Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa
File:                     86e71912-fe62-3d1f-8426-62001a9a1fa3.roa (raw, json)
Hash identifier:          elcidTDod3myFvML71xa0O70wBqUwg/hPwjOv0KnB1Q=
Subject key identifier:   7E:ED:9B:74:E4:07:91:DC:64:47:4E:65:FE:84:FD:83:60:5C:2B:A5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F0672689FE5308E2FA42C1140
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        2001:4888:8067::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:68:9f:e5:30:8e:2f:a4:2c:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=701a1145-7250-4701-89f8-f8dd2d138f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:28:41:17:f2:e4:a0:86:ce:79:9b:90:6a:92:
                    ae:ac:a1:93:77:9f:c4:5f:40:15:6f:df:ab:8b:78:
                    f1:62:f1:57:f0:48:0f:0a:a1:22:ce:5e:16:52:40:
                    00:30:3e:b9:0b:81:fd:91:7c:12:31:8d:fe:dc:11:
                    9d:85:70:80:e3:39:48:41:0d:5c:3a:67:af:ea:6f:
                    60:0a:42:93:50:a2:39:76:b2:5f:a2:7e:5d:e7:4d:
                    a9:44:73:da:93:fb:0a:33:c8:ea:87:d0:73:20:5b:
                    fe:97:45:8a:45:ee:74:c2:95:14:57:8e:4f:12:7e:
                    ac:ee:16:ae:17:2b:4c:fe:a3:7a:af:80:00:7e:46:
                    e3:cf:f0:23:4e:b8:1c:81:23:b8:93:c6:e3:10:3b:
                    6c:06:93:66:14:d5:40:17:25:fd:17:c7:0f:9f:d4:
                    72:be:e3:44:8b:9c:33:16:3b:9b:fa:9a:cf:4e:d2:
                    58:4b:71:35:ac:6c:4a:c0:a4:8c:b2:40:b2:16:00:
                    ee:f0:2f:9f:dd:37:8f:70:da:5d:12:ad:6c:dd:8a:
                    9e:25:9f:77:78:ae:3f:c9:2e:61:2f:da:48:66:84:
                    d2:11:7f:1d:f2:ee:73:ab:0e:f8:6a:3e:fc:98:a5:
                    16:92:8f:e4:86:61:1e:af:1a:0b:2b:d4:5e:0e:d7:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:ED:9B:74:E4:07:91:DC:64:47:4E:65:FE:84:FD:83:60:5C:2B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86e71912-fe62-3d1f-8426-62001a9a1fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8067::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:45:60:35:6f:9a:b9:f2:06:60:dc:dc:06:a9:de:cf:3a:c3:
         1c:b1:53:a8:e0:36:f0:03:c5:85:a6:b7:56:cf:2f:39:90:6e:
         da:c0:b1:8e:78:f1:2d:23:ac:ba:8c:c8:12:1d:b5:3a:68:6f:
         8b:df:fc:d0:50:50:8f:8b:6c:64:60:f3:f8:99:d9:a4:ea:ba:
         a0:fe:94:4d:6f:44:3e:b0:e5:eb:d5:3c:0b:03:08:0a:ed:95:
         0c:83:d0:63:46:ec:ee:10:26:8b:1d:1e:4d:df:b5:b2:c5:33:
         9e:62:76:76:8d:5b:4b:04:f2:0a:62:a7:99:bf:23:7f:c5:63:
         2d:37:a3:bb:69:0d:2d:33:27:4d:17:6d:1b:09:e7:ea:80:16:
         b0:9a:3d:27:3b:86:5d:4d:6a:bf:44:a6:1e:51:6a:b6:41:95:
         64:52:48:b7:61:63:c2:f9:ae:0b:27:c6:c4:b4:e6:84:b7:ce:
         6b:e4:34:4a:7e:a7:40:9c:c2:53:73:e8:3c:20:7a:93:44:8a:
         03:5c:51:ec:74:9c:41:af:9f:a4:df:f2:76:c2:64:e5:f9:ee:
         71:0c:80:b3:8e:c7:e3:5e:b0:af:6f:84:f3:50:ae:1c:31:a4:
         91:64:c2:bd:71:32:31:57:d9:1a:f4:92:3e:6a:68:fa:06:f2:
         06:d3:6c:ba
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Gcmif5TCOL6QsEUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
NzAxYTExNDUtNzI1MC00NzAxLTg5ZjgtZjhkZDJkMTM4ZjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgShBF/LkoIbOeZuQapKurKGTd5/EX0AVb9+r
i3jxYvFX8EgPCqEizl4WUkAAMD65C4H9kXwSMY3+3BGdhXCA4zlIQQ1cOmev6m9g
CkKTUKI5drJfon5d502pRHPak/sKM8jqh9BzIFv+l0WKRe50wpUUV45PEn6s7hau
FytM/qN6r4AAfkbjz/AjTrgcgSO4k8bjEDtsBpNmFNVAFyX9F8cPn9RyvuNEi5wz
Fjub+prPTtJYS3E1rGxKwKSMskCyFgDu8C+f3TePcNpdEq1s3YqeJZ93eK4/yS5h
L9pIZoTSEX8d8u5zqw74aj78mKUWko/khmEerxoLK9ReDteOrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH7tm3TkB5HcZEdOZf6E/YNgXCulMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODZlNzE5MTItZmU2Mi0z
ZDFmLTg0MjYtNjIwMDFhOWExZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC1FYDVvmrnyBmDc3Aap3s86wxyxU6jgNvADxYWmt1bPLzmQbtrA
sY548S0jrLqMyBIdtTpob4vf/NBQUI+LbGRg8/iZ2aTquqD+lE1vRD6w5evVPAsD
CArtlQyD0GNG7O4QJosdHk3ftbLFM55idnaNW0sE8gpip5m/I3/FYy03o7tpDS0z
J00XbRsJ5+qAFrCaPSc7hl1Nar9Eph5RarZBlWRSSLdhY8L5rgsnxsS05oS3zmvk
NEp+p0CcwlNz6DwgepNEigNcUex0nEGvn6Tf8nbCZOX57nEMgLOOx+NesK9vhPNQ
rhwxpJFkwr1xMjFX2Rr0kj5qaPoG8gbTbLo=
-----END CERTIFICATE-----
Generated at Wed Sep 30 04:37:35 2026 by rpki-client