Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8a718f2-1452-3089-ab9a-b8237b452e4c.roa
File:                     b8a718f2-1452-3089-ab9a-b8237b452e4c.roa (raw, json)
Hash identifier:          sFKg7xiCXohd365/ix6W4eiphCD43KM7dubHvu4PjlY=
Subject key identifier:   E2:41:8E:49:D7:39:40:97:D5:4B:40:E1:48:07:0F:F8:B1:E8:80:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49865FF21C12CF335A14FCE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8a718f2-1452-3089-ab9a-b8237b452e4c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:b2c0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:5f:f2:1c:12:cf:33:5a:14:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5f6a5182-b405-4920-861e-2d03bccc05fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ba:cb:69:2f:60:8a:ff:28:0c:e2:87:70:ca:
                    52:c2:10:f9:26:01:38:d9:11:4f:b4:e5:b5:17:98:
                    09:1d:25:11:e0:e5:55:c7:f5:77:f0:4b:c6:c2:29:
                    1b:96:ef:6b:26:1c:10:ba:3b:cf:ff:ba:b7:15:17:
                    d4:ca:55:b5:a2:c7:33:c9:06:f8:97:d5:71:a0:76:
                    df:aa:e5:7c:45:68:5a:89:21:4b:b9:e6:0d:1d:fa:
                    67:06:55:37:b0:67:db:6d:a0:31:3c:8e:1b:c2:b1:
                    19:1a:8d:82:68:a3:d6:6a:bc:32:1d:19:09:04:77:
                    17:14:f0:e0:b5:88:9e:93:33:72:8f:08:9c:41:29:
                    86:43:c7:78:f5:4d:32:d6:ab:5b:66:89:cb:04:5e:
                    77:a0:cc:e9:d5:98:39:f3:cd:3d:66:8a:a9:e0:3e:
                    d2:ba:f9:a4:d6:75:40:23:3e:6b:b8:a2:ab:aa:3c:
                    23:76:1f:8d:de:6a:d5:74:70:9e:11:d0:40:01:1e:
                    5c:4d:aa:c9:c8:8a:64:c8:df:5f:f8:4f:0c:50:93:
                    0c:6b:88:59:d4:55:4c:dd:6a:5a:69:9d:20:49:dd:
                    4a:82:19:fa:78:25:28:21:5c:4b:67:db:22:1c:0b:
                    99:8f:5e:cf:44:a7:25:c5:64:70:e9:be:ee:fa:7d:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:41:8E:49:D7:39:40:97:D5:4B:40:E1:48:07:0F:F8:B1:E8:80:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8a718f2-1452-3089-ab9a-b8237b452e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b2c0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4a:a9:4c:82:a4:c5:65:2d:64:bc:47:17:d6:10:db:6f:d5:
         a4:e9:87:c1:21:d5:f4:79:27:12:3d:4c:4d:bd:40:ad:27:0e:
         41:30:62:04:d4:09:7a:f3:81:43:30:44:40:75:97:d1:9d:1b:
         00:fa:11:46:59:29:36:63:e2:66:de:60:c9:67:3b:8f:14:60:
         2d:0c:97:ba:9a:ff:f2:0f:49:18:87:7a:62:2b:bc:e1:3e:02:
         22:cd:2e:27:88:3f:5f:bb:66:ac:01:a4:60:3c:15:72:77:7a:
         b9:87:41:6e:ac:39:9c:41:a3:82:e8:52:f4:49:ab:3a:48:77:
         c8:cf:2b:ff:79:aa:eb:79:da:41:ba:00:55:25:ef:e4:2b:ed:
         4f:da:95:3f:23:cd:aa:aa:e4:c7:a2:05:9e:40:be:76:51:f8:
         bb:ea:44:a6:99:fe:54:39:ae:fe:c1:ab:ce:4f:83:14:83:29:
         cd:a2:8a:0e:85:90:3b:a1:db:0a:81:15:f2:f3:74:04:a7:c3:
         7b:7d:ef:1e:4a:4e:98:60:79:4b:81:1f:1e:f7:c8:a9:42:e3:
         28:2d:76:b6:81:a7:4f:e3:00:1d:7b:62:9f:f5:10:5e:26:34:
         e0:1e:8c:5f:1d:be:02:b5:db:b7:4f:29:ce:4b:65:d7:d1:f2:
         dd:fa:72:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jhl/yHBLPM1oU/OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWY2YTUxODItYjQwNS00OTIwLTg2MWUtMmQwM2JjY2MwNWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8brLaS9giv8oDOKHcMpSwhD5JgE42RFPtOW1
F5gJHSUR4OVVx/V38EvGwikblu9rJhwQujvP/7q3FRfUylW1osczyQb4l9VxoHbf
quV8RWhaiSFLueYNHfpnBlU3sGfbbaAxPI4bwrEZGo2CaKPWarwyHRkJBHcXFPDg
tYiekzNyjwicQSmGQ8d49U0y1qtbZonLBF53oMzp1Zg58809Zoqp4D7Suvmk1nVA
Iz5ruKKrqjwjdh+N3mrVdHCeEdBAAR5cTarJyIpkyN9f+E8MUJMMa4hZ1FVM3Wpa
aZ0gSd1Kghn6eCUoIVxLZ9siHAuZj17PRKclxWRw6b7u+n0TVwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOJBjknXOUCX1UtA4UgHD/ix6IAlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjhhNzE4ZjItMTQ1Mi0z
MDg5LWFiOWEtYjgyMzdiNDUyZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDLLA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEtKqUyCpMVlLWS8RxfWENtv1aTph8Eh1fR5JxI9TE29QK0nDkEw
YgTUCXrzgUMwREB1l9GdGwD6EUZZKTZj4mbeYMlnO48UYC0Ml7qa//IPSRiHemIr
vOE+AiLNLieIP1+7ZqwBpGA8FXJ3ermHQW6sOZxBo4LoUvRJqzpId8jPK/95qut5
2kG6AFUl7+Qr7U/alT8jzaqq5MeiBZ5AvnZR+LvqRKaZ/lQ5rv7Bq85PgxSDKc2i
ig6FkDuh2wqBFfLzdASnw3t97x5KTphgeUuBHx73yKlC4ygtdraBp0/jAB17Yp/1
EF4mNOAejF8dvgK127dPKc5LZdfR8t36ciA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:08:31 2026 by rpki-client