Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/369e72e6-5397-340f-ab24-ce450e1cf697.roa
File:                     369e72e6-5397-340f-ab24-ce450e1cf697.roa (raw, json)
Hash identifier:          ys+fxlWKzWeKBpNhG1WuoQQcMMlP7qMej88RuS4JF4M=
Subject key identifier:   C1:37:20:B3:2D:11:D3:2F:0F:60:46:48:8B:01:61:00:DD:BA:59:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD7938BA631F0A19041900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/369e72e6-5397-340f-ab24-ce450e1cf697.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1001:d040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:79:38:ba:63:1f:0a:19:04:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=08eab102-04d7-46e2-9dd3-e65d916f51de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:10:f8:6f:35:6f:cd:c4:06:1b:0c:a7:2c:01:
                    a1:a1:43:02:fc:90:8c:5d:f9:93:9a:47:a0:6c:0c:
                    f2:8b:55:dd:ea:cf:54:3d:91:d5:e4:4d:8b:55:e4:
                    18:08:fa:48:fe:84:57:5d:76:e2:b8:34:e4:7f:c1:
                    ed:59:98:58:b1:fd:3c:f7:d9:c3:b0:e7:83:8c:e8:
                    34:82:91:aa:51:e4:64:d8:82:80:9f:26:80:d9:13:
                    dc:59:5a:3e:87:ba:b8:56:03:95:13:5f:2c:a5:e1:
                    1d:d4:a4:fb:ef:26:75:62:16:62:1b:d3:72:41:11:
                    52:65:41:86:ba:97:f2:74:e4:9a:7f:af:ef:96:af:
                    dc:3e:e1:d6:07:2d:7e:00:a2:8c:a2:13:a0:24:2c:
                    51:ad:f5:2f:1d:ee:50:a7:5f:57:8e:26:dc:30:36:
                    8c:54:4a:17:98:59:c1:f5:07:86:87:c8:a9:e3:f5:
                    d4:64:76:e1:fc:08:99:db:50:7c:a7:9a:ff:45:9c:
                    0c:11:29:ab:13:b6:99:a2:f5:d0:50:45:14:76:29:
                    81:eb:cb:4f:f1:61:ca:bc:f7:df:40:c1:c8:23:88:
                    73:8e:1a:be:0e:ae:1c:32:ce:71:84:26:5b:68:24:
                    b1:4f:56:25:a6:e8:1a:01:de:20:b9:3e:56:01:15:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:37:20:B3:2D:11:D3:2F:0F:60:46:48:8B:01:61:00:DD:BA:59:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/369e72e6-5397-340f-ab24-ce450e1cf697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:d040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a3:08:98:1e:82:4e:f5:fd:25:d0:23:c8:5a:07:2e:f9:b3:
         45:b4:e1:39:a2:da:61:76:f1:f9:37:3b:50:89:d5:ab:ed:75:
         db:72:19:4d:ca:9e:a0:34:6c:8a:b5:bc:00:09:c5:60:c2:d3:
         e2:d1:69:7b:64:e2:31:8a:0b:4b:22:5b:bd:3a:83:ac:8b:e3:
         1d:39:d8:2f:cd:6b:e4:04:eb:88:4b:8c:9e:57:f3:6d:a8:e7:
         a3:86:c5:eb:b0:5f:9b:ef:8c:88:3e:04:66:e3:cf:91:73:f9:
         2b:f2:34:67:a8:fd:6d:84:d0:60:96:74:f5:8f:cd:8d:6e:4b:
         c7:10:b2:09:df:46:8f:eb:0a:0c:54:6a:ed:ae:ba:ac:23:21:
         a9:9e:df:e5:00:f2:38:2c:81:b2:ea:0e:6a:8d:87:93:8d:2a:
         c6:bf:57:0e:46:c5:9e:48:f1:50:a3:8d:11:72:c6:68:90:a0:
         9f:14:84:2a:fc:cb:dc:7f:c9:b4:7b:63:32:2f:04:3e:4f:45:
         4c:07:62:05:7c:a5:13:02:bf:de:19:67:e0:6e:43:ae:30:97:
         d2:94:5d:bc:9c:e8:16:00:76:0b:25:b4:b0:cd:d9:3b:45:23:
         b4:9d:13:2b:b9:b8:81:08:39:3d:bc:97:36:fe:b8:9d:e3:5f:
         2d:80:c3:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8/rXk4umMfChkEGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
MDhlYWIxMDItMDRkNy00NmUyLTlkZDMtZTY1ZDkxNmY1MWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBD4bzVvzcQGGwynLAGhoUMC/JCMXfmTmkeg
bAzyi1Xd6s9UPZHV5E2LVeQYCPpI/oRXXXbiuDTkf8HtWZhYsf0899nDsOeDjOg0
gpGqUeRk2IKAnyaA2RPcWVo+h7q4VgOVE18speEd1KT77yZ1YhZiG9NyQRFSZUGG
upfydOSaf6/vlq/cPuHWBy1+AKKMohOgJCxRrfUvHe5Qp19XjibcMDaMVEoXmFnB
9QeGh8ip4/XUZHbh/AiZ21B8p5r/RZwMESmrE7aZovXQUEUUdimB68tP8WHKvPff
QMHII4hzjhq+Dq4cMs5xhCZbaCSxT1YlpugaAd4guT5WARVF5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFME3ILMtEdMvD2BGSIsBYQDdulmyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzY5ZTcyZTYtNTM5Ny0z
NDBmLWFiMjQtY2U0NTBlMWNmNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAdBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADejCJgegk71/SXQI8haBy75s0W04Tmi2mF28fk3O1CJ1avtddty
GU3KnqA0bIq1vAAJxWDC0+LRaXtk4jGKC0siW706g6yL4x052C/Na+QE64hLjJ5X
822o56OGxeuwX5vvjIg+BGbjz5Fz+SvyNGeo/W2E0GCWdPWPzY1uS8cQsgnfRo/r
CgxUau2uuqwjIame3+UA8jgsgbLqDmqNh5ONKsa/Vw5GxZ5I8VCjjRFyxmiQoJ8U
hCr8y9x/ybR7YzIvBD5PRUwHYgV8pRMCv94ZZ+BuQ64wl9KUXbyc6BYAdgsltLDN
2TtFI7SdEyu5uIEIOT28lzb+uJ3jXy2Aw+Y=
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:41:53 2026 by rpki-client