Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0298a8b-0c6d-3dea-9043-45955775ad16.roa
File:                     f0298a8b-0c6d-3dea-9043-45955775ad16.roa (raw, json)
Hash identifier:          nf+S3VfHlgZo5rSkzxzJfIrypNPy8+tpktnaUIntnhk=
Subject key identifier:   20:DE:B3:B1:24:E0:DE:47:7E:3E:5E:27:A6:CC:03:FA:D2:FA:91:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67DA35F265E25CCE2B6600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0298a8b-0c6d-3dea-9043-45955775ad16.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:b8c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:da:35:f2:65:e2:5c:ce:2b:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=0ce7d472-fa43-47fe-b8fd-19f72cec424b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:04:c7:1a:6b:5a:47:c3:45:8f:4b:a3:4a:7d:
                    30:29:30:36:6d:99:99:90:23:b1:04:f0:f2:5a:9e:
                    17:10:43:90:6a:a8:4f:f8:4c:a0:77:34:4c:96:23:
                    31:1a:4a:2c:ee:ce:7a:11:77:c5:da:cc:57:02:9e:
                    78:72:b9:24:79:9d:0f:7e:14:44:ff:73:e2:0e:15:
                    66:a7:a0:ec:7e:18:a5:b9:da:c2:36:21:b2:f6:84:
                    dc:cc:c4:e1:dc:d5:99:c4:f6:e6:32:6f:f3:8d:2a:
                    87:d6:41:c1:4e:6a:5b:9a:31:1e:35:8a:1b:23:7d:
                    05:45:e5:1a:82:a4:95:76:5c:cb:bf:87:4f:0c:a3:
                    69:f4:a3:e8:6d:f3:fc:cb:ce:7c:0c:9a:8f:50:86:
                    3c:f4:02:ae:49:a0:6f:62:c9:98:88:7a:11:5f:09:
                    b5:52:58:78:bb:23:23:3e:5b:98:f4:09:35:27:8d:
                    5e:7c:b8:4e:10:50:d1:36:78:5a:d2:a3:bc:46:bd:
                    14:62:a2:4e:4d:55:f1:d2:64:55:d7:5c:3f:a8:04:
                    cc:58:82:53:ad:01:b8:e9:d9:6d:01:f5:aa:a0:d2:
                    f1:29:eb:91:5d:40:ec:72:54:e8:48:59:2b:28:e6:
                    e9:47:17:2b:0b:28:74:0c:5a:49:0c:5f:f3:32:c9:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DE:B3:B1:24:E0:DE:47:7E:3E:5E:27:A6:CC:03:FA:D2:FA:91:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0298a8b-0c6d-3dea-9043-45955775ad16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b8c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:72:54:0c:33:19:20:95:96:6f:3d:62:34:c2:04:4e:b3:
         c7:06:ae:89:b9:06:c6:16:dc:f4:45:47:74:d1:c1:d3:fe:3f:
         65:f2:66:b0:0c:25:6d:c5:0f:b2:7b:af:ef:90:48:bb:2b:ef:
         d4:2e:92:f7:bd:3f:24:93:39:f8:3b:c9:82:0f:92:0d:e4:65:
         70:c3:c5:de:6a:29:e2:04:fc:d1:9c:65:35:37:b0:bc:5a:2f:
         b0:52:3b:7d:d2:e3:9d:cb:15:53:fe:77:76:1a:36:6b:6f:2c:
         82:1d:40:7d:10:e5:02:cc:cc:69:d2:4f:41:7e:8b:66:90:47:
         11:f8:1f:18:07:be:ff:37:05:bb:54:7e:54:04:77:0a:44:59:
         da:2e:86:c3:ad:6d:8d:c0:2d:5f:79:b1:97:c4:e1:b1:38:1b:
         11:91:88:bc:55:53:64:43:e1:31:d9:17:1b:44:b0:f6:ca:93:
         45:cb:f9:dc:0e:ef:16:04:fc:da:63:8f:fd:26:7b:45:84:cf:
         79:a5:d1:c1:5b:c4:ad:ba:ab:82:1a:10:5f:7f:7b:17:97:6d:
         32:d9:ba:25:13:fd:a9:2f:59:6b:e4:67:78:3b:66:5b:fa:f7:
         76:56:9c:ea:04:3b:ce:11:1e:34:c0:86:a1:32:ad:b7:76:f1:
         fa:01:77:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzcZ9o18mXiXM4rZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
MGNlN2Q0NzItZmE0My00N2ZlLWI4ZmQtMTlmNzJjZWM0MjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQTHGmtaR8NFj0ujSn0wKTA2bZmZkCOxBPDy
Wp4XEEOQaqhP+EygdzRMliMxGkos7s56EXfF2sxXAp54crkkeZ0PfhRE/3PiDhVm
p6DsfhiludrCNiGy9oTczMTh3NWZxPbmMm/zjSqH1kHBTmpbmjEeNYobI30FReUa
gqSVdlzLv4dPDKNp9KPobfP8y858DJqPUIY89AKuSaBvYsmYiHoRXwm1Ulh4uyMj
PluY9Ak1J41efLhOEFDRNnha0qO8Rr0UYqJOTVXx0mRV11w/qATMWIJTrQG46dlt
AfWqoNLxKeuRXUDsclToSFkrKObpRxcrCyh0DFpJDF/zMsnrwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCDes7Ek4N5Hfj5eJ6bMA/rS+pHrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjAyOThhOGItMGM2ZC0z
ZGVhLTkwNDMtNDU5NTU3NzVhZDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQA7jA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFQfclQMMxkglZZvPWI0wgROs8cGrom5BsYW3PRFR3TRwdP+P2Xy
ZrAMJW3FD7J7r++QSLsr79Qukve9PySTOfg7yYIPkg3kZXDDxd5qKeIE/NGcZTU3
sLxaL7BSO33S453LFVP+d3YaNmtvLIIdQH0Q5QLMzGnST0F+i2aQRxH4HxgHvv83
BbtUflQEdwpEWdouhsOtbY3ALV95sZfE4bE4GxGRiLxVU2RD4THZFxtEsPbKk0XL
+dwO7xYE/Npjj/0me0WEz3ml0cFbxK26q4IaEF9/exeXbTLZuiUT/akvWWvkZ3g7
Zlv693ZWnOoEO84RHjTAhqEyrbd28foBd+g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:16 2026 by rpki-client