Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffb544ce-2b16-3b57-8af8-5a923ab7a1d4.roa
File:                     ffb544ce-2b16-3b57-8af8-5a923ab7a1d4.roa (raw, json)
Hash identifier:          1U5secAWTeCLrU9x6OZyDTNJJ3v/MyVX8LGi+Gh+P7M=
Subject key identifier:   48:09:1C:0D:0F:55:BB:1F:6A:09:F3:EC:7A:25:6B:73:5A:17:E1:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05B14FD072119172410AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffb544ce-2b16-3b57-8af8-5a923ab7a1d4.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1005:a100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:b1:4f:d0:72:11:91:72:41:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=07135ae7-82c5-446f-9d71-7710d2683430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:a4:5f:71:2e:00:a0:d1:f5:0d:59:36:36:
                    84:f3:0e:16:b9:be:cb:db:e8:ee:94:e4:f6:53:3f:
                    fe:c8:06:6c:e5:65:6c:e9:bc:c2:c9:9e:85:4c:81:
                    20:26:01:82:db:27:09:13:7d:0c:5f:df:ae:f3:89:
                    44:af:64:fa:41:ff:df:46:3b:c4:77:5f:8b:eb:76:
                    70:8d:1e:f3:51:cf:cf:4b:75:9a:07:9b:fe:7d:f5:
                    cc:97:d8:57:42:ff:1a:78:09:31:88:99:6d:69:1a:
                    58:50:a7:99:a0:73:ee:87:2d:96:24:f3:6d:01:5d:
                    d9:04:99:38:7e:14:cb:37:2b:a9:5d:8c:59:bf:66:
                    9c:c2:3c:1c:6c:6f:bf:5a:d9:e9:8f:e7:48:5b:e7:
                    58:71:72:c9:4f:9d:ed:46:bc:f3:e8:11:7f:3f:cd:
                    da:cd:68:58:29:63:bd:70:0c:24:81:8a:9c:3d:d3:
                    95:87:31:37:9f:41:6f:1c:3f:20:83:2a:ee:1a:e9:
                    03:33:f1:d5:f7:c9:34:65:50:72:ea:26:36:e5:80:
                    72:c4:6a:4b:70:c2:88:6e:05:fc:9a:a2:b6:52:f0:
                    66:83:89:18:07:f8:bf:30:30:eb:b0:eb:fe:56:eb:
                    ac:a4:53:54:70:7d:f7:0f:d6:bb:52:1d:ba:0d:ce:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:09:1C:0D:0F:55:BB:1F:6A:09:F3:EC:7A:25:6B:73:5A:17:E1:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffb544ce-2b16-3b57-8af8-5a923ab7a1d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:08:5a:6b:40:a4:7d:2b:fa:0b:c4:b7:46:92:2d:11:20:cc:
         bb:42:ce:f6:b7:48:5b:ff:7b:a3:de:8e:f5:ae:0b:bc:b1:bd:
         96:91:31:7d:6c:e2:b6:cd:bb:da:c7:fe:d9:47:a9:07:ac:ec:
         a8:4f:10:89:af:74:f4:12:22:90:2b:63:01:c0:c8:11:e4:21:
         78:ab:9e:35:40:62:37:1d:d3:c2:c2:ac:81:b6:1a:f2:16:89:
         6f:e6:de:d3:c6:4d:12:50:0e:a2:3e:38:23:b9:2f:b7:f1:48:
         bd:39:47:dc:9b:b2:6f:af:6c:0e:6f:90:b9:55:4e:fa:5c:b9:
         17:57:b3:cf:c1:cf:de:d0:e9:09:d8:9d:ac:30:dd:90:ee:81:
         74:85:a2:e8:6c:6a:5f:57:a2:6e:44:c3:bc:f2:d2:d3:45:5c:
         80:84:a0:28:85:13:29:8b:e1:8e:12:cf:15:95:d3:4b:61:48:
         fd:8f:35:fd:99:1e:24:ab:43:4b:6a:57:f5:c3:27:d6:e6:a9:
         9a:03:77:66:fa:e6:a6:29:c4:26:9e:4d:9c:ab:f1:0b:25:8a:
         47:33:15:56:75:25:25:76:74:ff:66:9a:72:6e:ab:92:a3:7b:
         fa:c3:c1:83:be:ba:c1:33:9e:5d:58:21:d1:25:a6:2b:cc:4c:
         5e:23:65:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE29BbFP0HIRkXJBCsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
MDcxMzVhZTctODJjNS00NDZmLTlkNzEtNzcxMGQyNjgzNDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA+kX3EuAKDR9Q1ZNjaE8w4Wub7L2+julOT2
Uz/+yAZs5WVs6bzCyZ6FTIEgJgGC2ycJE30MX9+u84lEr2T6Qf/fRjvEd1+L63Zw
jR7zUc/PS3WaB5v+ffXMl9hXQv8aeAkxiJltaRpYUKeZoHPuhy2WJPNtAV3ZBJk4
fhTLNyupXYxZv2acwjwcbG+/Wtnpj+dIW+dYcXLJT53tRrzz6BF/P83azWhYKWO9
cAwkgYqcPdOVhzE3n0FvHD8ggyruGukDM/HV98k0ZVBy6iY25YByxGpLcMKIbgX8
mqK2UvBmg4kYB/i/MDDrsOv+VuuspFNUcH33D9a7Uh26Dc4SawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEgJHA0PVbsfagnz7Hola3NaF+HhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmZiNTQ0Y2UtMmIxNi0z
YjU3LThhZjgtNWE5MjNhYjdhMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBaEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIoIWmtApH0r+gvEt0aSLREgzLtCzva3SFv/e6PejvWuC7yxvZaR
MX1s4rbNu9rH/tlHqQes7KhPEImvdPQSIpArYwHAyBHkIXirnjVAYjcd08LCrIG2
GvIWiW/m3tPGTRJQDqI+OCO5L7fxSL05R9ybsm+vbA5vkLlVTvpcuRdXs8/Bz97Q
6QnYnaww3ZDugXSFouhsal9Xom5Ew7zy0tNFXICEoCiFEymL4Y4SzxWV00thSP2P
Nf2ZHiSrQ0tqV/XDJ9bmqZoDd2b65qYpxCaeTZyr8QslikczFVZ1JSV2dP9mmnJu
q5Kje/rDwYO+usEznl1YIdElpivMTF4jZeo=
-----END CERTIFICATE-----
Generated at Wed May 13 12:14:41 2026 by rpki-client