Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d16b84db-708f-30c2-a9f3-d14fb547c203.roa
File:                     d16b84db-708f-30c2-a9f3-d14fb547c203.roa (raw, json)
Hash identifier:          hhImNwsciJHon6P34Z+SUq7X+x1RYiq0ZFCw2/ooTMg=
Subject key identifier:   2F:81:6B:EA:1B:53:93:C5:84:EE:28:0A:A5:C2:BF:86:1D:B1:55:2F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D948AAB779239BCD6BB394080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d16b84db-708f-30c2-a9f3-d14fb547c203.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:100d:a0e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:ab:77:92:39:bc:d6:bb:39:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=aff48d2c-1e56-4172-bd4c-9984712486f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:61:6a:3c:ab:88:97:a2:c6:dd:a4:88:07:09:
                    46:bb:7c:b5:1d:92:78:ac:f4:89:b6:6d:ff:2b:c8:
                    b0:28:b1:07:54:52:20:4b:8b:f5:c8:be:46:0d:29:
                    f0:c6:ce:7a:49:29:5c:fd:25:d1:3c:01:a2:87:46:
                    39:0a:00:fc:0d:39:60:ad:90:d3:63:29:ab:ff:3c:
                    15:05:df:14:fc:05:cc:27:d6:45:3f:f4:23:1f:00:
                    0c:00:e5:31:b1:67:07:d4:39:36:0b:97:06:4e:9d:
                    e8:3c:2e:0e:75:3e:2a:ac:fb:d9:af:4d:37:85:99:
                    0d:69:fa:c3:56:18:df:5d:c2:2d:00:d4:52:35:99:
                    ef:e3:f9:7e:22:33:90:39:da:a0:d6:12:de:58:69:
                    4e:8e:7a:83:d2:a8:c6:a4:bc:ca:63:6e:9a:85:df:
                    9c:8d:46:51:3b:9e:94:63:6b:7e:dc:42:5c:a1:3a:
                    15:41:20:73:29:d4:9b:d2:ab:ef:e2:a2:d0:fb:e7:
                    96:6a:61:1b:75:77:bc:8b:41:ca:46:46:b9:62:2e:
                    d2:af:96:67:0d:35:a0:f4:73:8e:43:9d:f2:ee:8b:
                    4c:39:01:c0:8e:49:45:1c:0e:52:fe:fd:73:63:34:
                    8e:98:e9:b2:85:f3:a5:d4:33:17:9a:07:02:d7:9c:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:6B:EA:1B:53:93:C5:84:EE:28:0A:A5:C2:BF:86:1D:B1:55:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d16b84db-708f-30c2-a9f3-d14fb547c203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a0e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:20:ea:37:c2:83:22:a0:41:66:15:c3:d0:6d:d5:6b:71:78:
         84:85:2e:f5:4e:18:d7:32:96:18:22:bf:c9:7e:42:23:65:5f:
         f1:3c:f1:7b:dd:3c:0b:ed:26:b3:6b:7a:35:21:03:55:3c:56:
         26:41:33:a1:5c:a4:0f:6d:b6:b8:cf:26:9e:b5:7d:9f:eb:74:
         de:a2:73:b0:a8:f0:1f:f9:5d:ce:9b:7b:70:b5:04:8a:d9:9e:
         a8:d5:71:78:fa:d8:84:cc:32:4a:a0:bb:4e:af:a6:54:7d:7b:
         95:8e:2c:1b:30:f6:1f:1e:40:d3:11:fb:55:f9:46:88:f8:7e:
         97:a8:a5:84:6c:7a:45:61:29:af:bb:6d:72:e5:b1:69:e4:f4:
         d8:f6:3d:b6:82:e2:c9:3a:de:d5:99:7d:ca:07:d0:26:32:85:
         1e:9c:f8:b4:a9:82:d7:15:e4:82:8d:d2:da:2b:2e:3f:70:e8:
         d6:a3:a1:d1:db:ce:42:d6:ad:76:59:cf:0a:d8:b1:82:09:a2:
         95:68:8c:fd:45:d5:31:86:54:2c:27:cd:ed:8f:90:d4:b2:6b:
         7c:16:7b:eb:37:55:e0:e1:2f:25:98:87:37:54:4e:68:4a:a1:
         fb:93:eb:50:65:e8:22:0b:dd:f4:5c:d6:65:ad:79:93:64:00:
         5a:93:b1:02
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Uiqt3kjm81rs5QIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyMTEzMDAzMVoXDTI2MDcyMDEzMDAzMVowLzEtMCsGA1UEAxMk
YWZmNDhkMmMtMWU1Ni00MTcyLWJkNGMtOTk4NDcxMjQ4NmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimFqPKuIl6LG3aSIBwlGu3y1HZJ4rPSJtm3/
K8iwKLEHVFIgS4v1yL5GDSnwxs56SSlc/SXRPAGih0Y5CgD8DTlgrZDTYymr/zwV
Bd8U/AXMJ9ZFP/QjHwAMAOUxsWcH1Dk2C5cGTp3oPC4OdT4qrPvZr003hZkNafrD
VhjfXcItANRSNZnv4/l+IjOQOdqg1hLeWGlOjnqD0qjGpLzKY26ahd+cjUZRO56U
Y2t+3EJcoToVQSBzKdSb0qvv4qLQ++eWamEbdXe8i0HKRka5Yi7Sr5ZnDTWg9HOO
Q53y7otMOQHAjklFHA5S/v1zYzSOmOmyhfOl1DMXmgcC15x+tQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC+Ba+obU5PFhO4oCqXCv4YdsVUvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDE2Yjg0ZGItNzA4Zi0z
MGMyLWE5ZjMtZDE0ZmI1NDdjMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDaDo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABQg6jfCgyKgQWYVw9Bt1WtxeISFLvVOGNcylhgiv8l+QiNlX/E8
8XvdPAvtJrNrejUhA1U8ViZBM6FcpA9ttrjPJp61fZ/rdN6ic7Co8B/5Xc6be3C1
BIrZnqjVcXj62ITMMkqgu06vplR9e5WOLBsw9h8eQNMR+1X5Roj4fpeopYRsekVh
Ka+7bXLlsWnk9Nj2PbaC4sk63tWZfcoH0CYyhR6c+LSpgtcV5IKN0torLj9w6Naj
odHbzkLWrXZZzwrYsYIJopVojP1F1TGGVCwnze2PkNSya3wWe+s3VeDhLyWYhzdU
TmhKofuT61Bl6CIL3fRc1mWteZNkAFqTsQI=
-----END CERTIFICATE-----
Generated at Wed May 13 11:16:04 2026 by rpki-client