Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95c6c2ec-2acf-33c3-b9b1-92d0e92d56c8.roa
File:                     95c6c2ec-2acf-33c3-b9b1-92d0e92d56c8.roa (raw, json)
Hash identifier:          hyiLtyuiguKZxOIRUolmqq4OHWMWPN5je88PIGfKr7Q=
Subject key identifier:   24:79:DD:A3:E7:9E:02:6A:38:F7:1E:8C:A0:0E:02:69:95:2E:01:DF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A34DEB75F6C839D55F5C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95c6c2ec-2acf-33c3-b9b1-92d0e92d56c8.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:100c:a228::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:34:de:b7:5f:6c:83:9d:55:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=9a74afc1-1917-489c-997e-a8c719e441d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c3:25:ac:14:eb:10:bb:e9:e8:5c:ac:e2:d8:
                    6f:f8:08:dd:c5:80:42:9b:f6:a4:52:61:9b:4c:de:
                    74:f6:de:fb:0b:d1:5b:a1:5a:8b:51:cd:d7:53:43:
                    da:21:89:f8:75:09:11:f3:c2:69:cb:e2:e9:0a:ed:
                    c5:b9:2d:9c:cf:e2:ec:7d:1e:19:10:35:ba:f6:af:
                    0c:3d:ac:f1:84:e1:85:22:59:b5:51:e9:7a:89:3e:
                    d5:3d:58:31:5c:08:51:71:fe:66:76:df:24:8b:2f:
                    78:bd:0f:b7:87:bb:aa:b1:d8:20:a5:c9:a8:bc:3a:
                    3f:d1:4d:f9:05:0d:a1:4a:e4:c8:10:e3:74:a0:ac:
                    75:6f:aa:27:88:af:2b:9b:b3:8b:87:87:58:e0:3e:
                    7b:31:67:11:98:b1:47:db:63:8c:7c:ee:7c:0a:7f:
                    1e:59:be:23:6d:b9:d8:5e:d2:f9:a7:33:07:fc:dd:
                    98:4d:2e:bc:fb:05:20:76:19:5a:46:07:c9:da:4a:
                    36:6f:e2:a0:ab:f3:b0:4d:3f:4e:ae:95:fd:fa:82:
                    50:e1:b8:8c:b2:19:64:5f:f4:7b:88:a0:22:2d:3f:
                    3c:fc:6a:64:61:e1:bd:23:e0:e9:ef:06:23:fc:60:
                    40:22:f1:b6:66:bf:8e:2d:6a:af:85:14:7b:7e:64:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:DD:A3:E7:9E:02:6A:38:F7:1E:8C:A0:0E:02:69:95:2E:01:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95c6c2ec-2acf-33c3-b9b1-92d0e92d56c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a228::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:19:84:a6:b5:d3:1a:ae:fe:5f:d8:d5:a4:89:28:2c:0e:32:
         47:ad:48:4b:3b:81:c5:3f:02:e7:c6:f4:2e:28:61:b4:fe:ab:
         86:89:23:88:cb:2c:17:1f:72:66:29:89:e2:ff:51:fa:e5:d4:
         ad:80:ba:f0:c6:a6:91:d5:d6:9c:f4:f8:d9:a6:90:5c:11:ff:
         7a:22:dd:91:fb:3b:70:d6:e6:bd:c6:a5:a2:90:1d:f7:a3:5e:
         67:40:27:4d:96:c7:bb:85:7c:c0:78:0b:57:9a:15:1d:1d:2e:
         ce:d7:fe:2d:cd:b1:70:3e:ea:60:fb:10:55:d2:07:27:9d:f1:
         aa:0d:31:80:d5:a5:c2:88:b7:b2:bf:ed:b0:4e:0e:19:9a:1e:
         09:b3:2c:8a:7a:62:00:76:a1:1c:aa:ff:71:93:68:7a:43:e0:
         6e:d8:0f:d6:7c:78:06:8c:ff:1c:1d:5f:ea:fd:b0:b0:b5:6e:
         b0:d1:44:04:05:17:d3:c4:ea:ab:40:9b:f2:42:c2:53:0f:ae:
         64:ca:78:fa:a7:db:e2:aa:c2:24:25:54:e9:76:c2:ed:8a:09:
         5d:ef:17:b8:93:48:1e:36:7a:86:5a:5a:0b:fe:21:c8:a1:ec:
         fa:1a:52:5b:31:a2:cd:3d:0c:eb:19:d1:75:4e:96:11:63:25:
         5a:89:5b:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fSjTet19sg51V9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
OWE3NGFmYzEtMTkxNy00ODljLTk5N2UtYThjNzE5ZTQ0MWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsMlrBTrELvp6Fys4thv+AjdxYBCm/akUmGb
TN509t77C9FboVqLUc3XU0PaIYn4dQkR88Jpy+LpCu3FuS2cz+LsfR4ZEDW69q8M
PazxhOGFIlm1Uel6iT7VPVgxXAhRcf5mdt8kiy94vQ+3h7uqsdggpcmovDo/0U35
BQ2hSuTIEON0oKx1b6oniK8rm7OLh4dY4D57MWcRmLFH22OMfO58Cn8eWb4jbbnY
XtL5pzMH/N2YTS68+wUgdhlaRgfJ2ko2b+Kgq/OwTT9OrpX9+oJQ4biMshlkX/R7
iKAiLT88/GpkYeG9I+Dp7wYj/GBAIvG2Zr+OLWqvhRR7fmQ2sQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCR53aPnngJqOPcejKAOAmmVLgHfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTVjNmMyZWMtMmFjZi0z
M2MzLWI5YjEtOTJkMGU5MmQ1NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDKIo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFsZhKa10xqu/l/Y1aSJKCwOMketSEs7gcU/AufG9C4oYbT+q4aJ
I4jLLBcfcmYpieL/Ufrl1K2AuvDGppHV1pz0+NmmkFwR/3oi3ZH7O3DW5r3GpaKQ
HfejXmdAJ02Wx7uFfMB4C1eaFR0dLs7X/i3NsXA+6mD7EFXSByed8aoNMYDVpcKI
t7K/7bBODhmaHgmzLIp6YgB2oRyq/3GTaHpD4G7YD9Z8eAaM/xwdX+r9sLC1brDR
RAQFF9PE6qtAm/JCwlMPrmTKePqn2+KqwiQlVOl2wu2KCV3vF7iTSB42eoZaWgv+
Icih7PoaUlsxos09DOsZ0XVOlhFjJVqJW+I=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:44:16 2026 by rpki-client