Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff5d348-ac5b-357f-9b37-2805b0bef4cd.roa
File:                     bff5d348-ac5b-357f-9b37-2805b0bef4cd.roa (raw, json)
Hash identifier:          GdygHU2Lig3o55p6FgFwyq9Vx74Zfmh7Z1rOxj52U4M=
Subject key identifier:   73:15:90:6B:3A:20:7E:AB:B3:B1:7C:9C:CF:82:01:25:61:9A:EC:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D49E17C26524472D6D7311CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff5d348-ac5b-357f-9b37-2805b0bef4cd.roa
Signing time:             Wed 25 Mar 2026 19:09:55 +0000
ROA not before:           Wed 25 Mar 2026 19:09:55 +0000
ROA not after:            Tue 23 Jun 2026 19:09:55 +0000
asID:                     6167
IP address blocks:        2600:100a:a114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:e1:7c:26:52:44:72:d6:d7:31:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 19:09:55 2026 GMT
            Not After : Jun 23 19:09:55 2026 GMT
        Subject: CN=e208aa61-fad9-403d-8500-28c5d29cd753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:db:8c:e5:ba:e3:d6:3c:c3:c2:ac:73:9c:
                    30:d2:b9:53:be:ac:b4:15:89:0e:5d:6f:41:5a:60:
                    f5:1c:66:03:e2:72:ed:2d:32:37:f3:11:9c:ab:6a:
                    dd:74:99:34:15:6c:1d:e6:e2:46:a9:07:43:ee:26:
                    1d:dc:64:86:eb:55:72:9f:76:29:c3:9e:84:c4:e7:
                    ea:bc:2f:b1:01:dd:8f:73:5a:50:82:e6:0c:51:40:
                    56:56:f2:76:9e:c0:83:6a:de:e0:69:34:de:a5:05:
                    b4:75:83:06:79:fd:aa:f4:96:2c:55:ac:28:f3:23:
                    09:70:91:05:f9:38:49:16:da:46:4a:11:5f:64:30:
                    ea:a4:51:ae:8b:fc:e2:3a:43:ee:6d:ea:11:9b:75:
                    f7:14:35:13:ff:db:15:bb:59:5b:87:52:43:27:4f:
                    aa:d4:8b:07:87:9f:e1:c3:03:31:d6:94:b5:4d:cc:
                    b9:42:8f:0d:0f:94:7b:1e:03:5a:d0:fa:d5:ec:37:
                    57:12:74:27:0c:21:d9:1a:a2:9a:8e:a4:11:22:59:
                    ec:d4:e8:ad:d0:f9:74:d9:fe:48:8c:aa:70:f0:be:
                    c6:0d:cb:b3:0c:f6:c7:aa:f8:2f:b8:f0:d0:94:ab:
                    ed:d2:a7:15:4d:a2:a9:a2:20:6d:b7:b8:16:cf:46:
                    fa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:15:90:6B:3A:20:7E:AB:B3:B1:7C:9C:CF:82:01:25:61:9A:EC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff5d348-ac5b-357f-9b37-2805b0bef4cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:a114::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:14:39:9e:b3:21:4d:e7:65:72:87:03:78:fe:d8:7a:03:13:
         ad:b6:46:8e:b5:a3:d7:16:ee:c3:7b:68:19:a6:1e:f0:7a:11:
         2b:26:25:c3:1a:0e:89:75:21:0b:2f:d2:57:3f:dc:7b:75:37:
         b8:0d:d0:01:75:93:51:cf:3c:85:d4:ca:d1:aa:90:90:c4:54:
         81:22:bc:a2:ef:f2:51:76:03:6c:c3:e9:90:48:eb:5c:88:06:
         d9:ab:86:83:4f:e0:b0:7b:22:87:eb:d8:87:69:a0:65:03:a5:
         f4:7a:78:25:d6:72:05:e5:3a:56:b7:d1:a3:0b:2f:d5:9f:e9:
         15:a5:8b:bd:ab:b1:3b:aa:7d:65:87:49:fc:86:77:11:47:6b:
         86:fe:56:17:8b:be:39:ea:97:59:f7:6d:b5:c6:ed:0c:31:79:
         b2:3d:8d:92:91:0c:bd:ff:ab:df:53:a2:86:76:dd:30:b5:72:
         1e:35:46:c4:8b:ef:1a:70:62:11:84:18:4c:e8:82:99:0a:f0:
         09:9f:11:f7:70:5e:0d:4f:b1:3c:f6:04:42:68:47:93:70:ca:
         71:19:51:db:2d:ac:92:d6:d4:6a:67:2e:e2:26:83:90:88:10:
         3c:76:ba:5c:d3:ba:4e:bb:37:7f:18:ea:f6:07:1c:88:51:77:
         6b:74:d1:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1J4XwmUkRy1tcxHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMyNTE5MDk1NVoXDTI2MDYyMzE5MDk1NVowLzEtMCsGA1UEAxMk
ZTIwOGFhNjEtZmFkOS00MDNkLTg1MDAtMjhjNWQyOWNkNzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufHbjOW649Y8w8Ksc5ww0rlTvqy0FYkOXW9B
WmD1HGYD4nLtLTI38xGcq2rddJk0FWwd5uJGqQdD7iYd3GSG61Vyn3Ypw56ExOfq
vC+xAd2Pc1pQguYMUUBWVvJ2nsCDat7gaTTepQW0dYMGef2q9JYsVawo8yMJcJEF
+ThJFtpGShFfZDDqpFGui/ziOkPubeoRm3X3FDUT/9sVu1lbh1JDJ0+q1IsHh5/h
wwMx1pS1Tcy5Qo8ND5R7HgNa0PrV7DdXEnQnDCHZGqKajqQRIlns1Oit0Pl02f5I
jKpw8L7GDcuzDPbHqvgvuPDQlKvt0qcVTaKpoiBtt7gWz0b64wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHMVkGs6IH6rs7F8nM+CASVhmuwqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZmNWQzNDgtYWM1Yi0z
NTdmLTliMzctMjgwNWIwYmVmNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCqEU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFIUOZ6zIU3nZXKHA3j+2HoDE622Ro61o9cW7sN7aBmmHvB6ESsm
JcMaDol1IQsv0lc/3Ht1N7gN0AF1k1HPPIXUytGqkJDEVIEivKLv8lF2A2zD6ZBI
61yIBtmrhoNP4LB7Iofr2IdpoGUDpfR6eCXWcgXlOla30aMLL9Wf6RWli72rsTuq
fWWHSfyGdxFHa4b+VheLvjnql1n3bbXG7QwxebI9jZKRDL3/q99TooZ23TC1ch41
RsSL7xpwYhGEGEzogpkK8AmfEfdwXg1PsTz2BEJoR5NwynEZUdstrJLW1GpnLuIm
g5CIEDx2ulzTuk67N38Y6vYHHIhRd2t00cQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:12:49 2026 by rpki-client