Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2dd2f2f-5771-3e4f-b6bd-f0caef88426f.roa
File:                     a2dd2f2f-5771-3e4f-b6bd-f0caef88426f.roa (raw, json)
Hash identifier:          T5OjQafj+o/lTpawMxONoFlFUSesqSaCoYH5Egp2FmA=
Subject key identifier:   D3:04:A7:CE:A4:8E:A8:0A:9D:E3:DD:FC:4C:EA:9A:35:BD:C3:22:A2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790DA1AFE50135F970844D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2dd2f2f-5771-3e4f-b6bd-f0caef88426f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100f:b1b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:da:1a:fe:50:13:5f:97:08:44:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2a45e61d-2dc4-45ce-9de5-ef768ea4077d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:35:c6:65:aa:57:c9:51:d6:ad:90:48:4b:38:
                    1f:b9:11:f8:0b:28:b3:3b:c1:ec:81:ff:6f:05:83:
                    63:d6:73:34:93:01:04:2e:da:40:ff:7a:59:80:d6:
                    46:ca:ea:7e:80:10:a7:b0:e3:92:21:09:14:28:8d:
                    51:80:b0:be:00:43:a6:8e:b8:18:f8:aa:99:21:9a:
                    ad:b9:94:28:8a:0a:39:4e:fe:7a:2f:63:ce:b3:d9:
                    77:49:0c:60:c4:b7:af:31:bd:4f:36:a6:36:7f:3e:
                    4e:d2:79:bc:96:8c:8a:b7:26:95:41:d2:95:cd:38:
                    69:17:ac:5b:2a:85:d7:bb:a3:d0:d1:01:0e:28:5d:
                    9f:40:44:99:65:ab:e5:6f:7c:69:5e:26:e5:58:9f:
                    41:e5:fb:04:94:d0:75:80:fd:ba:6a:1e:21:63:b4:
                    30:1a:4d:9b:65:5d:f5:f3:71:2f:b0:7e:94:00:a8:
                    34:d5:cc:b0:5a:fd:e4:44:fd:12:a2:13:62:01:c2:
                    ce:f4:63:c9:cf:97:f6:ae:7f:ea:4c:c8:f7:5f:05:
                    b9:27:ef:11:35:4a:2a:a7:0d:6b:a7:03:3d:1b:61:
                    47:5b:b2:78:19:11:b0:aa:37:29:ff:68:c3:16:35:
                    3a:6c:dc:0d:41:db:ff:55:72:87:b7:8e:77:92:c8:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:04:A7:CE:A4:8E:A8:0A:9D:E3:DD:FC:4C:EA:9A:35:BD:C3:22:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2dd2f2f-5771-3e4f-b6bd-f0caef88426f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b1b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:11:5b:3e:a7:f6:ac:fb:41:73:6d:ef:8c:40:34:f4:7f:ee:
         16:18:71:a2:d3:5d:75:77:cd:eb:f1:a2:65:68:86:cb:9c:ce:
         e3:57:ce:5d:6f:65:e3:33:12:16:76:a2:c8:80:fa:f1:24:7f:
         ab:81:ad:3b:e0:f7:3e:31:56:14:3f:29:8e:f9:47:90:52:3e:
         eb:78:03:2d:1c:fe:20:3c:5c:33:60:99:f4:2e:e1:5e:02:ac:
         6c:13:5c:fd:d0:d8:19:90:d5:cd:8a:c6:c8:9c:b9:41:59:f9:
         a8:b4:a2:1a:b3:6c:e9:6b:df:ae:4d:99:56:ea:62:15:b5:58:
         65:25:1c:08:fe:f5:0e:ec:9c:ef:d2:53:b6:30:7a:a8:13:19:
         65:3f:84:63:66:47:a9:43:fa:30:d1:4e:33:50:f5:ae:82:3f:
         a7:17:cb:29:19:c3:13:be:13:67:2f:1b:b8:e8:3c:7c:6a:ab:
         dd:3e:9b:87:5c:93:5c:d4:79:a0:b2:42:ed:c6:05:10:e0:b9:
         40:9e:0e:93:44:e7:98:6a:55:27:0d:c1:0e:82:03:e5:bd:27:
         c0:03:b6:e8:ac:9c:7e:9c:6e:06:f3:7a:ff:02:b1:30:57:d1:
         9e:c7:84:f0:c8:d9:98:8f:8f:fd:5b:fa:24:07:f7:95:c8:16:
         3e:27:f0:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkNoa/lATX5cIRNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmE0NWU2MWQtMmRjNC00NWNlLTlkZTUtZWY3NjhlYTQwNzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDXGZapXyVHWrZBISzgfuRH4CyizO8Hsgf9v
BYNj1nM0kwEELtpA/3pZgNZGyup+gBCnsOOSIQkUKI1RgLC+AEOmjrgY+KqZIZqt
uZQoigo5Tv56L2POs9l3SQxgxLevMb1PNqY2fz5O0nm8loyKtyaVQdKVzThpF6xb
KoXXu6PQ0QEOKF2fQESZZavlb3xpXiblWJ9B5fsElNB1gP26ah4hY7QwGk2bZV31
83EvsH6UAKg01cywWv3kRP0SohNiAcLO9GPJz5f2rn/qTMj3XwW5J+8RNUoqpw1r
pwM9G2FHW7J4GRGwqjcp/2jDFjU6bNwNQdv/VXKHt453kshL/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNMEp86kjqgKnePd/EzqmjW9wyKiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTJkZDJmMmYtNTc3MS0z
ZTRmLWI2YmQtZjBjYWVmODg0MjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQD7Gw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD8RWz6n9qz7QXNt74xANPR/7hYYcaLTXXV3zevxomVohsuczuNX
zl1vZeMzEhZ2osiA+vEkf6uBrTvg9z4xVhQ/KY75R5BSPut4Ay0c/iA8XDNgmfQu
4V4CrGwTXP3Q2BmQ1c2KxsicuUFZ+ai0ohqzbOlr365NmVbqYhW1WGUlHAj+9Q7s
nO/SU7YweqgTGWU/hGNmR6lD+jDRTjNQ9a6CP6cXyykZwxO+E2cvG7joPHxqq90+
m4dck1zUeaCyQu3GBRDguUCeDpNE55hqVScNwQ6CA+W9J8ADtuisnH6cbgbzev8C
sTBX0Z7HhPDI2ZiPj/1b+iQH95XIFj4n8CA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:26 2026 by rpki-client