Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c0b348-7894-31c4-95d9-0dc0e714fc96.roa
File:                     c1c0b348-7894-31c4-95d9-0dc0e714fc96.roa (raw, json)
Hash identifier:          98UKWXKVo2m5zvo27ME3ZFCcaGu+CTZd0JcQM7V70hQ=
Subject key identifier:   92:EA:7E:72:9D:10:67:B6:91:07:FC:48:CC:A1:29:52:EB:23:54:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F38EAB5685AF3DD321180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c0b348-7894-31c4-95d9-0dc0e714fc96.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        2600:100f::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:38:ea:b5:68:5a:f3:dd:32:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=32aa232e-c8dd-46f6-97cb-d23d31065669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:4c:1e:e8:75:0a:22:04:3b:68:5d:ca:53:
                    35:75:5a:b9:40:73:d7:3c:aa:a0:28:1e:41:a8:8e:
                    49:4a:80:27:1d:38:26:e3:4e:e1:38:53:8c:31:1e:
                    cb:62:d9:39:c7:2f:98:21:52:e4:3d:e8:56:07:10:
                    e3:2e:73:93:91:f1:4a:2c:c6:bc:18:48:cd:51:f8:
                    57:19:5c:a1:b7:2a:70:03:56:c7:2e:b5:9e:e2:87:
                    a7:a4:87:00:dc:0f:89:c2:42:d4:1b:e0:10:f2:55:
                    be:b4:df:ef:90:98:e9:3c:e2:6c:9a:ed:a8:5d:e3:
                    92:c6:1f:f2:f1:f6:1c:e3:af:02:fd:7f:80:e6:3c:
                    7b:1b:74:97:97:23:1f:65:05:74:37:e7:87:e3:68:
                    da:bf:05:42:bd:29:14:69:d5:79:c3:09:a3:37:50:
                    8a:0c:36:cd:56:a2:d3:de:8f:c6:e2:cc:e3:42:6d:
                    a4:1e:54:87:54:79:6a:ce:72:0a:42:b1:df:b7:72:
                    11:3c:bf:30:05:d9:b3:08:bf:2e:12:a7:f3:a6:b0:
                    ee:37:8b:ed:44:77:28:5c:1d:62:42:21:ce:af:0b:
                    48:b6:6b:04:fe:e6:99:93:54:33:eb:59:e2:f5:2c:
                    85:be:62:28:16:b3:ab:af:12:a3:0a:11:50:6e:7d:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EA:7E:72:9D:10:67:B6:91:07:FC:48:CC:A1:29:52:EB:23:54:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1c0b348-7894-31c4-95d9-0dc0e714fc96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:27:da:83:a3:1b:a7:ea:d6:be:39:a4:ce:fd:72:a0:ef:17:
         dc:73:d9:bc:c7:bd:7a:c1:87:07:46:bc:f4:06:52:09:28:98:
         51:09:35:19:8c:7e:0a:63:71:fc:6d:90:36:05:18:9e:53:f8:
         b4:42:aa:6c:e5:3d:c5:de:25:31:57:af:83:17:d4:2b:10:b6:
         92:ea:98:d2:61:dd:a0:dd:fa:75:34:1e:d3:2c:d5:ad:f6:ef:
         da:03:21:e6:2d:81:79:7f:86:f7:00:f7:e7:5e:35:95:ba:6c:
         53:b1:9e:3c:bc:00:34:01:5c:bc:c8:5e:d4:50:e2:3b:b4:c4:
         19:7b:92:46:12:93:19:c4:a6:17:e6:f2:b1:9e:21:c8:22:d7:
         a0:d6:1f:a5:17:a1:1b:aa:14:80:b6:1c:9f:b1:69:f4:cb:9d:
         9a:43:dd:63:22:83:e3:92:49:dc:28:d5:e7:1a:8f:8c:8b:47:
         67:c0:df:b8:21:08:7d:08:18:0f:49:e2:d2:45:32:dd:bb:17:
         12:2f:33:1a:c8:26:26:ba:d6:18:92:f8:6e:e7:48:43:88:fe:
         df:f9:31:53:b5:12:5d:76:4a:d1:83:a8:3a:08:1a:85:e1:73:
         b2:c4:28:54:45:ba:2b:a5:81:06:b6:ae:a7:46:34:9c:a7:ef:
         c0:3d:1a:9a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JfzjqtWha890yEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzJhYTIzMmUtYzhkZC00NmY2LTk3Y2ItZDIzZDMxMDY1NjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFtMHuh1CiIEO2hdylM1dVq5QHPXPKqgKB5B
qI5JSoAnHTgm407hOFOMMR7LYtk5xy+YIVLkPehWBxDjLnOTkfFKLMa8GEjNUfhX
GVyhtypwA1bHLrWe4oenpIcA3A+JwkLUG+AQ8lW+tN/vkJjpPOJsmu2oXeOSxh/y
8fYc468C/X+A5jx7G3SXlyMfZQV0N+eH42javwVCvSkUadV5wwmjN1CKDDbNVqLT
3o/G4szjQm2kHlSHVHlqznIKQrHft3IRPL8wBdmzCL8uEqfzprDuN4vtRHcoXB1i
QiHOrwtItmsE/uaZk1Qz61ni9SyFvmIoFrOrrxKjChFQbn0tbwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJLqfnKdEGe2kQf8SMyhKVLrI1RXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzFjMGIzNDgtNzg5NC0z
MWM0LTk1ZDktMGRjMGU3MTRmYzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAQDzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBiJ9qDoxun6ta+OaTO/XKg7xfcc9m8x716wYcHRrz0BlIJKJhRCTUZ
jH4KY3H8bZA2BRieU/i0Qqps5T3F3iUxV6+DF9QrELaS6pjSYd2g3fp1NB7TLNWt
9u/aAyHmLYF5f4b3APfnXjWVumxTsZ48vAA0AVy8yF7UUOI7tMQZe5JGEpMZxKYX
5vKxniHIIteg1h+lF6EbqhSAthyfsWn0y52aQ91jIoPjkkncKNXnGo+Mi0dnwN+4
IQh9CBgPSeLSRTLduxcSLzMayCYmutYYkvhu50hDiP7f+TFTtRJddkrRg6g6CBqF
4XOyxChURborpYEGtq6nRjScp+/APRqa
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:37:17 2026 by rpki-client