Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac0cbf8c-daf1-348a-8cc8-a1390f7d5275.roa
File:                     ac0cbf8c-daf1-348a-8cc8-a1390f7d5275.roa (raw, json)
Hash identifier:          MPZGykRwrXDK4OgJFL66vlJj3oSoAhzqCvwBGojHheg=
Subject key identifier:   F0:17:F6:CB:56:6D:B0:26:06:51:31:08:54:84:C2:6A:B2:DC:69:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F498656FD0829F7CCFAF7C240
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac0cbf8c-daf1-348a-8cc8-a1390f7d5275.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100a:b120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:56:fd:08:29:f7:cc:fa:f7:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aa81e683-dd55-41de-a843-3276d96faba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:27:20:b5:e0:5b:5c:c9:2c:c1:6e:0e:38:
                    c8:0f:c2:54:a3:3a:4d:ad:d0:52:01:d1:4f:fc:3b:
                    fc:9c:eb:04:84:ff:fb:0c:77:8a:79:58:45:a7:7f:
                    75:76:e4:08:ee:90:61:9d:c5:42:d1:b4:ea:a0:ab:
                    f3:84:0f:7a:25:f0:bb:f3:ed:5e:11:42:db:3d:11:
                    70:a6:fe:37:42:dc:da:18:86:74:a8:84:c1:46:52:
                    e6:b8:bd:95:9a:29:26:bd:59:5c:da:62:e1:3c:ee:
                    3e:30:bc:a3:0a:a1:58:4c:e5:21:b2:6f:58:0c:76:
                    8a:11:0d:2b:ac:86:bb:38:2d:46:e2:4d:3d:89:5e:
                    88:95:30:de:24:fb:01:05:7d:4a:5c:67:36:85:9c:
                    f6:ba:7a:b4:c0:44:7a:50:f3:8a:52:e2:46:28:06:
                    e5:ee:93:ab:e3:40:6a:b5:af:f7:5f:ed:82:75:46:
                    dc:cc:b8:d8:bf:c8:03:c9:68:34:1e:81:03:d9:d8:
                    7d:ec:63:5a:1b:6b:7b:c2:97:fc:c9:ca:79:50:f5:
                    61:ef:2a:d8:88:1e:b8:3d:71:fa:b7:d0:9d:c4:a8:
                    52:41:55:3f:63:da:3f:22:a1:44:e6:3a:47:9c:72:
                    5d:f2:7a:e9:44:f0:cf:0c:17:38:8d:ed:ef:11:39:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:17:F6:CB:56:6D:B0:26:06:51:31:08:54:84:C2:6A:B2:DC:69:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac0cbf8c-daf1-348a-8cc8-a1390f7d5275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:df:5e:25:a1:99:42:cf:9e:2b:42:ba:b4:f4:68:5d:ef:50:
         ff:cd:40:3d:a3:bb:2f:96:d6:2a:28:b7:03:76:8b:7e:86:d3:
         ad:61:c1:70:cb:0e:9d:3b:51:b1:46:2b:d6:c9:3a:48:9b:eb:
         8e:a9:9e:50:a4:ff:81:2d:b8:f6:db:87:82:29:7b:81:cb:c2:
         6d:23:c9:d3:5a:a4:94:c1:40:c5:39:43:b5:f1:b4:c7:1d:22:
         fa:50:2e:84:24:5d:4d:22:b2:de:b9:24:eb:e6:5e:4b:a4:b4:
         c2:62:57:3e:cb:fc:63:2f:e5:e8:0b:29:a7:f7:cb:59:59:3d:
         da:6c:47:34:7c:9f:31:d1:8e:8d:24:0f:93:d5:65:d4:18:1e:
         6c:cd:07:51:0b:f7:53:35:e0:63:40:b8:34:0f:43:24:a3:65:
         3e:7c:73:80:e1:78:28:94:34:73:5a:b3:71:91:be:ff:aa:62:
         23:86:71:32:96:20:af:9e:97:77:b4:8c:86:84:17:a5:29:3f:
         91:99:51:01:be:d3:8b:fb:e3:d6:11:3c:9e:0c:ac:c7:41:c8:
         6d:70:c4:79:75:a3:de:73:c2:8c:95:7a:6c:3a:af:e4:92:99:
         94:aa:dc:8b:86:4a:f7:16:2e:f0:fc:f5:57:31:70:30:e2:68:
         df:09:53:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jhlb9CCn3zPr3wkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWE4MWU2ODMtZGQ1NS00MWRlLWE4NDMtMzI3NmQ5NmZhYmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe4nILXgW1zJLMFuDjjID8JUozpNrdBSAdFP
/Dv8nOsEhP/7DHeKeVhFp391duQI7pBhncVC0bTqoKvzhA96JfC78+1eEULbPRFw
pv43QtzaGIZ0qITBRlLmuL2VmikmvVlc2mLhPO4+MLyjCqFYTOUhsm9YDHaKEQ0r
rIa7OC1G4k09iV6IlTDeJPsBBX1KXGc2hZz2unq0wER6UPOKUuJGKAbl7pOr40Bq
ta/3X+2CdUbczLjYv8gDyWg0HoED2dh97GNaG2t7wpf8ycp5UPVh7yrYiB64PXH6
t9CdxKhSQVU/Y9o/IqFE5jpHnHJd8nrpRPDPDBc4je3vETlUSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPAX9stWbbAmBlExCFSEwmqy3GnuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWMwY2JmOGMtZGFmMS0z
NDhhLThjYzgtYTEzOTBmN2Q1Mjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCrEg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEbfXiWhmULPnitCurT0aF3vUP/NQD2juy+W1iootwN2i36G061h
wXDLDp07UbFGK9bJOkib646pnlCk/4EtuPbbh4Ipe4HLwm0jydNapJTBQMU5Q7Xx
tMcdIvpQLoQkXU0ist65JOvmXkuktMJiVz7L/GMv5egLKaf3y1lZPdpsRzR8nzHR
jo0kD5PVZdQYHmzNB1EL91M14GNAuDQPQySjZT58c4DheCiUNHNas3GRvv+qYiOG
cTKWIK+el3e0jIaEF6UpP5GZUQG+04v749YRPJ4MrMdByG1wxHl1o95zwoyVemw6
r+SSmZSq3IuGSvcWLvD89VcxcDDiaN8JU1Y=
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:44:18 2026 by rpki-client