Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1af0a8e6-a15b-3e1f-a222-c0faa9eedeb7.roa
File:                     1af0a8e6-a15b-3e1f-a222-c0faa9eedeb7.roa (raw, json)
Hash identifier:          fUOONWDKY0cIdslqHFBVfDXb+fyXEpYekmv/959cRZI=
Subject key identifier:   1D:D9:31:86:2F:05:5E:45:09:57:EE:56:AE:CA:DA:55:B0:F5:93:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD57053C4BEDC8D97F46E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1af0a8e6-a15b-3e1f-a222-c0faa9eedeb7.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1007:b080::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:57:05:3c:4b:ed:c8:d9:7f:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=90d0d755-76e9-483c-80c5-241d588b5105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:89:d8:c6:e2:d2:44:7d:ee:39:27:ca:1c:
                    1a:b6:7b:27:0d:5f:8e:a1:b6:c8:5e:66:4e:2a:1d:
                    64:f3:1d:24:99:3a:82:2f:68:c6:88:da:e8:00:8f:
                    71:96:db:92:69:b3:20:d9:f1:d1:ac:b5:12:d6:e7:
                    ef:67:2c:b8:05:44:f9:78:00:0b:b5:b2:4a:ad:cf:
                    e9:0e:fc:a1:b5:f2:4b:c5:14:4e:b8:00:82:62:19:
                    f4:50:53:9f:0f:f9:23:bb:94:4d:3b:3f:67:eb:9e:
                    68:94:2a:23:e2:b4:9d:d5:e4:34:96:db:21:eb:11:
                    6b:d6:fe:af:b1:34:df:06:9b:02:ba:01:e5:b5:91:
                    35:2b:2e:6d:e7:e7:f3:a8:13:cb:c3:29:82:8d:5b:
                    dc:84:a8:09:61:b0:74:06:de:41:8c:8f:38:a8:ab:
                    09:db:0d:80:0f:ba:79:ab:f6:1f:d6:54:0c:86:1b:
                    75:81:63:81:2f:2f:c6:ff:72:04:1e:02:bf:2b:75:
                    11:86:83:d2:08:a3:8f:91:78:0c:86:a5:55:96:79:
                    18:81:2b:ac:bb:ad:fe:dd:86:07:39:a7:1b:fa:82:
                    1c:fa:94:31:fa:14:84:2d:14:6f:23:51:7c:7e:24:
                    c0:15:ca:ba:8f:e7:f1:2d:93:7b:9a:c1:d9:cb:7c:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D9:31:86:2F:05:5E:45:09:57:EE:56:AE:CA:DA:55:B0:F5:93:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1af0a8e6-a15b-3e1f-a222-c0faa9eedeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:fc:7d:0e:f5:1d:96:69:83:41:30:c8:f0:87:87:38:0c:
         e2:1b:85:8d:ed:88:1f:9e:63:d9:c1:12:ed:aa:ff:21:6d:f9:
         31:50:87:0d:11:b5:0a:4a:fc:f0:c2:38:39:d6:85:8a:f3:a6:
         0a:58:86:b5:23:12:59:a2:c4:8a:69:fd:ca:7c:5a:c4:80:3c:
         b9:aa:83:8b:a4:d4:6b:a9:68:c5:4c:18:01:65:69:b9:55:07:
         0d:03:62:24:6a:c8:76:fd:5b:a2:01:5d:fd:b2:e4:3d:2a:15:
         5b:ab:84:cc:4f:29:92:7a:92:b8:a7:ac:9c:5f:68:9d:ef:f9:
         01:22:29:c7:a6:a0:81:a3:2b:88:9a:ad:5c:ca:ad:b5:0f:63:
         f0:77:9a:a0:a5:69:b8:a7:e0:83:32:02:70:d8:e8:bf:42:32:
         b1:74:d0:94:70:59:e3:b9:61:65:8a:0e:f4:69:21:1e:f6:4a:
         4b:b6:b3:30:54:b3:35:f6:f7:ae:96:a7:ad:6f:f4:e4:df:6a:
         c6:be:a0:2f:79:3d:55:12:66:7a:6d:81:d1:34:3a:88:26:b7:
         e0:1c:81:d5:11:6a:11:2f:30:82:20:ac:c7:31:3a:f4:43:43:
         f3:2e:d2:67:4a:7a:3d:05:2b:04:7c:bb:61:2e:eb:b5:cc:94:
         18:48:46:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8/rVcFPEvtyNl/RuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
OTBkMGQ3NTUtNzZlOS00ODNjLTgwYzUtMjQxZDU4OGI1MTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkeJ2Mbi0kR97jknyhwatnsnDV+OobbIXmZO
Kh1k8x0kmTqCL2jGiNroAI9xltuSabMg2fHRrLUS1ufvZyy4BUT5eAALtbJKrc/p
DvyhtfJLxRROuACCYhn0UFOfD/kju5RNOz9n655olCoj4rSd1eQ0ltsh6xFr1v6v
sTTfBpsCugHltZE1Ky5t5+fzqBPLwymCjVvchKgJYbB0Bt5BjI84qKsJ2w2AD7p5
q/Yf1lQMhht1gWOBLy/G/3IEHgK/K3URhoPSCKOPkXgMhqVVlnkYgSusu63+3YYH
Oacb+oIc+pQx+hSELRRvI1F8fiTAFcq6j+fxLZN7msHZy3woMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB3ZMYYvBV5FCVfuVq7K2lWw9ZO0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWFmMGE4ZTYtYTE1Yi0z
ZTFmLWEyMjItYzBmYWE5ZWVkZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQB7CA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ8H/H0O9R2WaYNBMMjwh4c4DOIbhY3tiB+eY9nBEu2q/yFt+TFQ
hw0RtQpK/PDCODnWhYrzpgpYhrUjElmixIpp/cp8WsSAPLmqg4uk1GupaMVMGAFl
ablVBw0DYiRqyHb9W6IBXf2y5D0qFVurhMxPKZJ6krinrJxfaJ3v+QEiKcemoIGj
K4iarVzKrbUPY/B3mqClabin4IMyAnDY6L9CMrF00JRwWeO5YWWKDvRpIR72Sku2
szBUszX2966Wp61v9OTfasa+oC95PVUSZnptgdE0Oogmt+AcgdURahEvMIIgrMcx
OvRDQ/Mu0mdKej0FKwR8u2Eu67XMlBhIRhQ=
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:06:55 2026 by rpki-client