Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8150ee66-df69-399b-a642-674806c2f6f6.roa
File:                     8150ee66-df69-399b-a642-674806c2f6f6.roa (raw, json)
Hash identifier:          /SDuLU0sAi0VFtDXMb9dHTVj+0Q06v2nK7TXCdEeJbE=
Subject key identifier:   C5:AB:D7:0A:9F:74:5E:F6:73:3C:AE:9E:66:A5:75:12:FF:74:0B:4B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E82925C3FE7492DE1CECA0800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8150ee66-df69-399b-a642-674806c2f6f6.roa
Signing time:             Wed 15 Jul 2026 19:18:30 +0000
ROA not before:           Wed 15 Jul 2026 19:18:30 +0000
ROA not after:            Tue 13 Oct 2026 19:18:30 +0000
asID:                     6167
IP address blocks:        2600:1003:b420::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:92:5c:3f:e7:49:2d:e1:ce:ca:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 15 19:18:30 2026 GMT
            Not After : Oct 13 19:18:30 2026 GMT
        Subject: CN=06721ce3-3975-43c0-9de4-b09a4211cd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:96:9e:f2:ee:fd:73:6a:3e:50:57:ee:fd:
                    cb:b7:29:33:d0:59:e0:1f:d8:53:d5:21:da:24:bb:
                    b2:a7:12:a5:97:9c:97:07:8e:16:68:90:13:bd:a8:
                    fc:5b:ef:0c:05:66:1f:c0:c7:78:6c:67:2f:be:e4:
                    30:fd:38:5f:5f:19:4c:84:c8:7c:65:27:e2:39:43:
                    d7:78:5e:db:71:e3:88:7f:8c:f1:3c:2a:22:a2:f1:
                    e7:c9:2d:27:cc:e8:69:68:38:d2:b5:9c:45:48:f8:
                    da:60:8d:46:d9:ce:db:fd:c1:3d:39:38:1d:bf:71:
                    51:d0:fc:35:ca:41:59:e8:b8:a0:74:ee:2f:6b:06:
                    38:7e:00:0c:26:48:fa:2d:59:70:e3:1a:71:c4:64:
                    0c:5d:7e:a0:65:f5:0c:9d:f3:79:9b:41:05:24:dc:
                    10:47:96:1b:1b:d7:7a:03:65:e0:4f:65:0f:c2:f8:
                    73:70:be:bd:76:b9:97:a6:5c:be:23:3b:2c:0a:ab:
                    98:55:cd:c4:f2:90:c9:f9:f3:2e:0e:c4:e4:3b:3c:
                    9f:74:1b:64:64:58:3e:42:dd:f9:dd:4c:17:50:07:
                    92:84:27:20:ca:b4:bd:6c:83:fb:16:1b:0a:a1:50:
                    ea:7b:31:75:2a:c5:32:68:01:3c:d6:08:f4:95:89:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AB:D7:0A:9F:74:5E:F6:73:3C:AE:9E:66:A5:75:12:FF:74:0B:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8150ee66-df69-399b-a642-674806c2f6f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b420::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ce:58:c5:92:18:a2:7f:92:7b:1d:41:a7:13:ca:68:88:27:
         26:99:48:7e:32:f0:bf:81:cc:7e:80:6b:38:62:eb:38:cb:dd:
         28:6f:ad:24:bc:86:21:cd:47:6b:27:ee:da:75:d8:60:92:ff:
         5b:7e:ba:12:ca:53:68:ad:4e:e8:a3:38:62:bf:7f:e8:b6:ce:
         45:d1:3a:33:63:7a:1e:26:65:16:e6:e2:b2:b4:c5:79:26:cf:
         53:d7:88:df:8b:85:de:1d:97:65:18:f1:26:a9:21:1f:17:89:
         47:ce:00:40:38:b4:41:ed:7e:17:fc:79:01:69:44:e1:03:78:
         6d:ec:f6:2a:9d:18:86:f2:b3:ef:af:f9:97:6e:48:0a:5b:ef:
         49:6f:78:b9:d6:41:35:69:bf:52:31:2e:5f:db:8f:79:c2:e2:
         91:fb:5e:e2:0c:6b:b9:40:32:32:3c:b1:0a:45:42:45:39:2e:
         17:ac:df:21:0c:7c:28:30:9b:5b:58:8a:5e:72:ec:e0:41:62:
         92:b8:28:3a:fd:c3:f4:d0:b5:65:9b:1a:8f:23:b1:91:86:a2:
         da:8d:1b:e0:75:36:28:f6:10:6a:56:c3:1d:c4:27:30:80:7d:
         46:a3:15:a3:fd:f9:30:8f:3d:62:cf:3c:6a:1a:bd:e0:96:e8:
         eb:1f:e9:0b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6Cklw/50kt4c7KCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcxNTE5MTgzMFoXDTI2MTAxMzE5MTgzMFowLzEtMCsGA1UEAxMk
MDY3MjFjZTMtMzk3NS00M2MwLTlkZTQtYjA5YTQyMTFjZDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz2WnvLu/XNqPlBX7v3Ltykz0FngH9hT1SHa
JLuypxKll5yXB44WaJATvaj8W+8MBWYfwMd4bGcvvuQw/ThfXxlMhMh8ZSfiOUPX
eF7bceOIf4zxPCoiovHnyS0nzOhpaDjStZxFSPjaYI1G2c7b/cE9OTgdv3FR0Pw1
ykFZ6LigdO4vawY4fgAMJkj6LVlw4xpxxGQMXX6gZfUMnfN5m0EFJNwQR5YbG9d6
A2XgT2UPwvhzcL69drmXply+IzssCquYVc3E8pDJ+fMuDsTkOzyfdBtkZFg+Qt35
3UwXUAeShCcgyrS9bIP7FhsKoVDqezF1KsUyaAE81gj0lYmbKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMWr1wqfdF72czyunmaldRL/dAtLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODE1MGVlNjYtZGY2OS0z
OTliLWE2NDItNjc0ODA2YzJmNmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQA7Qg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKfOWMWSGKJ/knsdQacTymiIJyaZSH4y8L+BzH6Aazhi6zjL3Shv
rSS8hiHNR2sn7tp12GCS/1t+uhLKU2itTuijOGK/f+i2zkXROjNjeh4mZRbm4rK0
xXkmz1PXiN+Lhd4dl2UY8SapIR8XiUfOAEA4tEHtfhf8eQFpROEDeG3s9iqdGIby
s++v+ZduSApb70lveLnWQTVpv1IxLl/bj3nC4pH7XuIMa7lAMjI8sQpFQkU5Lhes
3yEMfCgwm1tYil5y7OBBYpK4KDr9w/TQtWWbGo8jsZGGotqNG+B1Nij2EGpWwx3E
JzCAfUajFaP9+TCPPWLPPGoaveCW6Osf6Qs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:29 2026 by rpki-client