Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd04c9de-854f-39c4-b052-2852cc539a17.roa
File:                     bd04c9de-854f-39c4-b052-2852cc539a17.roa (raw, json)
Hash identifier:          4M/LBFuHh4uLPTlgB6tUs+cQ5n5vvTKRZIxRMHndH6Q=
Subject key identifier:   74:55:76:C9:D9:82:8F:0F:8B:30:78:5A:0F:7C:76:CB:35:21:E6:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B43C3CE06380CD52C5500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd04c9de-854f-39c4-b052-2852cc539a17.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1001:b160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:43:c3:ce:06:38:0c:d5:2c:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bc39b58d-c5d9-4c4a-8a55-4f7fd3af9ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:0b:42:27:8b:a2:c0:d0:64:06:2d:28:3e:
                    01:bd:7a:26:24:2a:34:13:26:62:38:59:24:5b:c1:
                    1a:f7:3b:ce:f4:3e:e4:ad:11:58:ed:e4:3a:3a:30:
                    9f:7e:f1:7f:e8:d4:ae:aa:21:20:95:9e:fe:d8:60:
                    a2:bf:d7:63:14:bf:05:a4:aa:6a:be:50:06:7e:a2:
                    c5:9b:26:b4:e0:a8:86:c8:87:48:fb:53:d4:f0:79:
                    48:9f:cd:3a:5b:bd:dc:19:95:63:a4:7d:6f:4d:bf:
                    45:68:a9:84:d0:f8:72:be:21:64:c8:7a:bf:60:4a:
                    dd:18:b1:60:c0:37:b9:a4:0a:73:17:c9:32:21:e2:
                    2b:f3:79:67:13:4d:60:94:6f:f6:4b:bc:8f:3a:dd:
                    b5:b2:2e:af:40:7b:bb:47:98:22:94:5a:84:75:df:
                    54:ca:8f:f7:10:b0:d6:b3:86:4c:8b:28:fe:ca:b1:
                    14:93:70:4a:df:2a:21:c7:31:d3:a4:70:31:56:8d:
                    74:7f:aa:90:7b:77:57:18:11:61:4b:7e:12:bc:99:
                    91:46:e6:eb:d4:da:b5:5f:b0:65:a0:dd:0c:66:f5:
                    40:79:bd:93:61:50:cc:6d:67:24:c3:61:bd:dd:46:
                    2d:19:28:7d:83:e7:ab:7f:6b:23:4b:72:cb:a2:94:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:55:76:C9:D9:82:8F:0F:8B:30:78:5A:0F:7C:76:CB:35:21:E6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd04c9de-854f-39c4-b052-2852cc539a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:43:07:86:ee:39:b6:ab:51:84:cb:95:c2:87:67:75:54:5a:
         df:10:08:2d:c5:f8:bd:fa:4a:0b:f4:7e:fe:ac:c9:d4:9c:76:
         d7:de:4c:dc:5e:c8:7e:07:1f:8c:cb:aa:84:4f:90:b4:17:60:
         6a:b6:9f:30:49:0f:b0:33:a4:fd:3e:0d:6c:3f:19:17:6d:cf:
         5a:57:35:6e:42:ce:73:3e:39:7e:15:8c:a3:fa:95:16:7d:c5:
         7c:17:ab:10:b3:ef:07:a1:47:bf:0a:19:49:38:18:09:c5:8c:
         b1:63:b2:f8:82:60:ee:69:e3:19:7a:65:0d:8e:a8:a6:a2:aa:
         8f:d8:3c:ed:30:22:57:10:a9:74:2b:60:c2:2a:08:71:48:e9:
         9e:6d:22:ab:cc:43:08:f7:1d:f2:be:cc:ee:b1:a9:40:86:96:
         71:1b:80:5d:bd:00:63:24:cd:bb:e1:1d:5b:74:da:5f:93:9c:
         5b:93:b9:48:52:86:c8:3d:b2:2d:e2:d4:03:75:6c:61:3f:13:
         97:ec:b3:b2:87:f3:f9:a2:b9:0c:e9:91:c5:04:2d:c8:72:d4:
         d3:08:a4:62:73:80:42:cd:43:d4:d9:88:83:2e:0f:09:5c:94:
         13:1a:bf:fb:a7:39:af:89:e1:e6:de:61:d7:e1:65:59:7e:2c:
         04:6c:f1:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm0PDzgY4DNUsVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YmMzOWI1OGQtYzVkOS00YzRhLThhNTUtNGY3ZmQzYWY5YWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjooLQieLosDQZAYtKD4BvXomJCo0EyZiOFkk
W8Ea9zvO9D7krRFY7eQ6OjCffvF/6NSuqiEglZ7+2GCiv9djFL8FpKpqvlAGfqLF
mya04KiGyIdI+1PU8HlIn806W73cGZVjpH1vTb9FaKmE0PhyviFkyHq/YErdGLFg
wDe5pApzF8kyIeIr83lnE01glG/2S7yPOt21si6vQHu7R5gilFqEdd9Uyo/3ELDW
s4ZMiyj+yrEUk3BK3yohxzHTpHAxVo10f6qQe3dXGBFhS34SvJmRRubr1Nq1X7Bl
oN0MZvVAeb2TYVDMbWckw2G93UYtGSh9g+erf2sjS3LLopRXSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHRVdsnZgo8PizB4Wg98dss1IeYHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmQwNGM5ZGUtODU0Zi0z
OWM0LWIwNTItMjg1MmNjNTM5YTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAbFg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAxDB4buObarUYTLlcKHZ3VUWt8QCC3F+L36Sgv0fv6sydScdtfe
TNxeyH4HH4zLqoRPkLQXYGq2nzBJD7AzpP0+DWw/GRdtz1pXNW5CznM+OX4VjKP6
lRZ9xXwXqxCz7wehR78KGUk4GAnFjLFjsviCYO5p4xl6ZQ2OqKaiqo/YPO0wIlcQ
qXQrYMIqCHFI6Z5tIqvMQwj3HfK+zO6xqUCGlnEbgF29AGMkzbvhHVt02l+TnFuT
uUhShsg9si3i1AN1bGE/E5fss7KH8/miuQzpkcUELchy1NMIpGJzgELNQ9TZiIMu
DwlclBMav/unOa+J4ebeYdfhZVl+LARs8Z4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:04:13 2026 by rpki-client