Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22192fa3-aa90-32a5-953c-f2263e98616a.roa
File:                     22192fa3-aa90-32a5-953c-f2263e98616a.roa (raw, json)
Hash identifier:          jKd+5889xatQEIFYKXBRucnkU7I2WmfJXRktfz7EEso=
Subject key identifier:   76:28:5F:78:D0:4B:08:6D:30:AC:50:79:4B:93:2C:47:1B:E6:3D:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B40B8C6D5302851D97FF0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22192fa3-aa90-32a5-953c-f2263e98616a.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100f:b080::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:40:b8:c6:d5:30:28:51:d9:7f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=a9b7b980-bb79-4c8e-98a4-4bc75e430352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cc:e0:d2:73:fe:ef:9f:ed:e9:d5:6e:ec:c6:
                    29:c7:f0:98:76:99:d4:9d:af:df:3f:1f:b3:07:d1:
                    99:3c:17:a9:07:8e:e6:53:0b:7a:86:ac:7b:dc:4f:
                    26:d4:03:09:7c:44:45:75:5d:57:21:bf:0d:b9:75:
                    4d:11:4e:ee:4b:59:5d:0b:3b:1f:fe:26:76:9f:85:
                    0b:5d:92:53:51:79:2e:5b:75:e6:aa:94:4c:ab:ac:
                    ed:a6:f2:96:8c:9f:68:c5:b1:98:58:66:91:91:a3:
                    ea:7f:80:88:a5:46:a2:39:e8:21:e7:e0:88:40:ea:
                    85:f2:88:0d:c6:16:8a:59:38:44:f4:fd:33:3b:65:
                    20:af:25:8a:45:7d:f6:df:cd:20:33:3e:5c:47:af:
                    61:1a:46:c9:da:4d:ec:1c:1c:5a:cd:73:d0:7b:03:
                    01:23:c4:05:83:a3:2e:22:1e:91:09:03:a6:fe:00:
                    ea:36:77:35:c1:28:d4:a4:5c:7b:e0:c4:c3:bb:91:
                    fa:b7:51:0d:7d:7a:f9:67:fe:ca:d2:eb:3f:4d:96:
                    12:58:40:73:31:39:a2:a9:91:92:59:34:65:ca:13:
                    bc:e8:1b:eb:21:a4:b7:3c:b0:e5:9e:18:b9:eb:49:
                    76:e8:1b:b0:ad:37:75:2a:61:16:27:0f:49:ad:87:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:28:5F:78:D0:4B:08:6D:30:AC:50:79:4B:93:2C:47:1B:E6:3D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22192fa3-aa90-32a5-953c-f2263e98616a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b080::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:32:5a:37:7d:a6:d5:2b:78:69:0b:4e:f2:1c:33:7d:79:e8:
         9b:83:03:b6:08:9f:84:f3:ed:ce:fa:9e:24:02:80:bf:24:8f:
         69:9c:cf:7e:3c:68:58:68:31:30:d3:3c:5c:bb:93:37:c3:93:
         e3:d5:c0:80:d4:29:5b:a8:c6:8a:e1:0b:74:c6:13:b0:bf:2a:
         47:43:36:1c:cd:ee:78:27:1f:32:91:2e:71:a7:fe:08:af:19:
         28:38:df:d2:c4:3d:0c:ae:e2:f9:0c:64:ac:02:72:e3:74:51:
         97:1d:09:a4:1e:72:9b:d0:e3:f2:eb:30:8f:28:0d:f1:6c:17:
         07:cd:47:e0:dc:dc:c0:ea:a0:b0:bd:6a:94:c0:4f:9d:dd:7c:
         d8:b0:ac:d8:aa:ab:4c:1a:72:c7:f0:39:ad:cb:5c:64:97:ee:
         07:9c:b3:78:ac:61:70:91:97:92:19:1e:ff:09:2f:87:21:02:
         f5:a4:eb:9b:77:e6:76:dc:69:bd:f5:c0:a1:54:a2:0c:19:9b:
         ef:1f:ff:56:14:06:f7:bb:99:44:0a:99:ce:46:7f:25:3f:3e:
         e8:52:54:04:a4:60:d1:65:f8:d3:8d:05:e6:c9:62:67:f6:8b:
         fd:a8:f3:26:5e:92:6e:6f:a2:3d:c3:9a:dd:e3:19:b7:49:06:
         fa:ab:b0:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3kG0C4xtUwKFHZf/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
YTliN2I5ODAtYmI3OS00YzhlLTk4YTQtNGJjNzVlNDMwMzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMzg0nP+75/t6dVu7MYpx/CYdpnUna/fPx+z
B9GZPBepB47mUwt6hqx73E8m1AMJfERFdV1XIb8NuXVNEU7uS1ldCzsf/iZ2n4UL
XZJTUXkuW3XmqpRMq6ztpvKWjJ9oxbGYWGaRkaPqf4CIpUaiOegh5+CIQOqF8ogN
xhaKWThE9P0zO2UgryWKRX32380gMz5cR69hGkbJ2k3sHBxazXPQewMBI8QFg6Mu
Ih6RCQOm/gDqNnc1wSjUpFx74MTDu5H6t1ENfXr5Z/7K0us/TZYSWEBzMTmiqZGS
WTRlyhO86BvrIaS3PLDlnhi560l26BuwrTd1KmEWJw9JrYfmdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHYoX3jQSwhtMKxQeUuTLEcb5j1SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjIxOTJmYTMtYWE5MC0z
MmE1LTk1M2MtZjIyNjNlOTg2MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQD7CA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJcyWjd9ptUreGkLTvIcM3156JuDA7YIn4Tz7c76niQCgL8kj2mc
z348aFhoMTDTPFy7kzfDk+PVwIDUKVuoxorhC3TGE7C/KkdDNhzN7ngnHzKRLnGn
/givGSg439LEPQyu4vkMZKwCcuN0UZcdCaQecpvQ4/LrMI8oDfFsFwfNR+Dc3MDq
oLC9apTAT53dfNiwrNiqq0wacsfwOa3LXGSX7gecs3isYXCRl5IZHv8JL4chAvWk
65t35nbcab31wKFUogwZm+8f/1YUBve7mUQKmc5GfyU/PuhSVASkYNFl+NONBebJ
Ymf2i/2o8yZekm5voj3Dmt3jGbdJBvqrsJg=
-----END CERTIFICATE-----
Generated at Thu May 28 21:03:46 2026 by rpki-client