Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1d5a37d-838f-34db-b7c3-d9adb68124a4.roa
File:                     c1d5a37d-838f-34db-b7c3-d9adb68124a4.roa (raw, json)
Hash identifier:          KS0KMFyavXF8AqjQ5qgy7RZvZSuEZYSW9ZQ7+k8vGes=
Subject key identifier:   1C:EF:C6:33:77:7B:24:47:2D:22:77:3A:5E:BF:1A:30:FE:3C:2F:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E8B2506B7A6667125543068C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1d5a37d-838f-34db-b7c3-d9adb68124a4.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        2600:1015:a110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:06:b7:a6:66:71:25:54:30:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=d02b4fc4-c55f-4b35-8226-e4f8bbd3ebb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:3a:79:30:c0:a0:5a:b2:19:03:12:2b:f8:
                    72:ef:1c:dd:24:bc:ee:01:be:6d:85:92:a7:e7:7e:
                    89:99:5d:11:8f:a1:c6:30:8c:3b:e1:2e:83:01:b1:
                    6e:40:5b:4d:cc:4c:03:54:85:84:34:59:d9:03:db:
                    a5:c3:84:24:7b:40:33:ef:94:91:dd:a6:86:b8:2b:
                    e5:c9:5b:0e:4f:3a:3c:91:83:ed:36:7a:35:02:71:
                    e9:c7:84:4b:66:06:46:c5:44:54:f3:49:79:1f:06:
                    e4:e7:58:4b:a5:eb:35:a4:77:75:40:31:dd:18:6e:
                    58:d6:31:b9:6b:e1:7c:c4:1c:ce:c8:06:83:b6:ed:
                    d6:6b:06:96:c5:a3:ba:1c:0d:9f:66:6e:38:5a:df:
                    8d:77:c8:f3:eb:39:28:af:89:71:2d:ae:cb:10:19:
                    a0:2c:4b:de:59:ec:ef:18:d9:79:ee:13:06:78:d6:
                    f5:62:08:d6:b2:b9:48:be:c3:a9:3b:14:06:49:d2:
                    20:7b:ad:f2:6e:91:f5:a7:8c:2a:2c:1d:ed:85:da:
                    bd:d7:c0:a9:89:c4:7c:64:e3:05:b2:db:e8:e2:c2:
                    d2:9c:13:ba:d7:8f:be:e1:30:e2:f6:39:c4:90:a3:
                    47:c4:ab:72:96:99:ab:5b:ac:44:c9:35:5b:66:b8:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EF:C6:33:77:7B:24:47:2D:22:77:3A:5E:BF:1A:30:FE:3C:2F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1d5a37d-838f-34db-b7c3-d9adb68124a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:97:0d:93:fc:d4:1d:dd:7e:23:6e:f2:b1:06:70:25:4d:c2:
         ab:ca:1c:18:db:f6:a2:63:82:77:6f:26:68:6a:bc:35:31:2f:
         81:1c:71:e4:ca:c9:e2:7a:4c:7f:0f:6f:53:62:46:f3:2a:34:
         b7:63:f8:39:a4:05:c1:9f:a4:9d:3b:09:c2:ba:ef:48:b3:8a:
         59:b3:fb:59:86:a9:fe:15:30:aa:b4:c9:83:8a:8d:75:be:96:
         7b:c3:0f:e3:93:75:ef:35:2c:e2:02:7d:ad:0e:68:69:0b:3f:
         7a:b9:d3:71:34:b0:b3:36:4e:65:e6:d8:a3:20:bc:99:b5:79:
         0e:76:b8:f7:62:ce:2b:99:13:60:57:94:ec:9f:8f:e4:13:de:
         4b:dc:f8:96:50:71:13:14:53:31:3f:e4:07:1e:b9:3d:b2:4d:
         7b:da:7a:b6:fc:aa:a0:38:1b:16:2d:4c:55:bf:9b:f2:5f:10:
         34:e3:1a:be:f7:26:c8:75:72:d3:32:55:02:e8:b7:d7:f4:d1:
         3b:fb:ec:2b:a4:ce:98:1d:91:84:64:a3:9d:15:0f:e9:6b:1a:
         43:3f:35:7e:b7:74:6c:3e:4a:00:95:07:20:2c:9c:27:8d:0a:
         91:b6:24:9d:d7:ef:cf:ab:4f:66:b7:56:bb:bf:a1:e9:63:cf:
         90:fd:eb:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6LJQa3pmZxJVQwaMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
ZDAyYjRmYzQtYzU1Zi00YjM1LTgyMjYtZTRmOGJiZDNlYmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIk6eTDAoFqyGQMSK/hy7xzdJLzuAb5thZKn
536JmV0Rj6HGMIw74S6DAbFuQFtNzEwDVIWENFnZA9ulw4Qke0Az75SR3aaGuCvl
yVsOTzo8kYPtNno1AnHpx4RLZgZGxURU80l5Hwbk51hLpes1pHd1QDHdGG5Y1jG5
a+F8xBzOyAaDtu3WawaWxaO6HA2fZm44Wt+Nd8jz6zkor4lxLa7LEBmgLEveWezv
GNl57hMGeNb1YgjWsrlIvsOpOxQGSdIge63ybpH1p4wqLB3thdq918CpicR8ZOMF
stvo4sLSnBO614++4TDi9jnEkKNHxKtylpmrW6xEyTVbZri6FwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBzvxjN3eyRHLSJ3Ol6/GjD+PC82MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzFkNWEzN2QtODM4Zi0z
NGRiLWI3YzMtZDlhZGI2ODEyNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFaEQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADmXDZP81B3dfiNu8rEGcCVNwqvKHBjb9qJjgndvJmhqvDUxL4Ec
ceTKyeJ6TH8Pb1NiRvMqNLdj+DmkBcGfpJ07CcK670izilmz+1mGqf4VMKq0yYOK
jXW+lnvDD+OTde81LOICfa0OaGkLP3q503E0sLM2TmXm2KMgvJm1eQ52uPdiziuZ
E2BXlOyfj+QT3kvc+JZQcRMUUzE/5AceuT2yTXvaerb8qqA4GxYtTFW/m/JfEDTj
Gr73Jsh1ctMyVQLot9f00Tv77CukzpgdkYRko50VD+lrGkM/NX63dGw+SgCVByAs
nCeNCpG2JJ3X78+rT2a3Vru/oeljz5D967I=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:43 2026 by rpki-client