Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63cbd3fe-b658-3d67-9f95-435f3fdeb4d7.roa
File:                     63cbd3fe-b658-3d67-9f95-435f3fdeb4d7.roa (raw, json)
Hash identifier:          WnaK/mHTAW3jEU0LEJ6tcqSf4qG8yq9Ln6JyKeZqrUo=
Subject key identifier:   5F:0C:9E:46:A0:8D:53:BC:89:EA:47:FA:8E:EF:71:B3:4F:B8:34:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7903F55659C45B73C003080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63cbd3fe-b658-3d67-9f95-435f3fdeb4d7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1010:a024::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:3f:55:65:9c:45:b7:3c:00:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=72192f8b-efc3-4551-b832-4c9c4d83b5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:dd:c6:32:cd:f4:f7:1f:11:b4:a4:60:54:
                    9b:41:d7:7c:a1:cf:ea:44:5c:c9:3e:55:64:40:db:
                    b0:34:89:c2:6c:33:5d:7d:3e:d1:34:a5:b6:6e:7b:
                    52:66:ad:f0:b3:9a:4b:7c:e4:96:d7:f9:08:1b:14:
                    65:9c:d6:79:fd:44:52:c4:01:c9:39:0f:bd:02:73:
                    3e:ba:1c:65:06:96:39:67:98:9c:fb:7e:e2:b8:5d:
                    5b:8e:d2:b3:40:8d:17:8d:7c:f2:75:03:6c:30:6e:
                    5c:dc:79:e2:78:7c:3c:8f:88:1f:9a:ea:eb:3c:09:
                    d2:c5:d1:23:30:08:23:6e:74:02:75:c9:fe:a5:d7:
                    92:37:fb:d1:ec:1b:04:d5:1d:10:45:ba:2f:4e:53:
                    b1:8c:8a:19:ea:5c:83:6e:0c:be:44:94:0a:21:07:
                    af:08:68:40:38:58:1d:55:54:cb:ea:7f:a1:84:5f:
                    9a:4b:63:6f:99:72:d8:4c:bf:b2:20:7d:d0:3b:1a:
                    2f:55:2b:55:e7:70:21:d4:dd:8a:62:ce:12:95:e7:
                    51:55:4a:b3:fa:a0:23:60:22:05:a8:4f:94:d0:15:
                    e1:0a:9d:86:63:9c:ea:31:47:a1:a2:a5:ea:ec:f3:
                    13:14:17:e2:03:9f:2f:2c:3b:d6:46:1a:a9:a5:27:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0C:9E:46:A0:8D:53:BC:89:EA:47:FA:8E:EF:71:B3:4F:B8:34:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/63cbd3fe-b658-3d67-9f95-435f3fdeb4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:8a:f3:e8:ab:f3:82:21:b5:bd:db:a1:c5:ae:08:ce:c3:
         f0:d1:2c:e1:74:8c:1c:b8:64:29:ae:3d:36:21:4a:e5:ca:e7:
         e8:b5:99:d6:29:34:20:38:18:97:29:3c:91:35:43:3b:92:16:
         e8:82:13:7b:cb:21:cb:f0:02:d6:50:3d:d0:3f:e5:e3:24:f2:
         9b:5e:4e:34:99:13:b6:2d:28:0f:20:d0:09:eb:a1:49:3a:39:
         6f:7a:b0:47:86:00:b7:67:79:c8:a8:c2:16:2f:45:56:19:dd:
         72:15:91:0e:d0:cc:f6:26:eb:3e:3a:83:ee:00:b1:8c:62:41:
         26:41:1b:41:f0:10:cc:07:80:98:8c:0d:d7:3c:9a:14:b3:45:
         27:5c:9f:d8:56:03:a1:cc:52:fb:93:50:e5:f7:70:30:bc:56:
         75:7d:f0:24:97:8f:31:a4:5b:76:bb:ab:3c:6d:21:ce:01:09:
         da:04:e9:bf:df:74:14:c4:57:7d:03:0c:99:63:46:d4:09:83:
         db:02:13:34:c6:1d:47:34:c9:5b:20:a8:3b:42:1e:52:1c:b1:
         72:48:41:47:53:86:2b:40:6f:e7:b7:23:32:50:24:aa:0a:9f:
         28:8f:26:6a:04:ad:33:33:dd:77:1e:b2:b0:50:64:b9:9e:2d:
         92:08:87:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkD9VZZxFtzwAMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzIxOTJmOGItZWZjMy00NTUxLWI4MzItNGM5YzRkODNiNWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsabdxjLN9PcfEbSkYFSbQdd8oc/qRFzJPlVk
QNuwNInCbDNdfT7RNKW2bntSZq3ws5pLfOSW1/kIGxRlnNZ5/URSxAHJOQ+9AnM+
uhxlBpY5Z5ic+37iuF1bjtKzQI0XjXzydQNsMG5c3HnieHw8j4gfmurrPAnSxdEj
MAgjbnQCdcn+pdeSN/vR7BsE1R0QRbovTlOxjIoZ6lyDbgy+RJQKIQevCGhAOFgd
VVTL6n+hhF+aS2NvmXLYTL+yIH3QOxovVStV53Ah1N2KYs4SledRVUqz+qAjYCIF
qE+U0BXhCp2GY5zqMUehoqXq7PMTFBfiA58vLDvWRhqppSfGhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF8MnkagjVO8iepH+o7vcbNPuDTkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjNjYmQzZmUtYjY1OC0z
ZDY3LTlmOTUtNDM1ZjNmZGViNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEKAk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADG/ivPoq/OCIbW926HFrgjOw/DRLOF0jBy4ZCmuPTYhSuXK5+i1
mdYpNCA4GJcpPJE1QzuSFuiCE3vLIcvwAtZQPdA/5eMk8pteTjSZE7YtKA8g0Anr
oUk6OW96sEeGALdneciowhYvRVYZ3XIVkQ7QzPYm6z46g+4AsYxiQSZBG0HwEMwH
gJiMDdc8mhSzRSdcn9hWA6HMUvuTUOX3cDC8VnV98CSXjzGkW3a7qzxtIc4BCdoE
6b/fdBTEV30DDJljRtQJg9sCEzTGHUc0yVsgqDtCHlIcsXJIQUdThitAb+e3IzJQ
JKoKnyiPJmoErTMz3XcesrBQZLmeLZIIhyw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:07:48 2026 by rpki-client