Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e2daec3-ccf6-337d-92a7-44816940f369.roa
File:                     4e2daec3-ccf6-337d-92a7-44816940f369.roa (raw, json)
Hash identifier:          HRtqNOOD4zPaS6yfjVX2K9fGLE6OgdkWgFAvd8EytFM=
Subject key identifier:   1A:85:1F:BE:23:98:DC:9D:52:6A:91:92:10:4C:DF:73:4B:B1:2F:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D46440425C78D2062A900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e2daec3-ccf6-337d-92a7-44816940f369.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100d:b0c8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:46:44:04:25:c7:8d:20:62:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=07fc6bc8-3c39-4367-bc52-44d6154ce5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:7d:89:f2:b4:e1:e2:e1:89:04:ea:43:6f:
                    36:eb:39:7c:4c:ea:21:78:95:c9:74:70:fc:67:70:
                    6b:0d:2f:e2:91:05:d1:5e:15:ff:90:64:d9:d3:dc:
                    66:d8:23:de:b5:67:0b:28:8c:f0:84:02:77:64:04:
                    75:07:51:98:3e:5c:fd:0c:45:b4:5e:66:6c:91:a8:
                    ce:ec:17:33:1d:51:2a:6a:ad:43:72:fe:11:fb:a5:
                    d4:2e:9d:2d:ea:9c:0d:43:3e:32:6e:c3:6e:8e:c5:
                    60:ef:a6:6a:04:44:7a:30:4e:f5:ad:2e:73:9c:79:
                    63:22:ba:ca:e5:c7:28:0e:74:d4:72:31:f1:f8:e7:
                    8a:02:92:56:b8:30:f6:93:63:64:25:59:1d:db:2c:
                    80:8e:a6:ae:72:8a:d4:58:09:55:7a:92:bd:41:59:
                    8c:14:13:19:fd:a1:d0:0b:de:cd:d0:9b:36:5f:1d:
                    2f:a9:83:46:de:cd:1a:bc:00:ae:a4:9b:4b:bb:07:
                    7f:0e:31:88:21:11:dc:54:21:b3:3d:a7:61:dc:5a:
                    c4:0a:34:4f:1c:eb:ca:6c:14:db:a9:eb:8b:54:d4:
                    c5:a3:98:d3:49:79:e9:33:d7:84:7f:c4:73:4a:79:
                    7e:0b:67:73:ed:32:b4:0a:f5:91:10:a5:9e:1c:b2:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:85:1F:BE:23:98:DC:9D:52:6A:91:92:10:4C:DF:73:4B:B1:2F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e2daec3-ccf6-337d-92a7-44816940f369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0c8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:63:35:47:c8:2b:fd:d9:6e:36:2e:2d:8b:66:20:91:24:36:
         90:f0:18:ef:ca:cc:e5:05:f2:d6:18:8e:5f:04:68:37:77:a2:
         88:b3:6e:bb:32:85:d9:ce:d7:ce:d8:13:d9:0d:9f:ed:4e:70:
         93:28:70:3a:1f:63:4f:7a:e0:60:8f:d0:50:e3:ff:70:0b:a4:
         01:ed:75:ab:3b:f8:e5:40:a6:ef:94:9e:1e:c9:37:5a:3b:e2:
         ec:52:97:fc:92:81:64:16:8c:44:dc:37:2e:1a:b1:31:1b:d7:
         8f:81:66:cd:61:37:45:61:be:6f:e8:4f:b3:cf:a4:f1:01:6f:
         9d:00:bf:65:15:9b:72:a3:e3:79:4c:d8:8d:a4:42:7b:4c:49:
         50:11:fc:13:44:4c:f6:eb:b5:db:45:98:9c:a9:34:5e:5d:83:
         f1:00:71:40:fa:6b:0a:0b:b9:c1:99:95:6b:60:c0:5c:f0:bf:
         44:a2:4f:f6:a8:1c:26:74:4f:e4:11:ce:9e:39:d9:8d:0c:4f:
         fb:b9:24:12:1d:6a:c0:7e:0b:2e:61:d5:66:d6:89:4f:5c:c7:
         9d:74:55:13:14:3b:8a:33:36:d7:68:a0:69:9c:e7:d6:78:82:
         7f:02:b2:9a:0e:0f:43:1c:56:71:b3:88:2d:ac:2a:84:de:51:
         12:7e:72:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0DfUZEBCXHjSBiqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MDdmYzZiYzgtM2MzOS00MzY3LWJjNTItNDRkNjE1NGNlNWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Z9ifK04eLhiQTqQ2826zl8TOoheJXJdHD8
Z3BrDS/ikQXRXhX/kGTZ09xm2CPetWcLKIzwhAJ3ZAR1B1GYPlz9DEW0XmZskajO
7BczHVEqaq1Dcv4R+6XULp0t6pwNQz4ybsNujsVg76ZqBER6ME71rS5znHljIrrK
5ccoDnTUcjHx+OeKApJWuDD2k2NkJVkd2yyAjqaucorUWAlVepK9QVmMFBMZ/aHQ
C97N0Js2Xx0vqYNG3s0avACupJtLuwd/DjGIIRHcVCGzPadh3FrECjRPHOvKbBTb
qeuLVNTFo5jTSXnpM9eEf8RzSnl+C2dz7TK0CvWREKWeHLIYHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBqFH74jmNydUmqRkhBM33NLsS94MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGUyZGFlYzMtY2NmNi0z
MzdkLTkyYTctNDQ4MTY5NDBmMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbDI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC1jNUfIK/3ZbjYuLYtmIJEkNpDwGO/KzOUF8tYYjl8EaDd3ooiz
brsyhdnO187YE9kNn+1OcJMocDofY0964GCP0FDj/3ALpAHtdas7+OVApu+Unh7J
N1o74uxSl/ySgWQWjETcNy4asTEb14+BZs1hN0Vhvm/oT7PPpPEBb50Av2UVm3Kj
43lM2I2kQntMSVAR/BNETPbrtdtFmJypNF5dg/EAcUD6awoLucGZlWtgwFzwv0Si
T/aoHCZ0T+QRzp452Y0MT/u5JBIdasB+Cy5h1WbWiU9cx510VRMUO4ozNtdooGmc
59Z4gn8CspoOD0McVnGziC2sKoTeURJ+cvw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:08 2026 by rpki-client