Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a88b746e-2b23-3d4e-a352-98e3df731446.roa
File:                     a88b746e-2b23-3d4e-a352-98e3df731446.roa (raw, json)
Hash identifier:          qlq9uNq8RO/Q+19JGT1kqEUNhQdMZXIcwYW4U+dSd3I=
Subject key identifier:   D1:3A:AF:92:91:E4:84:02:7F:D6:14:E3:97:8E:B5:8D:B9:39:1E:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05B92FE652EAA0D0C3CBC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a88b746e-2b23-3d4e-a352-98e3df731446.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1008:b0e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:b9:2f:e6:52:ea:a0:d0:c3:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=674aa114-f0ce-4e7f-9175-dfe86a09a41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:15:b5:d0:b5:d1:eb:10:73:96:6d:f6:65:
                    8c:a6:f7:07:e5:6e:f7:e1:7a:1e:13:6b:58:ae:c2:
                    27:58:70:e2:b6:44:00:e1:d7:c8:3c:78:e9:d0:74:
                    ca:43:b3:67:f7:5f:fe:63:de:c9:5c:b3:70:49:3d:
                    c4:3b:50:57:be:39:5a:02:3b:c9:5f:3b:1b:4b:64:
                    fb:78:4c:98:4f:9b:c5:a6:d5:b4:0f:d8:30:d2:e6:
                    75:ee:7b:dc:53:4e:84:d8:94:da:91:75:a7:00:6b:
                    b0:a4:96:90:0d:26:26:e7:3c:70:cd:a6:2d:d6:01:
                    39:cb:21:31:1e:09:94:f2:40:63:06:48:2b:aa:3b:
                    5f:49:02:64:cf:cd:5b:a0:81:26:b0:ae:c4:ac:75:
                    39:2a:8a:ae:fe:a4:1a:19:2e:de:62:fb:59:3d:5a:
                    6a:2c:e0:44:1b:0f:cb:a6:09:28:3b:0c:4a:12:f4:
                    82:e0:80:ed:f9:72:cf:81:b4:12:c3:1f:42:34:ca:
                    5c:78:89:f4:cf:e4:3b:73:6a:ac:43:42:24:46:67:
                    0f:ce:0d:69:b3:08:52:24:34:60:4b:53:f0:0e:a9:
                    41:57:9f:07:6c:94:e4:15:73:72:cc:21:ad:59:6d:
                    cb:9c:e4:d9:10:f8:5d:5c:52:8b:0d:d2:f1:d9:15:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3A:AF:92:91:E4:84:02:7F:D6:14:E3:97:8E:B5:8D:B9:39:1E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a88b746e-2b23-3d4e-a352-98e3df731446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e4:59:0a:8c:d3:b8:10:0b:40:62:55:28:e5:71:10:b7:fb:
         59:63:46:81:a8:65:b9:7a:ab:42:18:af:6f:73:04:f7:5d:c3:
         94:d2:5d:66:d2:86:f9:5d:ec:c8:b8:27:e7:43:8d:8b:2e:cb:
         fc:1b:fe:68:6d:e4:4c:da:d5:d3:f3:c3:e5:e7:e8:e9:3c:de:
         16:90:c9:ba:57:ed:17:21:a6:b8:27:80:f4:84:1c:8c:c2:68:
         4c:fc:6d:40:b7:cf:86:33:e5:f6:bf:d7:04:5f:3a:8c:11:68:
         4a:9b:7e:7d:2c:d0:a3:f3:a8:1d:3a:54:8c:9b:7b:a2:c2:11:
         42:36:37:20:70:f6:39:c6:8f:91:c9:50:08:a6:7d:71:c7:a6:
         91:bd:4f:ce:35:e8:c0:7a:1f:fd:fa:8d:e2:da:3d:b5:8a:02:
         cf:a8:ca:3a:eb:c1:4d:bd:cf:e5:cf:4f:2c:ec:ac:5d:c4:03:
         80:0f:5b:61:e0:55:64:99:a6:ea:f3:11:53:46:d3:c4:d2:ee:
         db:dc:58:9b:c8:c0:fa:3a:94:74:04:98:f8:f7:03:eb:d2:e1:
         6b:13:6c:57:21:95:83:9d:ce:36:52:a0:55:b4:06:57:00:78:
         c7:7f:18:c4:fc:65:33:3d:8a:d9:9f:98:e7:38:b0:c9:74:ee:
         d0:91:98:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE29Bbkv5lLqoNDDy8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
Njc0YWExMTQtZjBjZS00ZTdmLTkxNzUtZGZlODZhMDlhNDFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraMVtdC10esQc5Zt9mWMpvcH5W734XoeE2tY
rsInWHDitkQA4dfIPHjp0HTKQ7Nn91/+Y97JXLNwST3EO1BXvjlaAjvJXzsbS2T7
eEyYT5vFptW0D9gw0uZ17nvcU06E2JTakXWnAGuwpJaQDSYm5zxwzaYt1gE5yyEx
HgmU8kBjBkgrqjtfSQJkz81boIEmsK7ErHU5Koqu/qQaGS7eYvtZPVpqLOBEGw/L
pgkoOwxKEvSC4IDt+XLPgbQSwx9CNMpceIn0z+Q7c2qsQ0IkRmcPzg1pswhSJDRg
S1PwDqlBV58HbJTkFXNyzCGtWW3LnOTZEPhdXFKLDdLx2RUgEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNE6r5KR5IQCf9YU45eOtY25OR69MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTg4Yjc0NmUtMmIyMy0z
ZDRlLWEzNTItOThlM2RmNzMxNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCLDg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKfkWQqM07gQC0BiVSjlcRC3+1ljRoGoZbl6q0IYr29zBPddw5TS
XWbShvld7Mi4J+dDjYsuy/wb/mht5Eza1dPzw+Xn6Ok83haQybpX7RchprgngPSE
HIzCaEz8bUC3z4Yz5fa/1wRfOowRaEqbfn0s0KPzqB06VIybe6LCEUI2NyBw9jnG
j5HJUAimfXHHppG9T8416MB6H/36jeLaPbWKAs+oyjrrwU29z+XPTyzsrF3EA4AP
W2HgVWSZpurzEVNG08TS7tvcWJvIwPo6lHQEmPj3A+vS4WsTbFchlYOdzjZSoFW0
BlcAeMd/GMT8ZTM9itmfmOc4sMl07tCRmGE=
-----END CERTIFICATE-----
Generated at Wed May 13 08:22:34 2026 by rpki-client