:ca:c4:cc:1b:23:f2:08:82:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DB:3D:3F:5D:9E:7D:F0:97:65:AE:4E:B6:C5:AA:E4:24:E2:81:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4319b43c-b8df-3a71-a6f7-88a8df4b4f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d8:3f:6e:d9:70:59:15:6e:b3:ac:91:78:44:3c:68:5f:dc:
         e0:ce:6b:4f:39:56:90:8c:09:5b:f8:a1:41:8f:03:bf:11:b2:
         66:ba:8b:c2:1f:50:a2:c5:31:24:da:2f:b2:3a:ad:4d:74:a5:
         2d:ac:88:54:f0:cf:e2:b1:3d:fc:b5:f6:02:ce:a0:5c:90:be:
         28:16:02:ee:5a:47:dc:03:e3:07:34:f7:5b:61:5c:4b:95:b5:
         a9:92:26:16:6d:e5:60:40:89:4e:a3:fb:cb:45:6a:1d:c7:0f:
         48:12:d8:55:b5:a9:94:37:4d:70:02:b6:6a:c9:5e:ee:af:61:
         48:77:9d:8d:f8:ce:18:52:4f:ab:ce:0e:68:35:1d:a4:18:7f:
         a3:0b:83:61:2a:7b:f6:88:6a:6b:c5:0f:26:9f:6b:7a:5a:03:
         68:f7:ed:d3:0d:45:53:52:0d:68:4a:0e:39:66:f2:ab:e0:1f:
         a3:4a:63:9e:ae:4c:bd:7b:9d:e7:33:57:77:91:16:8e:45:c2:
         74:8d:49:6f:65:0c:b5:4c:ed:79:f6:d6:36:ff:ed:59:62:d4:
         5f:b4:3a:78:51:8e:de:05:23:87:e5:46:9d:02:49:93:29:77:
         4f:a5:48:2d:42:b5:c7:d9:79:d7:bb:52:1d:f8:fc:0f:b3:b2:
         3b:da:45:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhllVKcfpcs0SB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDZhYjAyNTgtODEyNC00MDRhLWI3NDMtNzZiZGNkZWFmMzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunLcF9KF9d053+JVPJ2EWdMEG95FIm9YnLCj
nwcd3iAD3N0lPiNqPVGU45bQjhQx7lzW29jHkLESMrihL31A+xq/Lci67eTtfh0u
yDbGHaYwei1gFJeemcJ/DKrXWNYM4uVm1y20kUr/NbwWqzdvzI9B8NsJ5O73I48G
pQcaRenMFXQ8hB0lVrRpoulo0lXDKUVdtG5SdLnfEEKW/Xxmu5Lgj0wBbw9v3IVD
0/w+CuFqjYGwvVav/Hp94hQFTLmdqtg7mIcniPsBehKlrhU4Fbg+nNacQaFf438H
3idBy3u0s/SgqR98/5171w8mxP96Vd2T5p8IysTMGyPyCIJ3JQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKbbPT9dnn3wl2WuTrbFquQk4oHOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDMxOWI0M2MtYjhkZi0z
YTcxLWE2ZjctODhhOGRmNGI0ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQC7EQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEjYP27ZcFkVbrOskXhEPGhf3ODOa085VpCMCVv4oUGPA78Rsma6
i8IfUKLFMSTaL7I6rU10pS2siFTwz+KxPfy19gLOoFyQvigWAu5aR9wD4wc091th
XEuVtamSJhZt5WBAiU6j+8tFah3HD0gS2FW1qZQ3TXACtmrJXu6vYUh3nY34zhhS
T6vODmg1HaQYf6MLg2Eqe/aIamvFDyafa3paA2j37dMNRVNSDWhKDjlm8qvgH6NK
Y56uTL17neczV3eRFo5FwnSNSW9lDLVM7Xn21jb/7Vli1F+0OnhRjt4FI4flRp0C
SZMpd0+lSC1CtcfZede7Uh34/A+zsjvaRX4=
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:18:44 2026 by rpki-client