Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7df4eb86-eea1-30b6-ae33-a34947350c42.roa
File:                     7df4eb86-eea1-30b6-ae33-a34947350c42.roa (raw, json)
Hash identifier:          zGsJoRaNWERIFQU2+CEVSvV11RmYw8M5A27LvAxEJ5Q=
Subject key identifier:   B3:40:7C:FE:BD:A0:DC:2B:F7:31:08:E9:98:8E:F0:5F:7F:58:6E:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E8B2502F1108EC1718B9BC520
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7df4eb86-eea1-30b6-ae33-a34947350c42.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        2600:1011:b1d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:02:f1:10:8e:c1:71:8b:9b:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=c1b0b8c5-31f6-446c-b363-6c187cc55d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:81:34:a0:31:48:3e:68:a6:c0:c8:2f:42:38:
                    2d:ae:ee:b9:ee:27:39:c8:d6:6f:56:65:8c:b8:9a:
                    31:dd:af:2d:ff:f6:b8:65:5e:2a:87:14:70:1c:d7:
                    b7:53:c5:2c:a4:07:a7:fd:51:72:c4:aa:cf:31:d0:
                    36:c6:43:03:6b:a1:63:4c:9c:84:03:26:4c:46:6c:
                    e2:c8:ad:8e:ac:90:b2:5d:15:6f:c9:9e:da:2c:b6:
                    26:b5:ba:a5:29:09:58:88:be:1f:0e:74:84:2b:35:
                    50:05:86:60:7c:bf:31:7d:30:6d:b1:47:e6:b5:bb:
                    42:f5:04:c2:80:98:0b:a0:66:c8:4c:bd:f9:77:b7:
                    52:4e:61:83:fd:c8:c0:dd:25:bb:c0:34:4c:6b:04:
                    a8:ae:89:03:6b:e9:ba:78:92:93:32:77:19:e6:75:
                    34:36:be:59:10:f1:e5:d9:74:62:e4:5b:78:1e:23:
                    3a:2c:86:a4:47:b3:29:85:4d:9f:fc:61:68:e4:a3:
                    fb:9a:d3:c6:64:05:ce:bb:a0:44:44:64:f9:82:ec:
                    da:e6:91:1d:00:6f:b0:99:79:1d:a5:27:bc:85:30:
                    0a:71:e9:16:88:ed:ae:01:5a:e4:ce:16:7a:c2:39:
                    df:1a:0a:1b:ca:42:c9:0e:0e:d5:27:06:ca:b5:c4:
                    73:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:40:7C:FE:BD:A0:DC:2B:F7:31:08:E9:98:8E:F0:5F:7F:58:6E:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7df4eb86-eea1-30b6-ae33-a34947350c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:28:29:27:82:d1:88:6a:49:86:b9:b5:d7:76:cf:49:e0:8a:
         a6:bf:3e:63:30:e8:21:a9:16:a6:c6:d4:02:a3:e4:06:76:b8:
         5e:ad:e6:3a:ba:6f:2e:83:04:17:0a:3a:cf:60:e4:eb:31:5c:
         b5:9a:9a:55:b1:a8:10:e4:b3:39:92:e5:3b:5d:49:eb:70:3a:
         97:7b:7c:48:63:b5:0e:eb:f4:64:d0:8e:99:02:de:17:dc:7e:
         c9:b1:e6:22:3e:2e:f6:79:b0:40:70:e5:b9:7d:9f:82:4e:28:
         05:75:d9:f3:72:20:73:cc:b9:a9:ad:54:45:15:96:4c:ef:12:
         84:97:ab:77:7c:12:09:ef:7f:23:8f:90:92:2b:46:4d:c8:df:
         36:d6:03:ae:21:ce:dd:ef:f9:42:60:42:74:fa:25:83:9c:00:
         54:00:c1:6a:c5:4c:cd:96:b0:14:de:84:23:12:81:9f:e4:34:
         67:ad:7d:d9:25:20:a5:cf:49:3d:08:93:95:bd:e4:35:69:e9:
         ee:4c:ff:58:5c:f4:c2:f7:9e:3e:33:05:8e:fc:a4:76:da:1a:
         57:04:7f:6e:be:8e:3b:b2:64:7f:98:c1:10:b0:fd:ff:2f:d1:
         2c:84:37:c7:0b:72:79:ea:bf:7b:f1:76:02:df:42:fa:49:78:
         e0:cc:4c:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6LJQLxEI7BcYubxSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
YzFiMGI4YzUtMzFmNi00NDZjLWIzNjMtNmMxODdjYzU1ZDI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYE0oDFIPmimwMgvQjgtru657ic5yNZvVmWM
uJox3a8t//a4ZV4qhxRwHNe3U8UspAen/VFyxKrPMdA2xkMDa6FjTJyEAyZMRmzi
yK2OrJCyXRVvyZ7aLLYmtbqlKQlYiL4fDnSEKzVQBYZgfL8xfTBtsUfmtbtC9QTC
gJgLoGbITL35d7dSTmGD/cjA3SW7wDRMawSorokDa+m6eJKTMncZ5nU0Nr5ZEPHl
2XRi5Ft4HiM6LIakR7MphU2f/GFo5KP7mtPGZAXOu6BERGT5guza5pEdAG+wmXkd
pSe8hTAKcekWiO2uAVrkzhZ6wjnfGgobykLJDg7VJwbKtcRzoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLNAfP69oNwr9zEI6ZiO8F9/WG5SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2RmNGViODYtZWVhMS0z
MGI2LWFlMzMtYTM0OTQ3MzUwYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQEbHQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGwoKSeC0YhqSYa5tdd2z0ngiqa/PmMw6CGpFqbG1AKj5AZ2uF6t
5jq6by6DBBcKOs9g5OsxXLWamlWxqBDkszmS5TtdSetwOpd7fEhjtQ7r9GTQjpkC
3hfcfsmx5iI+LvZ5sEBw5bl9n4JOKAV12fNyIHPMuamtVEUVlkzvEoSXq3d8Egnv
fyOPkJIrRk3I3zbWA64hzt3v+UJgQnT6JYOcAFQAwWrFTM2WsBTehCMSgZ/kNGet
fdklIKXPST0Ik5W95DVp6e5M/1hc9ML3nj4zBY78pHbaGlcEf26+jjuyZH+YwRCw
/f8v0SyEN8cLcnnqv3vxdgLfQvpJeODMTFY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:06 2026 by rpki-client