Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a785656-d26c-3feb-8458-e6b55cb48554.roa
File:                     6a785656-d26c-3feb-8458-e6b55cb48554.roa (raw, json)
Hash identifier:          22Key/aZ/Y1BX1I5HJgYa/LZf4nkdICLB7N2Zn/YVMo=
Subject key identifier:   7C:6D:59:5A:B3:B3:61:C0:19:97:A9:92:72:A0:74:91:FB:B5:F3:22
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3CE2A99A2597A2A2018C26E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a785656-d26c-3feb-8458-e6b55cb48554.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:b0f0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:a9:9a:25:97:a2:a2:01:8c:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=2d03c67d-38ba-44b1-b4f3-9e68e0f6b586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:c4:d9:58:68:46:e5:36:63:f9:22:5a:7f:
                    51:64:5a:20:73:21:70:52:35:33:bd:d3:d3:1a:ea:
                    ea:a6:8b:b8:c2:f0:c2:5f:e0:56:33:df:c4:26:fa:
                    be:b1:f1:a4:e3:02:50:9b:47:d7:7a:ed:ea:73:d6:
                    73:1a:10:6c:60:aa:ee:f7:2c:1e:52:67:bc:c8:75:
                    1b:44:5a:ea:70:e1:3d:2b:b2:d6:bb:a8:89:f0:81:
                    e5:7b:ca:90:8c:51:79:1c:40:5d:d8:6d:dd:92:0a:
                    6b:e7:fe:3d:86:0e:78:84:79:a6:51:ad:50:0e:3c:
                    74:84:de:e2:f8:ca:58:65:7c:5b:bd:91:06:ab:67:
                    5b:21:b7:26:76:fa:e3:fb:01:c4:40:2d:3b:df:3d:
                    a6:c1:00:e9:56:31:ee:a2:14:c8:2a:ff:92:94:d4:
                    8b:22:f7:13:48:de:e7:a3:dc:48:a1:b1:c6:99:cc:
                    ff:25:8b:1d:61:57:0c:3b:40:bc:33:54:05:b6:31:
                    5d:a2:c7:94:41:98:33:06:d6:5f:71:b3:25:6f:cc:
                    0c:82:4e:61:fd:c1:d4:65:2a:09:63:da:26:30:fc:
                    02:4e:f7:af:80:49:27:84:ea:34:2f:06:52:cc:5b:
                    f7:f0:d4:a3:56:bf:1f:44:1b:7e:fc:89:c8:e7:5b:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6D:59:5A:B3:B3:61:C0:19:97:A9:92:72:A0:74:91:FB:B5:F3:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a785656-d26c-3feb-8458-e6b55cb48554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b0f0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:32:16:20:31:e9:4f:f7:11:ee:c8:f9:e5:16:94:26:85:91:
         37:ab:67:29:c0:4c:7d:17:d6:a5:73:56:51:5a:a9:af:e3:c3:
         06:10:bc:7c:a8:f8:7a:f7:35:0d:ce:c1:6f:9e:a1:86:6c:a5:
         c5:81:c1:a4:2f:0b:31:94:05:ce:32:a7:6c:75:87:86:4e:c7:
         ff:83:7d:54:86:e2:48:52:4b:1b:e3:4a:21:63:a5:bf:d0:fd:
         7f:14:d3:46:a8:b3:05:4d:c6:51:02:4b:20:de:f2:d6:2a:20:
         98:2d:5b:45:7a:b0:40:5d:d4:0d:76:d6:94:d9:4e:15:6f:78:
         9d:05:d1:8f:a8:04:82:78:78:1d:e1:78:3a:2a:7b:87:1d:89:
         b4:c3:a4:45:4a:3e:ba:41:d4:51:c0:a7:e9:f8:85:99:84:a8:
         f8:1c:8b:09:df:92:7c:78:67:f0:e9:67:7a:d3:18:51:f8:98:
         bf:87:99:01:cf:bc:00:b8:59:c9:9f:b5:12:86:9c:e5:ec:e9:
         3e:c5:30:84:c5:68:21:25:26:5e:0f:b8:c2:49:92:0d:bb:cf:
         5b:a7:d5:c6:c0:d3:df:84:40:13:de:2f:98:3d:80:bc:a7:72:
         65:be:3c:6b:28:db:e6:2d:9e:59:1c:41:df:53:1b:c4:4c:92:
         ae:36:4e:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE884qmaJZeiogGMJuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
MmQwM2M2N2QtMzhiYS00NGIxLWI0ZjMtOWU2OGUwZjZiNTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMHE2VhoRuU2Y/kiWn9RZFogcyFwUjUzvdPT
Gurqpou4wvDCX+BWM9/EJvq+sfGk4wJQm0fXeu3qc9ZzGhBsYKru9yweUme8yHUb
RFrqcOE9K7LWu6iJ8IHle8qQjFF5HEBd2G3dkgpr5/49hg54hHmmUa1QDjx0hN7i
+MpYZXxbvZEGq2dbIbcmdvrj+wHEQC073z2mwQDpVjHuohTIKv+SlNSLIvcTSN7n
o9xIobHGmcz/JYsdYVcMO0C8M1QFtjFdoseUQZgzBtZfcbMlb8wMgk5h/cHUZSoJ
Y9omMPwCTvevgEknhOo0LwZSzFv38NSjVr8fRBt+/InI51tbJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHxtWVqzs2HAGZepknKgdJH7tfMiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmE3ODU2NTYtZDI2Yy0z
ZmViLTg0NTgtZTZiNTVjYjQ4NTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQDLDw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJMyFiAx6U/3Ee7I+eUWlCaFkTerZynATH0X1qVzVlFaqa/jwwYQ
vHyo+Hr3NQ3OwW+eoYZspcWBwaQvCzGUBc4yp2x1h4ZOx/+DfVSG4khSSxvjSiFj
pb/Q/X8U00aoswVNxlECSyDe8tYqIJgtW0V6sEBd1A121pTZThVveJ0F0Y+oBIJ4
eB3heDoqe4cdibTDpEVKPrpB1FHAp+n4hZmEqPgciwnfknx4Z/DpZ3rTGFH4mL+H
mQHPvAC4WcmftRKGnOXs6T7FMITFaCElJl4PuMJJkg27z1un1cbA09+EQBPeL5g9
gLyncmW+PGso2+YtnlkcQd9TG8RMkq42Tkw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:40:35 2026 by rpki-client