Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3843f196-4a39-33b1-a664-61e0f12ecf66.roa
File:                     3843f196-4a39-33b1-a664-61e0f12ecf66.roa (raw, json)
Hash identifier:          7qEuTa9JDqW2dPdOST5JyYbGWQ/r2Iva2GhXZLvoBp4=
Subject key identifier:   40:36:C3:E3:0B:92:0A:25:F2:D7:62:4C:2B:04:F8:D2:CC:3E:61:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AAAFA4E65E2ED556FC3C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3843f196-4a39-33b1-a664-61e0f12ecf66.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1004:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:aa:fa:4e:65:e2:ed:55:6f:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=04145605-dc60-4070-986b-281da0e8e3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:bf:1f:da:ec:52:ab:32:14:46:5a:0b:a9:
                    ac:36:1d:6c:ee:6c:43:ec:b8:7e:f3:1a:bf:b4:57:
                    e7:f4:b8:61:26:ca:98:eb:7f:a4:a0:d9:9f:16:4c:
                    2a:1a:c1:74:7f:f0:d3:0a:57:09:f8:09:bf:91:2c:
                    e4:59:c7:3a:f5:16:13:d5:16:22:a8:77:70:15:0c:
                    f0:73:66:95:aa:6f:2d:0b:ab:9a:82:ce:2e:69:b0:
                    ad:f8:5c:f2:d3:55:4f:b4:73:2c:1b:8a:9e:61:d5:
                    99:0d:5c:a8:27:4d:9e:26:f0:22:95:a2:05:d5:aa:
                    2f:fe:36:d4:e5:39:52:2e:44:07:01:84:09:f4:c1:
                    e0:a4:d6:f2:08:af:a7:79:05:64:e8:f6:da:f0:28:
                    08:54:a5:0c:c0:c4:65:d6:7d:f1:0e:4e:86:d2:8e:
                    43:3c:a5:5e:ef:4f:fd:76:e5:93:39:f1:8b:3b:5c:
                    51:e0:d3:7a:0e:a6:a1:76:33:74:eb:63:b4:5a:57:
                    07:cb:05:c4:d6:69:23:c5:10:50:4e:23:62:82:3e:
                    0b:e2:bc:38:50:be:dd:de:dd:46:5d:0e:3a:ec:19:
                    c3:91:b6:76:03:71:7a:80:fb:ed:71:f8:2e:81:c0:
                    e3:92:a9:02:9c:7e:60:89:dd:a0:63:90:9b:42:d2:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:36:C3:E3:0B:92:0A:25:F2:D7:62:4C:2B:04:F8:D2:CC:3E:61:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3843f196-4a39-33b1-a664-61e0f12ecf66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:af:c8:36:b7:fa:8f:d4:e5:60:be:51:ce:59:18:90:e2:
         5b:4f:85:cc:5b:ef:c3:ce:30:6b:87:17:71:26:33:28:34:98:
         74:6d:53:38:b0:de:69:58:b9:28:9a:21:54:d8:3e:94:07:f9:
         70:22:46:55:d9:8c:06:0f:11:84:ea:55:e0:ed:3a:10:66:1d:
         a7:a5:e1:00:34:1f:0a:28:5c:c8:14:14:fd:9b:8d:48:4c:ac:
         d9:84:fd:23:b5:5f:6a:b2:92:4e:a9:3f:2e:25:03:19:59:1c:
         c8:2d:46:a9:8e:f8:ea:a1:8c:b9:07:3d:f3:7f:b1:d5:fd:4f:
         f8:41:d2:cf:2e:b4:f9:13:36:b9:68:19:d6:a5:33:82:e6:aa:
         4a:e3:53:6e:01:6f:a0:7e:11:58:b9:87:11:75:b4:36:4f:d4:
         fa:55:ad:99:40:6b:bc:aa:34:7d:06:e4:dc:6b:d7:36:55:62:
         f5:63:9c:c5:8a:35:64:e7:d4:4f:cb:e2:ab:21:e2:27:da:ec:
         0d:58:75:27:0e:f7:d7:84:1c:63:18:0a:8e:ef:ac:b5:0a:1f:
         e5:ae:ee:46:39:4b:87:02:6b:1a:26:24:c7:82:f8:7d:72:ab:
         57:49:ea:49:f2:2f:12:c5:68:4e:83:73:4a:45:c1:ac:e9:39:
         d9:36:32:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6dSqr6TmXi7VVvw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
MDQxNDU2MDUtZGM2MC00MDcwLTk4NmItMjgxZGEwZThlM2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphS/H9rsUqsyFEZaC6msNh1s7mxD7Lh+8xq/
tFfn9LhhJsqY63+koNmfFkwqGsF0f/DTClcJ+Am/kSzkWcc69RYT1RYiqHdwFQzw
c2aVqm8tC6uags4uabCt+Fzy01VPtHMsG4qeYdWZDVyoJ02eJvAilaIF1aov/jbU
5TlSLkQHAYQJ9MHgpNbyCK+neQVk6Pba8CgIVKUMwMRl1n3xDk6G0o5DPKVe70/9
duWTOfGLO1xR4NN6DqahdjN062O0WlcHywXE1mkjxRBQTiNigj4L4rw4UL7d3t1G
XQ467BnDkbZ2A3F6gPvtcfgugcDjkqkCnH5gid2gY5CbQtL3LwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEA2w+MLkgol8tdiTCsE+NLMPmGLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzg0M2YxOTYtNGEzOS0z
M2IxLWE2NjQtNjFlMGYxMmVjZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQBLEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD+Wr8g2t/qP1OVgvlHOWRiQ4ltPhcxb78POMGuHF3EmMyg0mHRt
Uziw3mlYuSiaIVTYPpQH+XAiRlXZjAYPEYTqVeDtOhBmHael4QA0HwooXMgUFP2b
jUhMrNmE/SO1X2qykk6pPy4lAxlZHMgtRqmO+OqhjLkHPfN/sdX9T/hB0s8utPkT
NrloGdalM4LmqkrjU24Bb6B+EVi5hxF1tDZP1PpVrZlAa7yqNH0G5Nxr1zZVYvVj
nMWKNWTn1E/L4qsh4ifa7A1YdScO99eEHGMYCo7vrLUKH+Wu7kY5S4cCaxomJMeC
+H1yq1dJ6knyLxLFaE6Dc0pFwazpOdk2MgQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:03:49 2026 by rpki-client