Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e538c15-bbc9-3483-95a3-eaca0df99f43.roa
File:                     3e538c15-bbc9-3483-95a3-eaca0df99f43.roa (raw, json)
Hash identifier:          tZcNSD8g27s8xNU3ZOCxJ0Z7dhJ6wzA5qoJTP1/w8/0=
Subject key identifier:   EF:33:21:EA:8C:62:33:F3:D7:7E:4A:81:00:3F:41:3E:B8:0C:C7:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D417572120EF617F33C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e538c15-bbc9-3483-95a3-eaca0df99f43.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100c:a221::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:41:75:72:12:0e:f6:17:f3:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=073aed48-2b15-40f3-bc27-9010f2a686a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:25:b1:d9:2f:ab:67:cf:5c:45:b6:d0:9d:4c:
                    ab:f2:0e:a9:ad:80:c9:f4:a5:ab:f3:e2:b6:e2:2d:
                    0d:c1:4d:bb:19:57:c9:fb:c9:67:65:d6:5f:a1:d3:
                    7b:5e:29:18:eb:0c:d2:da:8e:c2:0f:2a:ae:5e:65:
                    ec:68:bf:47:46:df:42:78:9f:3f:47:93:66:46:e2:
                    cf:22:3d:e9:46:b7:6c:50:57:88:a2:5c:1a:58:57:
                    98:9a:7f:c9:54:a8:1e:fe:d8:cb:94:00:b2:d1:0a:
                    2b:99:97:33:a4:9a:8f:02:19:f4:8b:56:b3:c8:0e:
                    46:9c:ab:9d:3c:eb:ca:53:44:56:02:e3:b7:f2:8c:
                    cf:ff:5e:f5:67:e8:95:3a:d4:78:0b:e4:37:be:98:
                    fb:8a:c3:e1:23:1e:2c:68:3f:57:56:4f:cd:16:7b:
                    36:4e:de:96:db:0d:a7:04:c3:c8:ec:e2:9c:2e:df:
                    a8:a0:b0:18:b4:90:e3:7d:a7:d7:0f:1a:86:4d:7f:
                    dd:05:39:71:4a:71:10:dd:ed:f1:4d:16:cf:f0:53:
                    90:c1:af:53:3a:fb:b5:47:f3:a9:62:00:35:6d:d3:
                    a3:da:8d:45:09:f6:b5:27:71:45:09:86:31:56:68:
                    17:02:88:db:3c:cd:3a:02:a3:b9:b6:21:55:25:f7:
                    71:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:33:21:EA:8C:62:33:F3:D7:7E:4A:81:00:3F:41:3E:B8:0C:C7:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e538c15-bbc9-3483-95a3-eaca0df99f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a221::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:6d:50:4b:e1:c8:c4:25:4f:60:ce:d2:cd:46:9a:14:6c:3e:
         53:28:4c:c8:fc:d6:b3:fb:54:1d:f8:a8:34:da:6f:7f:62:47:
         9c:f5:f8:73:11:ac:cc:e6:9d:50:4d:a8:27:77:04:01:78:76:
         9e:b2:9d:9f:90:d9:56:d6:91:af:f4:6b:7c:48:26:5a:cd:95:
         3c:f1:60:9a:fb:de:ef:07:b6:9b:08:99:07:53:54:5a:68:ff:
         42:ac:b8:62:fe:e7:25:ff:7c:0f:15:c5:7b:41:0a:75:7a:60:
         45:77:0e:a6:c5:7c:01:45:1f:5a:7a:d8:15:88:67:4c:54:f3:
         18:f3:45:61:5e:5f:b9:9e:95:ac:bf:85:93:c6:b7:94:e9:a9:
         a4:ba:99:24:a8:be:24:8a:77:cb:31:02:5e:a3:89:54:8f:e7:
         31:a2:a3:cd:32:15:94:09:19:81:9e:9e:33:ef:c6:4e:40:80:
         42:1e:e4:92:81:af:f6:fe:d8:57:b6:bb:e4:f5:47:5b:0a:44:
         58:f9:29:e5:80:29:a1:0f:1e:85:20:f6:30:de:45:6a:2b:c6:
         ee:35:d4:97:0f:d8:f3:17:ee:cc:f4:a3:47:c9:b2:40:fe:f9:
         0c:cb:e7:9f:7c:ac:14:31:42:b2:8d:6f:b0:86:a7:a8:dc:47:
         57:17:71:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0DfUF1chIO9hfzPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MDczYWVkNDgtMmIxNS00MGYzLWJjMjctOTAxMGYyYTY4NmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yWx2S+rZ89cRbbQnUyr8g6prYDJ9KWr8+K2
4i0NwU27GVfJ+8lnZdZfodN7XikY6wzS2o7CDyquXmXsaL9HRt9CeJ8/R5NmRuLP
Ij3pRrdsUFeIolwaWFeYmn/JVKge/tjLlACy0QormZczpJqPAhn0i1azyA5GnKud
POvKU0RWAuO38ozP/171Z+iVOtR4C+Q3vpj7isPhIx4saD9XVk/NFns2Tt6W2w2n
BMPI7OKcLt+ooLAYtJDjfafXDxqGTX/dBTlxSnEQ3e3xTRbP8FOQwa9TOvu1R/Op
YgA1bdOj2o1FCfa1J3FFCYYxVmgXAojbPM06AqO5tiFVJfdxswIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO8zIeqMYjPz135KgQA/QT64DMeKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2U1MzhjMTUtYmJjOS0z
NDgzLTk1YTMtZWFjYTBkZjk5ZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDKIh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIBtUEvhyMQlT2DO0s1GmhRsPlMoTMj81rP7VB34qDTab39iR5z1
+HMRrMzmnVBNqCd3BAF4dp6ynZ+Q2VbWka/0a3xIJlrNlTzxYJr73u8HtpsImQdT
VFpo/0KsuGL+5yX/fA8VxXtBCnV6YEV3DqbFfAFFH1p62BWIZ0xU8xjzRWFeX7me
lay/hZPGt5TpqaS6mSSoviSKd8sxAl6jiVSP5zGio80yFZQJGYGenjPvxk5AgEIe
5JKBr/b+2Fe2u+T1R1sKRFj5KeWAKaEPHoUg9jDeRWorxu411JcP2PMX7sz0o0fJ
skD++QzL5598rBQxQrKNb7CGp6jcR1cXcSw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:52 2026 by rpki-client