Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa
File:                     d6ae0673-db51-38d2-9be1-4015979986d1.roa (raw, json)
Hash identifier:          kKY3Ozu1WB5UicfP/jPL5tLFW2WzBHU5GKPUmJsoPpo=
Subject key identifier:   59:FB:4B:08:44:93:99:8F:41:AB:6B:72:6F:63:13:8B:4D:7F:C6:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE03D38DFF4F0A8F8ED5700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:a03d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:3d:38:df:f4:f0:a8:f8:ed:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=79031ceb-ce14-4e7c-9dba-fecdc5f75d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:b1:6c:c4:3f:57:4c:9a:a6:80:5a:a1:f8:
                    3a:f0:6c:5a:f4:39:69:e7:a3:91:aa:d0:3e:70:a0:
                    da:e7:a9:9e:c2:9e:a9:0e:cb:6c:3b:34:aa:56:d5:
                    8f:22:02:cc:5c:d9:a5:63:51:f7:40:68:43:74:09:
                    9b:f2:ab:d1:d2:7f:94:4f:2f:f0:e1:33:cf:bc:5c:
                    0d:c2:fd:fa:77:da:1b:6d:0c:b5:23:c2:c2:4c:30:
                    83:83:4f:17:f8:84:3b:38:f9:13:00:6f:0d:4f:38:
                    5f:b0:0e:14:c4:25:8e:13:b6:b0:b5:6d:04:a2:50:
                    e8:c0:f2:a8:4e:fc:2a:52:1f:82:7c:db:bc:2b:8f:
                    dd:6f:63:86:84:cf:c5:f7:86:c6:29:69:0c:c7:fd:
                    cb:92:0e:35:5c:53:7f:23:42:43:f1:0a:61:85:8c:
                    ca:94:00:dc:2c:c3:8d:9e:b5:ee:87:04:6c:e0:6a:
                    e4:24:06:9d:cc:d5:e1:38:cc:23:c9:66:30:d0:2b:
                    61:da:4f:4e:2f:7e:91:74:cc:14:b8:b2:da:ac:16:
                    ba:95:ef:44:01:05:59:f8:94:58:51:59:e3:32:8f:
                    d8:d1:b0:e3:54:11:45:d7:17:d0:14:2f:64:dc:9b:
                    d7:b6:37:3f:e8:89:5d:68:c4:43:7b:41:8a:e5:ce:
                    c6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:4B:08:44:93:99:8F:41:AB:6B:72:6F:63:13:8B:4D:7F:C6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d6ae0673-db51-38d2-9be1-4015979986d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a03d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:e6:86:ce:2d:55:b4:e4:cc:ae:a9:f3:2d:b4:95:fa:c5:
         f7:de:58:77:84:75:61:f8:f5:b7:3b:c5:dd:0f:a9:96:30:4c:
         33:83:4e:2e:c2:5b:e1:b8:ad:4e:d3:1f:51:b2:9e:2d:31:0b:
         bc:ca:44:12:2b:ca:27:63:78:c3:1a:db:9b:8d:dc:ac:24:2b:
         59:59:84:d3:19:e3:9e:19:d8:4e:4d:b5:17:99:0e:d1:29:01:
         c7:bf:ec:7e:d9:de:df:c0:dd:ce:61:e7:a3:a5:6c:5c:d7:81:
         c6:45:6d:5e:9c:f2:7f:54:8b:b2:87:a7:ca:29:70:62:e0:74:
         06:6e:79:2e:16:1d:ef:3a:bd:3e:d4:97:63:e3:b0:92:1c:21:
         b5:cd:cb:e6:02:99:bc:03:6f:2e:12:8a:80:d4:f2:3b:29:0e:
         55:27:8a:31:fa:f9:99:30:03:b4:ce:43:e5:4b:4f:f0:e8:7e:
         43:f1:dd:2c:46:09:2f:30:13:a0:46:50:9b:57:87:78:c9:54:
         b7:28:37:20:98:02:b5:55:d9:7a:f4:3f:6c:29:9a:42:ef:e0:
         fb:96:e6:a2:82:72:ed:69:61:f2:dc:79:c4:fd:23:a2:3e:e1:
         76:25:dc:2f:f8:cb:f1:62:0f:c7:67:db:5b:8f:8a:8e:e5:b0:
         eb:0f:9b:bf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4D043/TwqPjtVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
NzkwMzFjZWItY2UxNC00ZTdjLTlkYmEtZmVjZGM1Zjc1ZDQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUaxbMQ/V0yapoBaofg68Gxa9Dlp56ORqtA+
cKDa56mewp6pDstsOzSqVtWPIgLMXNmlY1H3QGhDdAmb8qvR0n+UTy/w4TPPvFwN
wv36d9obbQy1I8LCTDCDg08X+IQ7OPkTAG8NTzhfsA4UxCWOE7awtW0EolDowPKo
TvwqUh+CfNu8K4/db2OGhM/F94bGKWkMx/3Lkg41XFN/I0JD8QphhYzKlADcLMON
nrXuhwRs4GrkJAadzNXhOMwjyWYw0Cth2k9OL36RdMwUuLLarBa6le9EAQVZ+JRY
UVnjMo/Y0bDjVBFF1xfQFC9k3JvXtjc/6IldaMRDe0GK5c7G5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFn7SwhEk5mPQatrcm9jE4tNf8boMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDZhZTA2NzMtZGI1MS0z
OGQyLTliZTEtNDAxNTk3OTk4NmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEaA9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAID35obOLVW05MyuqfMttJX6xffeWHeEdWH49bc7xd0PqZYwTDOD
Ti7CW+G4rU7TH1Gyni0xC7zKRBIryidjeMMa25uN3KwkK1lZhNMZ454Z2E5NtReZ
DtEpAce/7H7Z3t/A3c5h56OlbFzXgcZFbV6c8n9Ui7KHp8opcGLgdAZueS4WHe86
vT7Ul2PjsJIcIbXNy+YCmbwDby4SioDU8jspDlUnijH6+ZkwA7TOQ+VLT/DofkPx
3SxGCS8wE6BGUJtXh3jJVLcoNyCYArVV2Xr0P2wpmkLv4PuW5qKCcu1pYfLcecT9
I6I+4XYl3C/4y/FiD8dn21uPio7lsOsPm78=
-----END CERTIFICATE-----
Generated at Wed May 13 12:54:29 2026 by rpki-client