Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/499d94e6-2b93-3e9d-a331-08ecc036792f.roa
File:                     499d94e6-2b93-3e9d-a331-08ecc036792f.roa (raw, json)
Hash identifier:          LTm9UgAH1Nh6YNBzQ4S/CUTogAYB5PK5kft2QsFjqXk=
Subject key identifier:   2F:70:E7:82:78:08:9C:41:48:47:76:6A:FD:26:B6:06:3F:C5:6F:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A843C06D15D158EE951A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/499d94e6-2b93-3e9d-a331-08ecc036792f.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1005:a022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:84:3c:06:d1:5d:15:8e:e9:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=b0ded2b3-3103-4e5f-a70f-3a1b8d18b8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:47:9a:62:f6:5b:02:a4:66:a9:bc:23:ec:75:
                    ff:57:0b:6d:f7:14:8c:e2:e0:d1:7a:fc:cb:9b:b6:
                    74:4b:1a:a7:19:f1:27:95:0f:13:42:c6:f0:d9:0b:
                    5a:83:a4:b7:fe:e8:4c:81:4c:41:61:7c:24:5f:0a:
                    de:55:f9:45:5f:a3:37:7a:5b:db:b3:a6:c4:68:f8:
                    60:8d:07:a8:fc:47:60:0c:36:d2:9b:d9:b1:52:b8:
                    8b:09:47:4c:c4:8d:f1:8d:55:f2:30:20:0f:57:29:
                    78:67:4e:1c:8e:01:ee:58:4e:8c:1d:a8:4f:4a:10:
                    48:0c:7c:c1:a3:cd:a5:d8:20:2a:ba:2a:1f:4c:4c:
                    40:69:f9:b1:49:a3:83:90:d5:b5:0b:db:c9:6b:4b:
                    f7:05:58:31:f2:8d:b1:c2:6f:f2:fd:00:11:6e:e3:
                    c9:73:da:fc:af:11:88:d1:91:34:7d:32:50:2e:49:
                    c5:b1:1e:1b:03:3f:68:63:08:81:fe:ac:c1:22:5a:
                    e3:50:cb:fb:c8:2b:12:2a:7c:aa:a9:a3:6d:d3:84:
                    49:ba:a0:d3:1a:9e:ba:05:37:58:9e:f4:72:e0:18:
                    a3:32:78:49:9a:d7:ea:18:66:e0:a1:8c:3a:d4:7d:
                    32:0a:ac:30:81:9c:b5:77:61:1a:a6:2b:fb:d3:2d:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:70:E7:82:78:08:9C:41:48:47:76:6A:FD:26:B6:06:3F:C5:6F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/499d94e6-2b93-3e9d-a331-08ecc036792f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:30:71:5a:5f:63:d5:aa:73:47:e6:ed:4c:0c:2f:e6:50:79:
         ad:2d:eb:07:ea:db:9c:7f:8d:65:35:87:4d:53:4a:02:3a:42:
         ed:34:d2:8a:0c:01:83:3d:b9:93:a4:ee:2c:da:99:09:56:9c:
         42:8f:99:5b:61:a9:f2:e2:04:ca:87:ef:27:80:e3:0a:40:74:
         7c:ed:67:5d:29:15:d7:cb:83:51:98:10:4e:eb:b0:6d:9d:fb:
         c5:da:e6:27:28:00:8d:9f:a2:c4:a4:85:62:b5:32:64:2e:11:
         37:2c:5f:f9:0e:de:2f:8a:74:32:9c:cc:8b:9a:c5:ea:4a:13:
         9a:49:ad:71:73:41:4b:1e:6c:dd:92:42:89:a3:7f:2d:8c:52:
         9f:ae:22:42:eb:e7:bf:69:2c:65:a4:cc:a9:58:82:71:f6:db:
         6a:71:a3:0f:e3:9e:c6:31:8a:00:dd:10:85:eb:bc:dc:e4:e2:
         f3:94:bc:57:82:02:fe:98:d6:6b:dc:86:ab:d7:a4:bb:50:95:
         63:cc:2a:2b:14:60:94:76:b0:8f:66:b6:eb:a8:09:53:0e:2a:
         4b:c2:e9:3a:aa:96:e2:38:98:fc:3d:60:ec:5e:fc:83:52:54:
         f2:d1:87:47:a4:7d:da:1c:cc:22:1e:b2:9a:ab:af:0c:3b:a9:
         4e:e9:db:64
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6dSoQ8BtFdFY7pUaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
YjBkZWQyYjMtMzEwMy00ZTVmLWE3MGYtM2ExYjhkMThiOGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUeaYvZbAqRmqbwj7HX/Vwtt9xSM4uDRevzL
m7Z0SxqnGfEnlQ8TQsbw2Qtag6S3/uhMgUxBYXwkXwreVflFX6M3elvbs6bEaPhg
jQeo/EdgDDbSm9mxUriLCUdMxI3xjVXyMCAPVyl4Z04cjgHuWE6MHahPShBIDHzB
o82l2CAquiofTExAafmxSaODkNW1C9vJa0v3BVgx8o2xwm/y/QARbuPJc9r8rxGI
0ZE0fTJQLknFsR4bAz9oYwiB/qzBIlrjUMv7yCsSKnyqqaNt04RJuqDTGp66BTdY
nvRy4BijMnhJmtfqGGbgoYw61H0yCqwwgZy1d2Eapiv70y0HSwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC9w54J4CJxBSEd2av0mtgY/xW+JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDk5ZDk0ZTYtMmI5My0z
ZTlkLWEzMzEtMDhlY2MwMzY3OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBaAi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKMwcVpfY9Wqc0fm7UwML+ZQea0t6wfq25x/jWU1h01TSgI6Qu00
0ooMAYM9uZOk7izamQlWnEKPmVthqfLiBMqH7yeA4wpAdHztZ10pFdfLg1GYEE7r
sG2d+8Xa5icoAI2fosSkhWK1MmQuETcsX/kO3i+KdDKczIuaxepKE5pJrXFzQUse
bN2SQomjfy2MUp+uIkLr579pLGWkzKlYgnH222pxow/jnsYxigDdEIXrvNzk4vOU
vFeCAv6Y1mvchqvXpLtQlWPMKisUYJR2sI9mtuuoCVMOKkvC6TqqluI4mPw9YOxe
/INSVPLRh0ekfdoczCIespqrrww7qU7p22Q=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:45 2026 by rpki-client