Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da37878e-ad74-3b6e-bd8f-737bc1a040f8.roa
File:                     da37878e-ad74-3b6e-bd8f-737bc1a040f8.roa (raw, json)
Hash identifier:          qxrfPiWC/M5VmLNLC6mxr63IWp4b9B1mQ1VxTiREhAY=
Subject key identifier:   74:81:57:FE:A6:9A:46:4C:AC:42:A0:09:14:40:5F:45:84:31:1D:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0440136112D47FCD8FBE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da37878e-ad74-3b6e-bd8f-737bc1a040f8.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1012:b0e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:44:01:36:11:2d:47:fc:d8:fb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=ab827fac-e455-46d3-b01a-05088ce0d13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a3:ae:47:7f:91:76:d6:97:5f:4c:b0:87:4f:
                    97:59:db:1f:0b:8c:17:42:be:d7:a8:9d:5b:68:dd:
                    17:88:7a:bb:7f:2b:52:8e:4d:bc:de:fd:54:9a:ff:
                    6a:f1:d3:44:48:a0:18:fb:29:4e:d8:94:cb:22:4a:
                    83:00:11:c6:e8:4e:44:bb:d8:a0:6f:1d:c7:b0:1f:
                    bf:3c:9e:9b:56:2c:3a:49:f1:f3:6c:8d:bb:ff:be:
                    f1:a3:59:2d:39:42:01:a9:bd:db:11:b9:2e:ea:2c:
                    10:97:5f:a5:90:5c:f7:78:09:5b:a1:f7:3e:28:59:
                    4d:0f:06:70:0c:3e:ae:0a:41:27:01:fb:65:51:9d:
                    d8:eb:f8:8e:31:2e:2a:df:0d:5a:af:c1:19:c7:87:
                    7c:73:37:9a:18:ae:59:c6:54:ad:9a:99:d7:9d:c3:
                    9d:46:9a:26:0a:d5:9e:b9:23:79:d2:0e:d7:82:61:
                    70:75:f2:6d:15:b8:e5:62:a6:fb:2a:b1:d8:0f:72:
                    b3:fe:af:a3:e8:ce:24:c6:e8:7b:bf:f7:d5:18:54:
                    f9:29:63:1c:7e:dd:74:13:f8:d7:23:7d:f3:39:db:
                    1f:54:e4:ae:90:b6:e2:68:9c:c6:17:ee:74:81:71:
                    bd:70:7f:67:04:37:82:8a:79:6c:e9:1b:93:62:ff:
                    ba:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:81:57:FE:A6:9A:46:4C:AC:42:A0:09:14:40:5F:45:84:31:1D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da37878e-ad74-3b6e-bd8f-737bc1a040f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:58:e4:f6:af:12:32:bb:17:f1:f0:c2:e8:8e:c6:ea:a8:
         83:a2:44:ea:83:a4:da:ec:28:25:67:d8:a7:4e:05:8d:0f:67:
         0a:af:af:26:1c:07:ea:c2:ab:17:8f:17:fc:46:bd:04:53:0a:
         12:4f:86:0e:9f:34:32:8d:0e:90:44:9c:f4:0e:13:4d:e0:21:
         d2:2c:95:87:83:cb:dc:df:28:64:fc:4f:9b:ff:b2:c1:88:cb:
         ea:6e:d2:bd:25:24:6f:70:6b:5c:6b:09:8e:c7:a9:14:5d:eb:
         9e:22:d3:02:2f:e0:e3:f6:e7:99:f6:85:aa:01:9a:c2:0c:17:
         c3:d3:af:0b:ab:d7:a8:5f:31:27:00:8d:5a:b9:a0:be:c1:cb:
         02:f5:57:3c:2e:da:ed:28:ab:9c:a5:ac:df:28:ca:de:85:5b:
         3a:ef:c0:d1:d9:44:bf:84:7b:29:9e:ec:d8:0b:1f:05:e2:70:
         81:63:67:59:e7:22:76:9e:eb:d5:9b:13:ea:f1:b2:de:7e:49:
         d6:f8:ec:fa:a8:76:01:40:df:e7:11:be:39:7b:7a:50:f8:31:
         0b:3f:5a:67:c8:37:1c:21:6e:69:08:32:cd:ea:8a:ba:00:2c:
         bc:ca:47:a9:f7:33:cc:50:b9:af:01:fe:20:7e:9e:b2:02:74:
         88:0e:6e:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4EQBNhEtR/zY++AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
YWI4MjdmYWMtZTQ1NS00NmQzLWIwMWEtMDUwODhjZTBkMTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96OuR3+RdtaXX0ywh0+XWdsfC4wXQr7XqJ1b
aN0XiHq7fytSjk283v1Umv9q8dNESKAY+ylO2JTLIkqDABHG6E5Eu9igbx3HsB+/
PJ6bViw6SfHzbI27/77xo1ktOUIBqb3bEbku6iwQl1+lkFz3eAlbofc+KFlNDwZw
DD6uCkEnAftlUZ3Y6/iOMS4q3w1ar8EZx4d8czeaGK5ZxlStmpnXncOdRpomCtWe
uSN50g7XgmFwdfJtFbjlYqb7KrHYD3Kz/q+j6M4kxuh7v/fVGFT5KWMcft10E/jX
I33zOdsfVOSukLbiaJzGF+50gXG9cH9nBDeCinls6RuTYv+6zQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHSBV/6mmkZMrEKgCRRAX0WEMR11MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGEzNzg3OGUtYWQ3NC0z
YjZlLWJkOGYtNzM3YmMxYTA0MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQErDg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGpiWOT2rxIyuxfx8MLojsbqqIOiROqDpNrsKCVn2KdOBY0PZwqv
ryYcB+rCqxePF/xGvQRTChJPhg6fNDKNDpBEnPQOE03gIdIslYeDy9zfKGT8T5v/
ssGIy+pu0r0lJG9wa1xrCY7HqRRd654i0wIv4OP255n2haoBmsIMF8PTrwur16hf
MScAjVq5oL7BywL1Vzwu2u0oq5ylrN8oyt6FWzrvwNHZRL+Eeyme7NgLHwXicIFj
Z1nnInae69WbE+rxst5+Sdb47PqodgFA3+cRvjl7elD4MQs/WmfINxwhbmkIMs3q
iroALLzKR6n3M8xQua8B/iB+nrICdIgOblw=
-----END CERTIFICATE-----
Generated at Wed May 13 12:07:58 2026 by rpki-client