Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff4bd6ef-bbc1-3f76-8e6f-2195d175264e.roa
File:                     ff4bd6ef-bbc1-3f76-8e6f-2195d175264e.roa (raw, json)
Hash identifier:          xGRI8sr6p6kVoCSUJDS0HB6Fz/qNq0iTh7lnnlQ2qpI=
Subject key identifier:   D5:78:82:91:3C:3C:21:65:A5:B1:23:85:90:7C:79:05:CD:14:4D:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67D22970A4D147A5E17F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff4bd6ef-bbc1-3f76-8e6f-2195d175264e.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:a022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:d2:29:70:a4:d1:47:a5:e1:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=893e17bf-bdf6-4a10-b9fe-4306ff67c528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:8a:c5:89:3e:c7:e4:d2:9c:28:47:66:5a:
                    83:48:29:a0:7e:54:78:38:17:fb:f6:fe:26:e6:be:
                    50:4e:6f:f8:a6:08:59:e8:b8:2d:bb:c4:0a:77:45:
                    7a:c5:ec:10:bb:78:07:ba:d5:18:08:b4:a6:f3:a9:
                    40:4d:62:e5:93:71:50:59:6a:86:03:1d:51:8a:9c:
                    7a:24:4d:a9:bc:32:5f:bc:37:5c:42:db:5c:f3:2a:
                    fc:d0:73:2f:0a:f7:84:39:86:d9:75:18:ef:50:38:
                    63:32:9a:e3:0e:e2:01:2f:09:68:26:81:d4:a0:d8:
                    1b:49:9c:4b:3c:d6:25:86:7b:67:1e:79:d2:56:f9:
                    64:01:99:05:a7:ad:02:b2:41:90:fe:e5:bc:b6:aa:
                    f1:fc:f4:62:cf:e2:89:da:af:68:1a:97:fc:36:a2:
                    7a:e1:cd:80:8a:5e:06:4c:be:2f:ff:51:19:57:7f:
                    fb:11:da:a2:02:0b:a5:63:09:9b:2a:6d:7e:1b:5e:
                    13:36:e3:9b:3e:2e:1e:1a:8c:9d:0f:01:05:94:56:
                    8b:9b:cc:80:74:2d:5f:20:17:f9:42:63:55:fd:b9:
                    de:2f:0b:cb:80:de:1b:48:d2:14:05:e2:d3:39:77:
                    59:f6:f6:9d:e0:4d:57:8f:ed:8f:10:5d:fc:56:fa:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:78:82:91:3C:3C:21:65:A5:B1:23:85:90:7C:79:05:CD:14:4D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff4bd6ef-bbc1-3f76-8e6f-2195d175264e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:a022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:98:03:a5:a6:41:39:fe:84:02:1b:17:f9:ae:0c:7a:d0:
         01:6d:4c:b9:f4:14:40:b8:0d:9c:91:fa:bd:9a:b5:86:f9:00:
         bb:22:2c:96:37:80:aa:61:2f:a5:9a:34:40:b6:43:30:75:ab:
         3f:3a:06:67:49:be:75:d5:97:e0:11:48:ef:64:2d:ce:3b:05:
         b6:1a:63:3d:a1:99:30:15:dd:3b:c5:b6:9c:94:56:8f:4d:e4:
         5b:c5:a3:c4:4e:82:a6:38:08:0b:81:d6:cb:65:af:ba:47:f6:
         d4:44:b4:09:82:b2:7d:f9:38:df:68:e9:d9:f8:cb:46:71:1d:
         06:7b:66:a8:d6:72:22:ff:00:9b:50:55:e4:d2:5f:d6:4f:32:
         2f:9e:2a:4c:75:83:bc:29:14:97:e0:ea:c1:71:2b:1a:6b:74:
         a3:0b:6b:a8:4a:b6:06:85:0d:9b:0c:4d:a9:c1:4f:9a:f3:b4:
         4a:9f:4f:af:18:ac:ca:28:23:12:a2:4b:7b:ee:d9:58:52:09:
         7a:21:10:56:38:15:5f:27:6e:40:cc:2e:e3:80:d3:02:76:4a:
         02:f8:06:2f:25:a6:86:51:ee:3e:4c:57:44:ab:df:5e:ec:09:
         22:09:47:fb:ca:cb:29:82:24:77:c3:a8:c2:2b:31:30:be:90:
         9a:e6:a8:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzcZ9IpcKTRR6XhfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
ODkzZTE3YmYtYmRmNi00YTEwLWI5ZmUtNDMwNmZmNjdjNTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipOKxYk+x+TSnChHZlqDSCmgflR4OBf79v4m
5r5QTm/4pghZ6Lgtu8QKd0V6xewQu3gHutUYCLSm86lATWLlk3FQWWqGAx1Ripx6
JE2pvDJfvDdcQttc8yr80HMvCveEOYbZdRjvUDhjMprjDuIBLwloJoHUoNgbSZxL
PNYlhntnHnnSVvlkAZkFp60CskGQ/uW8tqrx/PRiz+KJ2q9oGpf8NqJ64c2Ail4G
TL4v/1EZV3/7EdqiAgulYwmbKm1+G14TNuObPi4eGoydDwEFlFaLm8yAdC1fIBf5
QmNV/bneLwvLgN4bSNIUBeLTOXdZ9vad4E1Xj+2PEF38VvoDNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNV4gpE8PCFlpbEjhZB8eQXNFE1KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmY0YmQ2ZWYtYmJjMS0z
Zjc2LThlNmYtMjE5NWQxNzUyNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQAKAi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACMtmAOlpkE5/oQCGxf5rgx60AFtTLn0FEC4DZyR+r2atYb5ALsi
LJY3gKphL6WaNEC2QzB1qz86BmdJvnXVl+ARSO9kLc47BbYaYz2hmTAV3TvFtpyU
Vo9N5FvFo8ROgqY4CAuB1stlr7pH9tREtAmCsn35ON9o6dn4y0ZxHQZ7ZqjWciL/
AJtQVeTSX9ZPMi+eKkx1g7wpFJfg6sFxKxprdKMLa6hKtgaFDZsMTanBT5rztEqf
T68YrMooIxKiS3vu2VhSCXohEFY4FV8nbkDMLuOA0wJ2SgL4Bi8lpoZR7j5MV0Sr
317sCSIJR/vKyymCJHfDqMIrMTC+kJrmqHM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:43 2026 by rpki-client