Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96fc56d8-316e-38df-a2e9-b5f9311aa72e.roa
File:                     96fc56d8-316e-38df-a2e9-b5f9311aa72e.roa (raw, json)
Hash identifier:          iqD3MjkgqChJxCsbli0MfJAiEWW+5nD4D4wYpMQFOog=
Subject key identifier:   1E:F6:47:0A:8A:9E:38:CC:92:41:61:D3:B7:68:80:38:BB:00:BB:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4986EF2D556233647B1DB680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96fc56d8-316e-38df-a2e9-b5f9311aa72e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100e:a030::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:ef:2d:55:62:33:64:7b:1d:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f6326ced-407b-4752-b17e-fdbfcd72fb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:0b:5d:be:e8:5d:4f:b7:c9:51:44:1d:42:
                    a5:1f:13:8f:b4:8f:2a:39:a7:1d:44:9f:e5:6d:3e:
                    c0:8c:e4:be:f3:ad:0b:ef:d7:b1:b2:4a:3f:88:56:
                    12:41:fa:2f:f1:ff:22:e4:03:ee:6a:ea:67:e5:a3:
                    1f:fd:93:bf:8a:f3:60:78:fe:e4:b6:14:52:4d:82:
                    e2:30:3d:a9:b2:94:e0:b1:77:53:59:a2:04:05:c2:
                    bb:88:bf:78:a2:8d:3d:82:4e:2b:84:c4:d1:25:9d:
                    3c:38:60:70:c5:aa:da:3b:0e:d6:f4:ca:0e:4e:39:
                    68:1d:5f:dd:a0:2d:2e:d9:0c:0e:3a:f2:cd:91:1a:
                    c2:6d:a9:aa:f5:a6:cb:b2:e9:0e:cf:77:1d:54:a0:
                    9a:71:a9:d8:a6:fc:d1:95:96:76:86:a3:d3:f8:b3:
                    0e:6f:81:de:a3:d1:11:fa:ff:82:69:f1:b2:08:16:
                    16:c1:ad:52:d4:3e:0b:79:ae:6b:5b:e0:c8:aa:68:
                    2d:26:2a:4f:7e:26:be:d5:77:63:c4:81:25:d0:f8:
                    9d:d7:7d:46:e0:f0:73:f1:6f:66:cf:ff:5a:83:8a:
                    dc:a4:fc:05:39:26:ef:fa:13:7e:f0:1d:8b:05:0a:
                    25:bc:00:d5:e4:da:26:e3:b4:ff:2c:a7:3f:56:1e:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F6:47:0A:8A:9E:38:CC:92:41:61:D3:B7:68:80:38:BB:00:BB:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96fc56d8-316e-38df-a2e9-b5f9311aa72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a030::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:2e:23:b1:75:73:72:ee:8f:44:24:f7:88:20:b5:80:52:
         a6:8a:67:c0:e4:d3:cb:d2:ba:59:32:cd:3d:e6:86:e0:6c:eb:
         1d:de:e3:53:15:fe:fe:f8:66:2d:ea:57:4f:67:40:0e:08:97:
         ed:19:29:30:79:40:f0:16:b6:5e:9e:2f:ea:c9:bc:4a:c2:bd:
         d9:c1:b2:ce:5e:b9:a2:ec:fb:ec:33:80:05:f5:61:af:28:d2:
         39:69:45:29:16:28:39:65:60:ec:7b:fa:10:70:58:c9:40:ad:
         70:2f:53:95:41:a2:53:43:f2:79:88:ca:4f:66:b3:91:ca:2f:
         79:80:d9:00:6e:63:a7:27:5f:de:7b:2f:ab:95:36:03:b9:b8:
         80:1e:70:a7:75:54:04:4f:b5:16:68:30:ca:ff:03:3e:71:7d:
         d2:c5:b4:14:7d:70:19:be:f2:f1:94:1f:f2:2e:8a:de:10:dd:
         c1:06:6a:7e:c7:32:d4:35:b6:78:ef:0d:dc:bd:e0:ba:f7:b3:
         8a:a3:3d:97:a5:41:ad:a8:5a:da:51:cd:15:3d:a4:39:99:5c:
         3d:0b:62:24:fc:c3:8a:33:29:e1:97:66:a8:ee:ff:00:e8:15:
         0c:f8:35:03:34:08:96:22:3c:ce:4d:77:4d:b5:af:6c:14:81:
         21:d9:29:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jhu8tVWIzZHsdtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjYzMjZjZWQtNDA3Yi00NzUyLWIxN2UtZmRiZmNkNzJmYjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt8LXb7oXU+3yVFEHUKlHxOPtI8qOacdRJ/l
bT7AjOS+860L79exsko/iFYSQfov8f8i5APuaupn5aMf/ZO/ivNgeP7kthRSTYLi
MD2pspTgsXdTWaIEBcK7iL94oo09gk4rhMTRJZ08OGBwxaraOw7W9MoOTjloHV/d
oC0u2QwOOvLNkRrCbamq9abLsukOz3cdVKCacanYpvzRlZZ2hqPT+LMOb4Heo9ER
+v+CafGyCBYWwa1S1D4Lea5rW+DIqmgtJipPfia+1XdjxIEl0Pid131G4PBz8W9m
z/9ag4rcpPwFOSbv+hN+8B2LBQolvADV5Nom47T/LKc/Vh6yIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB72RwqKnjjMkkFh07dogDi7ALsZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTZmYzU2ZDgtMzE2ZS0z
OGRmLWEyZTktYjVmOTMxMWFhNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQDqAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHHMLiOxdXNy7o9EJPeIILWAUqaKZ8Dk08vSulkyzT3mhuBs6x3e
41MV/v74Zi3qV09nQA4Il+0ZKTB5QPAWtl6eL+rJvErCvdnBss5euaLs++wzgAX1
Ya8o0jlpRSkWKDllYOx7+hBwWMlArXAvU5VBolND8nmIyk9ms5HKL3mA2QBuY6cn
X957L6uVNgO5uIAecKd1VARPtRZoMMr/Az5xfdLFtBR9cBm+8vGUH/Iuit4Q3cEG
an7HMtQ1tnjvDdy94Lr3s4qjPZelQa2oWtpRzRU9pDmZXD0LYiT8w4ozKeGXZqju
/wDoFQz4NQM0CJYiPM5Nd021r2wUgSHZKcM=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:57:33 2026 by rpki-client