Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b147d2cf-f6f7-3111-a969-219bd3193382.roa
File:                     b147d2cf-f6f7-3111-a969-219bd3193382.roa (raw, json)
Hash identifier:          J/G9w8vZ+TbSQME6G4Bdz6Pv/zD9i8FOQ8JfuznrJJc=
Subject key identifier:   C3:71:D5:B8:48:82:10:C1:A5:DB:16:0B:5A:B3:31:1D:22:23:32:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD5393C566487D23367ED0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b147d2cf-f6f7-3111-a969-219bd3193382.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1006:9140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:53:93:c5:66:48:7d:23:36:7e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=d2fac821-e13c-49fd-aa99-86493c5ff4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bd:f4:45:95:91:d2:c8:8d:f1:f2:44:0f:37:
                    13:2e:ea:04:a7:bc:dc:d1:97:09:08:9d:2c:ea:45:
                    9f:14:d8:59:5d:cf:2d:42:78:88:72:80:aa:28:8a:
                    00:59:0f:eb:04:a3:09:43:7e:83:2e:37:f5:ed:99:
                    2a:ab:f7:bd:7c:d9:99:ab:63:2f:41:79:03:03:00:
                    0e:0c:c5:b3:72:0e:4a:58:02:0e:b3:2c:60:05:74:
                    83:a1:ba:01:d5:83:4c:76:37:c9:be:8e:57:9d:ab:
                    71:92:41:a1:f6:76:4f:e2:fe:5b:ca:b1:70:53:56:
                    e0:97:b7:88:81:e2:ec:8f:91:40:23:27:cd:da:e7:
                    c6:4e:98:46:95:45:8a:98:6f:5d:60:8f:a2:e5:9f:
                    dd:39:af:b7:96:37:a8:69:76:39:93:d7:2f:c3:33:
                    2f:fd:b7:dd:cd:13:e2:3a:37:30:f9:c0:ef:f6:b4:
                    2c:75:31:29:dc:0d:20:8f:62:38:03:3a:7a:ee:48:
                    31:7a:63:7a:d4:63:aa:9f:f7:a2:fc:dd:52:96:ab:
                    e8:f4:60:2c:72:60:15:a5:cc:32:f1:e0:84:ab:18:
                    c6:80:66:18:2e:4b:14:09:75:20:af:8d:06:50:1a:
                    65:1b:e9:d1:bb:02:4b:11:6d:65:fe:ba:bf:7f:be:
                    6b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:D5:B8:48:82:10:C1:A5:DB:16:0B:5A:B3:31:1D:22:23:32:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b147d2cf-f6f7-3111-a969-219bd3193382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:9140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6e:d7:0b:e2:60:c5:2a:92:18:86:60:bf:ca:1a:6c:60:de:
         68:90:5e:d0:85:e7:4a:6f:11:4a:15:2e:e3:c8:3d:0b:06:5a:
         c9:49:6d:a0:20:a5:24:34:7e:71:b5:d8:13:1a:98:3f:69:71:
         fd:cc:82:e6:a0:59:a4:4c:52:ef:3b:7f:98:be:2f:c6:1b:79:
         d3:cd:a5:67:08:b3:83:b6:8a:28:e0:80:3c:a5:d8:a9:2e:dd:
         9d:e7:dc:cb:77:ab:c2:5e:e3:68:b8:33:bc:d5:27:1a:24:2e:
         a7:70:50:73:60:57:fd:f5:fd:16:88:16:f6:a1:d7:16:f9:9a:
         57:4c:b0:16:aa:05:16:12:da:0c:ec:8f:3e:08:ab:61:b4:8e:
         7c:d9:7c:27:dc:16:ba:79:31:08:97:3f:c7:f6:56:0a:5f:76:
         91:68:c8:f0:55:98:44:4e:a5:e5:08:11:65:7b:f7:3a:f2:d1:
         47:4f:6e:ad:e3:f0:41:4e:5b:7b:c6:9b:38:0b:4d:1c:59:44:
         bc:5a:1f:80:72:8e:b0:80:98:06:79:bd:06:66:fa:1a:be:59:
         8e:a3:5a:11:a5:cf:0a:9f:33:ca:73:db:23:a4:f2:14:e4:13:
         81:cd:59:da:53:8a:23:e2:fa:87:f5:34:ef:80:1d:94:c6:4f:
         5d:ba:76:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8/rVOTxWZIfSM2ftAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZDJmYWM4MjEtZTEzYy00OWZkLWFhOTktODY0OTNjNWZmNGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L30RZWR0siN8fJEDzcTLuoEp7zc0ZcJCJ0s
6kWfFNhZXc8tQniIcoCqKIoAWQ/rBKMJQ36DLjf17Zkqq/e9fNmZq2MvQXkDAwAO
DMWzcg5KWAIOsyxgBXSDoboB1YNMdjfJvo5XnatxkkGh9nZP4v5byrFwU1bgl7eI
geLsj5FAIyfN2ufGTphGlUWKmG9dYI+i5Z/dOa+3ljeoaXY5k9cvwzMv/bfdzRPi
Ojcw+cDv9rQsdTEp3A0gj2I4Azp67kgxemN61GOqn/ei/N1Slqvo9GAscmAVpcwy
8eCEqxjGgGYYLksUCXUgr40GUBplG+nRuwJLEW1l/rq/f75r1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMNx1bhIghDBpdsWC1qzMR0iIzIjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjE0N2QyY2YtZjZmNy0z
MTExLWE5NjktMjE5YmQzMTkzMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBpFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADRu1wviYMUqkhiGYL/KGmxg3miQXtCF50pvEUoVLuPIPQsGWslJ
baAgpSQ0fnG12BMamD9pcf3MguagWaRMUu87f5i+L8YbedPNpWcIs4O2iijggDyl
2Kku3Z3n3Mt3q8Je42i4M7zVJxokLqdwUHNgV/31/RaIFvah1xb5mldMsBaqBRYS
2gzsjz4Iq2G0jnzZfCfcFrp5MQiXP8f2VgpfdpFoyPBVmEROpeUIEWV79zry0UdP
bq3j8EFOW3vGmzgLTRxZRLxaH4ByjrCAmAZ5vQZm+hq+WY6jWhGlzwqfM8pz2yOk
8hTkE4HNWdpTiiPi+of1NO+AHZTGT126dtc=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:47:13 2026 by rpki-client