Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb845d12-ae3d-3a83-8c0a-47c26e94dbb1.roa
File:                     cb845d12-ae3d-3a83-8c0a-47c26e94dbb1.roa (raw, json)
Hash identifier:          B05dIyQVlSpNh8HlJ2sCBlIdpuBTBCfG8tQWQytgURc=
Subject key identifier:   27:0A:D9:9E:C5:7B:7E:33:11:9E:89:67:F3:9E:F7:31:71:51:B4:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67AB7ADA44E369D5D25840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb845d12-ae3d-3a83-8c0a-47c26e94dbb1.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1008:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:ab:7a:da:44:e3:69:d5:d2:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=b867da38-0297-48aa-90a4-698659f6346b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:4a:72:08:51:af:ec:99:ae:9d:d7:59:eb:
                    3c:ee:a6:17:a3:32:6f:80:de:48:03:d9:7f:47:92:
                    a9:cf:94:89:8b:eb:aa:1e:b0:32:5d:29:99:de:3c:
                    3d:6e:b4:4b:10:b9:09:05:2e:c3:4f:3b:75:cc:bd:
                    b2:31:ed:08:7b:01:c4:c0:68:db:ca:25:ce:53:28:
                    54:d4:f1:9c:d1:86:52:c6:25:7d:c5:4f:cc:51:f3:
                    3e:c2:51:3c:30:fe:12:22:a4:f0:f5:05:21:82:93:
                    50:31:04:c7:44:5c:f8:57:50:86:11:3a:19:de:c0:
                    d1:75:86:29:e0:11:fd:b0:56:08:2d:df:d8:df:d9:
                    30:06:cf:23:0e:5a:b0:e8:8c:c7:90:19:fd:67:70:
                    75:21:29:7c:27:be:b2:1a:22:a8:67:8e:73:20:ca:
                    bd:74:f2:34:7e:fe:43:45:dd:72:d1:1b:8d:aa:8f:
                    7a:e6:17:d6:67:46:ee:28:da:02:87:6a:1c:41:3e:
                    fe:40:06:65:4f:08:fa:9c:d0:08:cb:80:33:55:5f:
                    53:4e:b1:a0:5b:cc:6c:44:f4:e3:7b:69:40:f7:57:
                    43:5b:af:f3:22:a7:ec:bc:25:4a:86:fd:ef:1e:90:
                    c4:04:da:16:c9:bb:1a:7c:07:95:e5:a6:61:e8:27:
                    3f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0A:D9:9E:C5:7B:7E:33:11:9E:89:67:F3:9E:F7:31:71:51:B4:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb845d12-ae3d-3a83-8c0a-47c26e94dbb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:60:73:1d:27:bb:b5:4a:88:05:5f:f0:bf:6d:ae:be:ec:05:
         24:90:21:1b:19:71:d8:a3:fa:7a:f6:c7:44:f3:ea:46:a1:56:
         c6:51:b7:59:1b:02:de:03:e1:33:e6:54:d8:2e:fc:e8:d0:49:
         91:d1:73:98:d5:eb:e5:c1:aa:db:f9:67:b5:ed:ff:07:f4:bc:
         2a:a9:72:f6:42:14:e0:36:96:13:d8:8b:1c:f8:fc:bd:36:e8:
         cf:67:12:64:13:86:bb:f8:59:f9:79:18:4d:55:8b:4f:92:87:
         65:0f:54:22:89:89:a1:18:f2:04:3a:0d:28:3d:48:62:67:d3:
         45:4d:95:82:ce:4c:b1:84:28:b1:45:86:0e:73:43:ed:d6:20:
         95:c0:df:d7:c8:74:c3:62:1e:aa:e6:12:ec:99:70:03:b7:97:
         59:35:0c:25:a6:77:f9:b5:56:94:ee:5a:29:0f:52:f5:ae:fe:
         0f:45:c7:70:70:45:a4:09:07:b4:6f:ce:41:0e:88:df:4c:0a:
         ae:f0:70:b9:c4:48:6e:e1:c0:99:08:a5:a1:35:7c:b4:18:d9:
         c0:7a:b8:0b:99:54:a4:d3:3b:b4:93:f8:fd:ab:ce:da:60:12:
         05:89:3d:bd:64:3c:8c:77:89:a4:ce:15:c1:fc:ba:7a:a7:94:
         fb:1c:fc:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzcZ6t62kTjadXSWEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
Yjg2N2RhMzgtMDI5Ny00OGFhLTkwYTQtNjk4NjU5ZjYzNDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UdKcghRr+yZrp3XWes87qYXozJvgN5IA9l/
R5Kpz5SJi+uqHrAyXSmZ3jw9brRLELkJBS7DTzt1zL2yMe0IewHEwGjbyiXOUyhU
1PGc0YZSxiV9xU/MUfM+wlE8MP4SIqTw9QUhgpNQMQTHRFz4V1CGEToZ3sDRdYYp
4BH9sFYILd/Y39kwBs8jDlqw6IzHkBn9Z3B1ISl8J76yGiKoZ45zIMq9dPI0fv5D
Rd1y0RuNqo965hfWZ0buKNoCh2ocQT7+QAZlTwj6nNAIy4AzVV9TTrGgW8xsRPTj
e2lA91dDW6/zIqfsvCVKhv3vHpDEBNoWybsafAeV5aZh6Cc/XwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCcK2Z7Fe34zEZ6JZ/Oe9zFxUbSWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2I4NDVkMTItYWUzZC0z
YTgzLThjMGEtNDdjMjZlOTRkYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCAAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIxgcx0nu7VKiAVf8L9trr7sBSSQIRsZcdij+nr2x0Tz6kahVsZR
t1kbAt4D4TPmVNgu/OjQSZHRc5jV6+XBqtv5Z7Xt/wf0vCqpcvZCFOA2lhPYixz4
/L026M9nEmQThrv4Wfl5GE1Vi0+Sh2UPVCKJiaEY8gQ6DSg9SGJn00VNlYLOTLGE
KLFFhg5zQ+3WIJXA39fIdMNiHqrmEuyZcAO3l1k1DCWmd/m1VpTuWikPUvWu/g9F
x3BwRaQJB7RvzkEOiN9MCq7wcLnESG7hwJkIpaE1fLQY2cB6uAuZVKTTO7ST+P2r
ztpgEgWJPb1kPIx3iaTOFcH8unqnlPsc/HI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:07 2026 by rpki-client