Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8611aab0-bb32-3277-b710-0e48115a9d54.roa
File:                     8611aab0-bb32-3277-b710-0e48115a9d54.roa (raw, json)
Hash identifier:          CIEZrcXTH3jAgiYNgCBJWcucAIpQq1GmJAjF+tuhFmo=
Subject key identifier:   D9:02:6B:67:C6:7D:EB:2B:C8:0E:3A:5F:9C:33:14:9A:AC:0C:89:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D2DFEFA6C4A67939BF300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8611aab0-bb32-3277-b710-0e48115a9d54.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100f:b030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:2d:fe:fa:6c:4a:67:93:9b:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=10a7888c-9d28-4ff6-ab5e-6d34510e6514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:b6:cb:fc:ba:f7:fb:62:5a:15:0c:6a:7d:
                    48:5e:20:40:f1:fc:08:55:12:a1:a4:7c:c9:88:74:
                    30:1d:54:31:06:69:6d:84:55:83:9d:15:48:51:c8:
                    a9:a7:7d:a5:13:ff:e5:b4:0d:3b:5c:d7:55:c1:9e:
                    c3:fe:0c:5b:20:dc:0d:83:58:0e:21:35:37:db:5c:
                    02:ec:6e:d7:4c:90:0d:b5:61:72:ec:06:73:3d:74:
                    e8:69:50:5e:1f:fd:d4:c3:18:80:da:a1:5e:00:ff:
                    e7:97:7f:1c:31:75:72:98:f8:a0:91:c3:2f:56:d6:
                    e8:7e:12:10:07:07:29:33:a0:98:b8:6f:38:1d:3c:
                    c5:dc:66:0c:5d:6c:38:c8:14:cf:b0:2e:80:80:1b:
                    5e:77:36:2c:67:66:f7:4a:3e:55:db:4d:62:f7:80:
                    10:d2:15:79:5e:e8:be:08:1f:b9:3f:b2:e9:98:3a:
                    f5:21:69:6a:24:de:74:8f:06:93:c2:8f:57:02:f6:
                    e5:36:68:b4:67:03:ad:90:8a:63:1b:64:87:ab:b1:
                    3c:73:91:50:41:e3:d9:ae:eb:13:8c:33:72:67:ee:
                    f4:30:05:8c:83:b0:ce:a6:66:ed:70:3c:fe:65:c6:
                    b3:45:8b:20:ed:2a:df:bb:53:db:5b:a3:f8:92:99:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:02:6B:67:C6:7D:EB:2B:C8:0E:3A:5F:9C:33:14:9A:AC:0C:89:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8611aab0-bb32-3277-b710-0e48115a9d54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:79:79:1f:73:fb:fd:7a:3b:99:b5:13:8d:be:25:5c:89:88:
         3c:46:ed:ff:83:4b:3c:87:ad:d5:89:19:a7:53:4d:a9:9f:94:
         63:06:e9:d7:b6:d0:17:70:ec:47:fc:4f:41:3a:9d:2c:ee:7f:
         74:dc:12:7a:2d:ee:c7:e0:dc:89:d8:2b:cf:6d:2e:88:a0:0e:
         58:7d:be:8a:54:b7:31:ee:99:11:1b:69:9b:65:67:d2:34:b7:
         20:20:90:8d:84:d8:ff:2b:31:d8:e6:9e:e0:ff:e6:5c:e8:f5:
         41:4b:4f:56:ec:32:7e:5a:19:c1:c1:78:7b:1e:1c:28:97:14:
         af:c7:40:c7:0e:ce:12:22:98:4e:9d:22:2c:38:ef:8a:23:50:
         47:94:cc:0d:77:6f:09:1e:78:68:ec:55:b8:96:64:1d:8c:55:
         49:40:56:89:07:dd:31:0a:b3:54:31:ba:63:ba:fc:64:69:91:
         46:30:90:9d:9a:b3:65:b1:f8:fe:ad:f0:cd:93:ad:b6:eb:4f:
         c2:ca:6b:e4:f9:46:ca:20:d2:e5:10:2c:e7:13:7d:32:f0:7b:
         18:38:3d:dc:3c:db:6e:4c:97:78:f2:46:ee:c9:d0:7b:57:0e:
         0a:a4:e0:87:3e:33:95:8a:8b:21:2a:05:64:78:1b:ea:ac:02:
         2b:6f:f9:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0DfS3++mxKZ5Ob8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MTBhNzg4OGMtOWQyOC00ZmY2LWFiNWUtNmQzNDUxMGU2NTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiq2y/y69/tiWhUMan1IXiBA8fwIVRKhpHzJ
iHQwHVQxBmlthFWDnRVIUcipp32lE//ltA07XNdVwZ7D/gxbINwNg1gOITU321wC
7G7XTJANtWFy7AZzPXToaVBeH/3UwxiA2qFeAP/nl38cMXVymPigkcMvVtbofhIQ
BwcpM6CYuG84HTzF3GYMXWw4yBTPsC6AgBtedzYsZ2b3Sj5V201i94AQ0hV5Xui+
CB+5P7LpmDr1IWlqJN50jwaTwo9XAvblNmi0ZwOtkIpjG2SHq7E8c5FQQePZrusT
jDNyZ+70MAWMg7DOpmbtcDz+ZcazRYsg7Srfu1PbW6P4kpl7YwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNkCa2fGfesryA46X5wzFJqsDIkKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODYxMWFhYjAtYmIzMi0z
Mjc3LWI3MTAtMGU0ODExNWE5ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQD7Aw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHN5eR9z+/16O5m1E42+JVyJiDxG7f+DSzyHrdWJGadTTamflGMG
6de20Bdw7Ef8T0E6nSzuf3TcEnot7sfg3InYK89tLoigDlh9vopUtzHumREbaZtl
Z9I0tyAgkI2E2P8rMdjmnuD/5lzo9UFLT1bsMn5aGcHBeHseHCiXFK/HQMcOzhIi
mE6dIiw474ojUEeUzA13bwkeeGjsVbiWZB2MVUlAVokH3TEKs1QxumO6/GRpkUYw
kJ2as2Wx+P6t8M2TrbbrT8LKa+T5Rsog0uUQLOcTfTLwexg4Pdw8225Ml3jyRu7J
0HtXDgqk4Ic+M5WKiyEqBWR4G+qsAitv+Tg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:52 2026 by rpki-client