Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ce47b01-f405-30a8-9f81-8670264cc54a.roa
File:                     2ce47b01-f405-30a8-9f81-8670264cc54a.roa (raw, json)
Hash identifier:          eqgkL/k6vYrXLwKse95Mf8XKT3oLySbfZ0BG0yehsV0=
Subject key identifier:   81:B2:68:8C:6A:E7:71:22:90:83:30:3B:C1:05:08:A2:7A:D2:17:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D021796F3D3CE1F60AFF177C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ce47b01-f405-30a8-9f81-8670264cc54a.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        2600:1003:a110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:96:f3:d3:ce:1f:60:af:f1:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=9132daab-f2cb-44df-8816-cdefbd19718b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:af:3d:79:1e:4e:e3:4a:5c:ff:a0:f5:7f:68:
                    21:40:2d:fc:3f:75:2d:12:a2:a5:78:ae:be:17:63:
                    7b:91:97:30:14:66:c4:7e:92:cc:7e:c4:c3:fa:b3:
                    dc:c0:92:01:bd:88:1f:a4:06:92:51:bb:4c:c6:7f:
                    56:f3:10:e4:6f:56:9f:c0:b8:ce:92:01:34:9b:fd:
                    ef:b9:e2:c9:51:99:17:2b:b6:15:bf:eb:68:a4:70:
                    8c:84:02:4c:2a:33:16:8d:50:91:91:ea:83:a1:2f:
                    91:69:68:2a:65:ea:1c:5d:6d:13:14:03:2d:8c:ed:
                    57:0d:ac:0e:54:99:c4:43:31:4e:24:65:9b:f7:64:
                    64:fa:c3:ef:60:3e:b2:25:e8:14:dd:24:7f:ea:fe:
                    e9:f6:de:41:a4:62:2d:cd:60:f1:3e:c2:8c:89:7a:
                    51:75:d6:b8:9d:62:c8:30:92:e9:37:6b:c2:1c:0e:
                    69:d9:d6:cc:4c:69:f6:01:d0:85:dd:7c:09:75:f1:
                    fe:4f:c5:03:a8:62:5f:bb:c2:f7:ea:d0:93:a2:18:
                    9d:9b:8c:83:01:31:7f:11:6c:ed:d6:76:85:df:89:
                    22:8d:df:f2:2a:59:40:ff:7c:d2:92:08:f9:ee:a6:
                    d9:f4:95:6a:c6:c6:86:a6:7c:8e:22:19:e4:39:aa:
                    15:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B2:68:8C:6A:E7:71:22:90:83:30:3B:C1:05:08:A2:7A:D2:17:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ce47b01-f405-30a8-9f81-8670264cc54a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d6:dc:5f:f9:3c:b5:19:af:d9:66:00:9f:ba:3d:db:12:48:
         af:84:5c:35:af:f0:e6:85:1d:79:2e:72:96:dd:9c:f4:56:bf:
         37:1b:ec:dc:f3:b3:86:81:00:d3:03:07:ce:b9:16:63:83:05:
         e4:1c:9b:a9:bc:31:f9:53:86:7f:d3:85:ee:99:56:94:f3:4f:
         b9:f5:42:49:75:da:73:ba:41:04:c1:d0:d5:7a:88:20:da:34:
         cf:b4:3f:7b:0b:30:e4:36:99:e0:89:57:3b:4c:76:1b:ce:85:
         15:23:c0:2e:2e:1c:29:7f:7c:a4:98:f8:b6:5e:83:1a:c3:48:
         bf:c3:7f:20:90:fd:94:bb:bf:85:42:51:09:22:29:4d:9d:56:
         e0:5d:9e:90:d5:f3:2e:2c:d9:06:4a:fc:37:d9:fb:22:fc:5b:
         c9:13:1c:4d:e8:94:94:66:80:6a:79:8f:a0:4b:72:2d:d4:97:
         e0:c7:f4:0f:7e:45:2d:f9:e1:19:fe:1e:dd:f2:b9:d1:83:86:
         77:22:e0:ce:a8:65:55:92:1f:f2:c2:1b:f6:9a:20:11:68:b7:
         43:c5:d5:ca:03:f7:d6:6c:97:2f:4e:95:c0:c0:8e:0d:bd:9f:
         a7:c3:b7:a9:ba:0f:25:09:08:c2:42:e9:da:28:b7:ff:ea:b4:
         bc:f0:52:c3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0CF5bz084fYK/xd8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
OTEzMmRhYWItZjJjYi00NGRmLTg4MTYtY2RlZmJkMTk3MThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx689eR5O40pc/6D1f2ghQC38P3UtEqKleK6+
F2N7kZcwFGbEfpLMfsTD+rPcwJIBvYgfpAaSUbtMxn9W8xDkb1afwLjOkgE0m/3v
ueLJUZkXK7YVv+topHCMhAJMKjMWjVCRkeqDoS+RaWgqZeocXW0TFAMtjO1XDawO
VJnEQzFOJGWb92Rk+sPvYD6yJegU3SR/6v7p9t5BpGItzWDxPsKMiXpRdda4nWLI
MJLpN2vCHA5p2dbMTGn2AdCF3XwJdfH+T8UDqGJfu8L36tCTohidm4yDATF/EWzt
1naF34kijd/yKllA/3zSkgj57qbZ9JVqxsaGpnyOIhnkOaoVtQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIGyaIxq53EikIMwO8EFCKJ60heSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmNlNDdiMDEtZjQwNS0z
MGE4LTlmODEtODY3MDI2NGNjNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQA6EQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABvW3F/5PLUZr9lmAJ+6PdsSSK+EXDWv8OaFHXkucpbdnPRWvzcb
7Nzzs4aBANMDB865FmODBeQcm6m8MflThn/The6ZVpTzT7n1Qkl12nO6QQTB0NV6
iCDaNM+0P3sLMOQ2meCJVztMdhvOhRUjwC4uHCl/fKSY+LZegxrDSL/DfyCQ/ZS7
v4VCUQkiKU2dVuBdnpDV8y4s2QZK/DfZ+yL8W8kTHE3olJRmgGp5j6BLci3Ul+DH
9A9+RS354Rn+Ht3yudGDhnci4M6oZVWSH/LCG/aaIBFot0PF1coD99Zsly9OlcDA
jg29n6fDt6m6DyUJCMJC6doot//qtLzwUsM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:12 2026 by rpki-client