Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc70802a-cd62-30d6-8021-fa2258f78d79.roa
File:                     dc70802a-cd62-30d6-8021-fa2258f78d79.roa (raw, json)
Hash identifier:          MqOur92WuOCWWdtx782eTTmgndXtlvqPSp2O5maHNFg=
Subject key identifier:   37:2A:60:7B:5B:E2:91:A4:57:CF:00:6B:47:81:76:21:9F:34:38:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A0112F5B123B3EC51E280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc70802a-cd62-30d6-8021-fa2258f78d79.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1010:a140::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:01:12:f5:b1:23:b3:ec:51:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4bdac36a-b34f-44ad-b733-b43e1defcdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:72:3a:77:66:6f:ae:ba:cf:d9:c0:05:f2:
                    be:88:66:ab:e5:2b:e5:68:6c:0d:af:df:fc:35:93:
                    76:f2:21:fe:b8:76:d9:00:21:0e:2f:30:a4:ad:9b:
                    6b:fd:96:e7:68:19:a9:fb:b9:4f:61:3e:09:e5:4d:
                    dc:60:5c:70:74:5c:9e:8d:4c:a0:c8:a8:59:8e:c5:
                    47:6b:92:a5:82:05:c9:40:5d:39:42:63:b8:1e:fa:
                    fe:84:7a:0c:cf:7b:34:6d:a7:81:3c:78:9f:8f:0d:
                    8a:51:a7:a6:be:7d:c2:53:21:c2:a4:13:b6:26:50:
                    6b:5f:03:36:66:1f:2b:d8:0f:99:9e:57:2a:88:cd:
                    0c:22:28:e5:26:fc:fb:f2:8b:d4:19:43:00:c6:ad:
                    73:b0:13:66:4c:8d:e1:41:5f:27:52:49:a9:2a:ff:
                    d8:ef:2d:e6:fe:57:a4:ba:89:9c:9f:3b:65:ec:25:
                    82:9d:c2:f1:a2:63:9c:52:1f:00:7b:bc:a3:a5:aa:
                    54:33:49:8d:1a:29:35:5b:b0:5c:c6:5f:53:63:88:
                    2e:0c:e5:10:9e:c1:6c:4f:0a:79:ca:1b:88:13:3e:
                    81:41:7b:6d:19:6c:94:e6:30:3a:8a:73:b3:3c:4c:
                    5f:ad:c2:16:34:e7:b2:26:30:ae:f7:27:e1:77:09:
                    ea:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2A:60:7B:5B:E2:91:A4:57:CF:00:6B:47:81:76:21:9F:34:38:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dc70802a-cd62-30d6-8021-fa2258f78d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a140::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:36:c2:54:6f:08:f2:5a:a6:aa:de:c4:20:6d:80:ed:a9:90:
         19:02:58:ef:0a:74:47:87:81:04:5b:b8:3a:d8:f9:47:4f:d6:
         50:fb:f4:e6:70:04:b3:0d:b0:14:82:1f:e9:51:d1:60:d4:a3:
         e9:82:e2:f7:40:d0:f4:f8:d1:b9:94:6d:c3:38:96:5d:d1:66:
         1e:52:4c:28:ca:d7:90:05:df:be:7e:26:67:4f:79:8d:de:4b:
         6e:5c:cf:5f:5c:05:da:b0:fb:12:0f:41:23:3f:0a:fc:8d:02:
         09:f4:ce:5a:85:61:04:7b:8d:be:9c:76:5e:7d:66:f7:32:bd:
         9f:81:ea:64:77:96:c2:c4:f1:0f:cb:c4:26:eb:0b:54:24:9b:
         ba:2b:16:ea:b7:af:07:2c:36:4e:a2:96:e0:86:3c:38:3f:e8:
         ef:f3:e3:1a:a0:52:ed:df:5d:a7:12:40:89:0b:ff:77:ea:a5:
         b5:51:02:97:c8:89:01:ae:39:f6:31:3d:b6:c9:93:cb:58:e8:
         1a:0b:8d:6e:50:fe:91:74:ac:46:f7:41:76:64:6f:f5:5f:7b:
         12:85:8a:c8:a7:71:9d:e3:da:64:f4:10:12:4e:50:51:67:19:
         6b:55:fe:2d:bc:0d:1c:43:7f:90:15:35:a7:d5:7b:88:06:d0:
         24:07:b6:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fSgES9bEjs+xR4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
NGJkYWMzNmEtYjM0Zi00NGFkLWI3MzMtYjQzZTFkZWZjZGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/NyOndmb666z9nABfK+iGar5SvlaGwNr9/8
NZN28iH+uHbZACEOLzCkrZtr/ZbnaBmp+7lPYT4J5U3cYFxwdFyejUygyKhZjsVH
a5KlggXJQF05QmO4Hvr+hHoMz3s0baeBPHifjw2KUaemvn3CUyHCpBO2JlBrXwM2
Zh8r2A+ZnlcqiM0MIijlJvz78ovUGUMAxq1zsBNmTI3hQV8nUkmpKv/Y7y3m/lek
uomcnztl7CWCncLxomOcUh8Ae7yjpapUM0mNGik1W7Bcxl9TY4guDOUQnsFsTwp5
yhuIEz6BQXttGWyU5jA6inOzPExfrcIWNOeyJjCu9yfhdwnqCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDcqYHtb4pGkV88Aa0eBdiGfNDiHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGM3MDgwMmEtY2Q2Mi0z
MGQ2LTgwMjEtZmEyMjU4Zjc4ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQEKFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI02wlRvCPJapqrexCBtgO2pkBkCWO8KdEeHgQRbuDrY+UdP1lD7
9OZwBLMNsBSCH+lR0WDUo+mC4vdA0PT40bmUbcM4ll3RZh5STCjK15AF375+JmdP
eY3eS25cz19cBdqw+xIPQSM/CvyNAgn0zlqFYQR7jb6cdl59ZvcyvZ+B6mR3lsLE
8Q/LxCbrC1Qkm7orFuq3rwcsNk6iluCGPDg/6O/z4xqgUu3fXacSQIkL/3fqpbVR
ApfIiQGuOfYxPbbJk8tY6BoLjW5Q/pF0rEb3QXZkb/VfexKFisincZ3j2mT0EBJO
UFFnGWtV/i28DRxDf5AVNafVe4gG0CQHtjk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:20 2026 by rpki-client