Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e1a79a-0d03-3dcf-ab0c-f481f9dd4345.roa
File:                     d9e1a79a-0d03-3dcf-ab0c-f481f9dd4345.roa (raw, json)
Hash identifier:          KFvSHiqyljQfH/W/QlMxw2nb4HMbOlLx3FdIH8AWUfU=
Subject key identifier:   DB:8C:F8:36:18:0F:85:57:D3:68:92:12:15:64:45:79:FE:D9:D2:A3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F29122AFA57EFB0D28B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e1a79a-0d03-3dcf-ab0c-f481f9dd4345.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100e:b0ec::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:29:12:2a:fa:57:ef:b0:d2:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f5c10dde-7463-48c9-9598-5751fbb2425a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:cc:e6:85:76:f7:c0:e8:52:aa:97:6c:37:
                    01:c4:17:b1:25:a2:4e:2c:79:a5:c7:f3:e6:44:17:
                    b2:c2:62:76:a0:cd:b1:d6:05:d3:a1:47:2e:69:1a:
                    23:c4:a7:1e:15:28:c1:92:ef:5b:57:5b:61:26:f9:
                    d5:7e:1d:66:c0:89:7a:e6:83:9c:be:11:a8:26:0d:
                    7c:1f:ff:a0:a8:09:0d:d7:7c:bc:6c:5b:71:eb:6d:
                    cf:f9:b3:21:7d:d6:ac:bb:be:42:29:ba:d7:72:d3:
                    d9:ec:9d:6a:4e:99:d2:2a:b7:41:98:1c:8a:eb:82:
                    e0:01:54:e7:52:0d:c2:52:da:29:e4:2c:bc:e2:97:
                    9f:51:fd:ae:a9:97:df:e4:ea:a1:21:bf:ca:91:cb:
                    1c:d7:f8:bf:15:19:ed:a5:de:b0:9a:1a:53:cb:27:
                    72:43:5d:2d:fa:43:bc:57:77:4d:c2:47:e4:63:4c:
                    38:3b:eb:79:17:2c:6d:f2:67:9f:93:82:91:3f:d5:
                    07:85:e6:f0:b8:a7:06:00:65:7f:60:a3:42:09:b9:
                    41:cb:5c:7e:ca:aa:1c:42:dd:5a:8e:cd:e2:c6:2b:
                    30:87:94:ae:fa:3a:57:fe:ef:e0:d7:a6:2d:89:e1:
                    97:e8:e7:5a:22:9f:33:ac:ee:0d:84:a3:cc:a5:d0:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8C:F8:36:18:0F:85:57:D3:68:92:12:15:64:45:79:FE:D9:D2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e1a79a-0d03-3dcf-ab0c-f481f9dd4345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b0ec::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:01:60:48:9f:15:c3:a5:05:3b:81:82:8d:35:34:9c:94:ee:
         c8:81:31:dc:38:a8:43:8c:12:b0:4f:9b:21:64:fb:ae:93:49:
         c2:cb:95:f3:8b:26:c6:e3:ff:38:6d:f0:68:d6:1f:a2:42:bd:
         c9:06:4d:04:5e:f2:5d:8f:25:7e:e5:c1:1f:52:ee:51:75:83:
         e2:89:d2:ea:88:ce:da:c3:bb:71:f5:6d:0d:cd:07:fa:dc:17:
         d2:2e:32:85:ed:84:1d:47:f1:ec:d0:1b:a5:c4:e6:5c:63:eb:
         c7:94:6a:da:69:47:8f:45:05:85:9f:3f:b3:f3:8b:53:10:44:
         aa:d5:e7:8c:9a:be:c6:31:82:5c:2a:12:27:87:3c:94:58:31:
         51:ce:96:d3:70:81:23:43:1c:1a:7f:05:46:1b:3f:48:06:d7:
         5f:65:74:32:89:2c:6e:06:7a:3e:d7:bd:cb:36:b0:e0:84:75:
         ff:eb:af:93:3b:82:f2:21:10:d5:83:db:be:04:6e:bf:69:4d:
         f6:e5:b0:f6:fb:e9:45:ed:ef:d3:24:50:5f:8c:bd:63:b4:8b:
         80:8f:cd:c2:62:d9:f0:68:9b:84:36:b0:fd:da:38:57:6e:8b:
         e3:79:75:3a:7a:10:69:9c:e1:1b:0d:02:72:c0:24:a2:9f:54:
         f3:c5:ef:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JfykSKvpX77DSiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjVjMTBkZGUtNzQ2My00OGM5LTk1OTgtNTc1MWZiYjI0MjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNXM5oV298DoUqqXbDcBxBexJaJOLHmlx/Pm
RBeywmJ2oM2x1gXToUcuaRojxKceFSjBku9bV1thJvnVfh1mwIl65oOcvhGoJg18
H/+gqAkN13y8bFtx623P+bMhfdasu75CKbrXctPZ7J1qTpnSKrdBmByK64LgAVTn
Ug3CUtop5Cy84pefUf2uqZff5OqhIb/Kkcsc1/i/FRntpd6wmhpTyydyQ10t+kO8
V3dNwkfkY0w4O+t5Fyxt8mefk4KRP9UHhebwuKcGAGV/YKNCCblBy1x+yqocQt1a
js3ixiswh5Su+jpX/u/g16YtieGX6OdaIp8zrO4NhKPMpdBYNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNuM+DYYD4VX02iSEhVkRXn+2dKjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDllMWE3OWEtMGQwMy0z
ZGNmLWFiMGMtZjQ4MWY5ZGQ0MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDrDs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH8BYEifFcOlBTuBgo01NJyU7siBMdw4qEOMErBPmyFk+66TScLL
lfOLJsbj/zht8GjWH6JCvckGTQRe8l2PJX7lwR9S7lF1g+KJ0uqIztrDu3H1bQ3N
B/rcF9IuMoXthB1H8ezQG6XE5lxj68eUatppR49FBYWfP7Pzi1MQRKrV54yavsYx
glwqEieHPJRYMVHOltNwgSNDHBp/BUYbP0gG119ldDKJLG4Gej7Xvcs2sOCEdf/r
r5M7gvIhENWD274Ebr9pTfblsPb76UXt79MkUF+MvWO0i4CPzcJi2fBom4Q2sP3a
OFdui+N5dTp6EGmc4RsNAnLAJKKfVPPF7x8=
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:09:00 2026 by rpki-client