Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/034c5557-f598-3487-99f7-1129b8b828cf.roa
File:                     034c5557-f598-3487-99f7-1129b8b828cf.roa (raw, json)
Hash identifier:          3nAeg5wcu+VH10pPxb1OjHnNlAAd0pw3yLjEfSuRdZE=
Subject key identifier:   87:37:E3:8C:E2:13:34:E3:5C:41:0D:26:29:A2:C3:64:A1:08:7B:8E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2D9F0147B79502F5FE179600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/034c5557-f598-3487-99f7-1129b8b828cf.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        2600:1009:b1b8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:01:47:b7:95:02:f5:fe:17:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=3fbb2727-c3a3-4ecc-ab3b-5da935c098df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:32:c3:38:0e:b3:43:47:1f:ad:8c:e1:9c:
                    2c:74:40:87:e9:80:68:82:2d:df:4d:49:6a:01:00:
                    5d:88:49:ae:86:09:78:75:35:84:89:0a:c5:92:eb:
                    51:96:dd:b3:da:c1:65:bd:82:b4:2f:1c:f0:c6:18:
                    21:b6:20:b1:5b:d8:e3:38:5a:e4:8a:09:b5:8b:25:
                    d6:b5:bd:7a:4f:a3:22:16:b1:00:d9:80:86:8a:be:
                    b3:db:23:80:c4:54:63:a3:7b:b4:8a:b9:d2:33:68:
                    db:79:66:a3:3e:1c:6c:14:af:88:12:33:49:04:c3:
                    8b:28:0c:55:21:11:0a:7d:90:dd:86:85:8c:98:e5:
                    87:ae:92:2d:21:f6:66:00:3c:ed:3f:ee:33:f3:e6:
                    7b:f8:1f:a3:e2:8f:de:4b:8b:3a:68:ae:b5:52:85:
                    13:09:4b:32:db:8a:16:04:11:23:ec:95:17:31:f0:
                    4c:e2:06:cc:21:b7:1e:8c:b0:67:2d:d2:1e:8b:82:
                    11:89:4a:f3:fc:0c:70:2a:ff:95:7c:78:95:fb:be:
                    8a:5b:cb:a5:c5:f4:fb:1f:da:39:f9:a7:cb:83:97:
                    66:27:75:28:8a:ba:83:b1:2b:52:8f:c0:d3:73:43:
                    75:dd:f2:37:f1:25:86:d1:20:b6:86:2f:51:79:07:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:37:E3:8C:E2:13:34:E3:5C:41:0D:26:29:A2:C3:64:A1:08:7B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/034c5557-f598-3487-99f7-1129b8b828cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b1b8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4b:7d:af:c6:1f:e4:b1:26:2a:16:be:a4:ef:66:fa:37:b3:
         72:fe:5b:38:fd:81:a4:b0:e9:8a:d6:c8:cf:79:10:58:8d:65:
         eb:e6:f0:5e:c9:2d:1c:16:17:2f:d3:8c:5a:1d:74:03:cf:a5:
         74:89:29:be:6c:94:97:01:95:7c:d4:ef:52:93:e2:ce:74:74:
         87:e8:7f:a6:88:d2:37:28:a4:0d:74:71:12:21:e0:35:da:7f:
         01:be:3a:46:b2:95:c5:e7:88:c8:aa:9a:eb:8f:6d:49:d5:92:
         36:4d:0a:48:fe:96:91:93:29:1a:99:b8:c6:02:52:9a:1b:91:
         8a:fa:64:8b:e2:6b:73:07:c4:58:19:21:c3:d6:91:e9:dd:f4:
         4f:1d:df:83:fd:83:79:86:6b:03:bc:6b:68:28:3d:b8:87:93:
         3a:73:d3:cb:c0:cf:83:41:ef:5e:6e:57:60:5b:65:93:34:29:
         f3:2d:1c:92:31:48:2e:6f:43:f9:f2:ba:75:76:d1:14:75:33:
         70:ed:45:32:f9:1c:ad:5b:48:ee:99:64:4b:6b:21:9f:86:af:
         5e:99:3d:04:24:73:f3:6e:52:d2:b3:dd:46:da:6d:e2:5e:44:
         69:2f:56:fb:46:06:7c:0b:98:43:1e:d7:fb:b1:f7:40:4c:75:
         7c:0d:73:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4tnwFHt5UC9f4XlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
M2ZiYjI3MjctYzNhMy00ZWNjLWFiM2ItNWRhOTM1YzA5OGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOgywzgOs0NHH62M4ZwsdECH6YBogi3fTUlq
AQBdiEmuhgl4dTWEiQrFkutRlt2z2sFlvYK0LxzwxhghtiCxW9jjOFrkigm1iyXW
tb16T6MiFrEA2YCGir6z2yOAxFRjo3u0irnSM2jbeWajPhxsFK+IEjNJBMOLKAxV
IREKfZDdhoWMmOWHrpItIfZmADztP+4z8+Z7+B+j4o/eS4s6aK61UoUTCUsy24oW
BBEj7JUXMfBM4gbMIbcejLBnLdIei4IRiUrz/AxwKv+VfHiV+76KW8ulxfT7H9o5
+afLg5dmJ3UoirqDsStSj8DTc0N13fI38SWG0SC2hi9ReQfJEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIc344ziEzTjXEENJimiw2ShCHuOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDM0YzU1NTctZjU5OC0z
NDg3LTk5ZjctMTEyOWI4YjgyOGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQCbG4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE5Lfa/GH+SxJioWvqTvZvo3s3L+Wzj9gaSw6YrWyM95EFiNZevm
8F7JLRwWFy/TjFoddAPPpXSJKb5slJcBlXzU71KT4s50dIfof6aI0jcopA10cRIh
4DXafwG+OkaylcXniMiqmuuPbUnVkjZNCkj+lpGTKRqZuMYCUpobkYr6ZIvia3MH
xFgZIcPWkend9E8d34P9g3mGawO8a2goPbiHkzpz08vAz4NB715uV2BbZZM0KfMt
HJIxSC5vQ/nyunV20RR1M3DtRTL5HK1bSO6ZZEtrIZ+Gr16ZPQQkc/NuUtKz3Uba
beJeRGkvVvtGBnwLmEMe1/ux90BMdXwNcyc=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:40:41 2026 by rpki-client