Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa
File:                     4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa (raw, json)
Hash identifier:          jXKz99+2C5brzEx2ZWEr+DActJ/gWgVvxUqd7hpG3vY=
Subject key identifier:   F4:01:0D:0D:9A:B0:C0:A2:46:E8:F7:23:D9:87:93:15:70:B0:F1:A0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4C54AE5EA0B627CC2ADBCF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        2600:1012:b230::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:ae:5e:a0:b6:27:cc:2a:db:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=054d6791-5671-4219-aaf6-e78a2af2c065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:33:a5:84:6e:ea:4f:bf:7c:2d:a3:c6:b6:
                    53:44:6b:5a:db:75:fa:f3:5d:44:60:f2:13:e2:cb:
                    c9:73:6b:96:2b:53:81:79:c6:5b:ae:aa:e4:35:95:
                    24:ba:1e:06:3c:b9:6e:3c:39:1d:69:0d:d5:6f:bf:
                    77:5d:53:80:87:6a:6b:f4:94:3a:0b:63:02:f4:f2:
                    88:e2:ff:be:71:04:8d:68:01:3c:0c:61:01:b3:79:
                    ed:50:67:a7:3d:9d:0d:ad:df:9c:16:ce:7d:c0:53:
                    d0:1b:ee:da:6b:ae:5a:26:81:3f:20:b9:2f:3e:8d:
                    e9:48:29:b4:ed:b0:50:68:ba:1d:a4:b3:ee:76:fd:
                    b8:86:c4:bc:cb:46:37:ac:f4:93:e9:08:75:52:ad:
                    98:6d:7d:61:75:23:c3:1f:d9:cc:c5:11:b3:b7:d9:
                    c4:07:e6:0c:c8:ab:2e:f3:5f:58:b3:e8:e9:ed:42:
                    29:e9:95:81:b2:43:a4:53:53:9d:98:74:e8:0b:0f:
                    d6:0c:fd:25:31:d4:32:78:74:86:ac:5a:d0:77:fb:
                    ef:1a:22:d6:90:c3:c8:9c:fc:b7:5a:1f:b9:f7:25:
                    8b:55:b0:d7:aa:35:f3:d6:54:6a:aa:57:cf:71:19:
                    81:49:03:94:66:4b:d4:0e:8f:56:8f:1a:f7:ab:3d:
                    a8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:0D:0D:9A:B0:C0:A2:46:E8:F7:23:D9:87:93:15:70:B0:F1:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b230::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:aa:49:50:a1:ee:d3:b1:66:58:0f:1a:e1:fe:86:91:9a:98:
         95:2d:3c:d1:0b:2b:99:ca:28:f0:af:8d:25:67:c6:13:c7:9f:
         84:2b:f4:15:05:07:ff:3d:64:a7:fa:fe:f2:9d:77:5a:52:71:
         78:e3:25:f6:91:1b:cf:8c:e2:93:46:c5:a6:d1:bc:93:e4:9b:
         ae:c0:27:b4:73:ab:14:7e:9d:b8:2d:44:a6:cb:9b:4a:41:d1:
         41:d4:4d:fc:3c:e4:e1:94:a6:c5:60:68:1c:32:d2:17:ef:76:
         b6:3f:04:fe:19:05:0c:75:8b:18:4d:a4:88:ad:41:a1:b1:79:
         7a:43:50:30:94:1f:8a:4a:59:ac:4c:76:cf:80:a8:49:6b:11:
         87:1e:70:bd:39:0f:1c:df:ec:7d:eb:7c:18:8d:73:f5:67:74:
         54:db:c9:72:c8:9e:8f:2d:b2:83:dd:c1:1a:e8:ec:b6:64:aa:
         e8:a6:43:26:b5:84:72:f9:1a:ec:23:63:b7:4b:d4:16:0b:8c:
         23:b5:4d:2c:ea:81:91:35:22:dd:0d:1b:30:7e:18:2b:5d:8e:
         2f:3a:2a:34:22:39:c9:a2:3b:23:c0:ad:b2:90:e0:42:33:37:
         4b:de:61:16:26:11:ed:4e:36:75:50:de:23:90:c0:30:90:7a:
         21:ca:4c:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5MVK5eoLYnzCrbz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
MDU0ZDY3OTEtNTY3MS00MjE5LWFhZjYtZTc4YTJhZjJjMDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RMzpYRu6k+/fC2jxrZTRGta23X6811EYPIT
4svJc2uWK1OBecZbrqrkNZUkuh4GPLluPDkdaQ3Vb793XVOAh2pr9JQ6C2MC9PKI
4v++cQSNaAE8DGEBs3ntUGenPZ0Nrd+cFs59wFPQG+7aa65aJoE/ILkvPo3pSCm0
7bBQaLodpLPudv24hsS8y0Y3rPST6Qh1Uq2YbX1hdSPDH9nMxRGzt9nEB+YMyKsu
819Ys+jp7UIp6ZWBskOkU1OdmHToCw/WDP0lMdQyeHSGrFrQd/vvGiLWkMPInPy3
Wh+59yWLVbDXqjXz1lRqqlfPcRmBSQOUZkvUDo9Wjxr3qz2oYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPQBDQ2asMCiRuj3I9mHkxVwsPGgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGZjYzlmMDItNWI0OS0z
MWUxLTlhYTEtMjhmYzU4NmQyZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQErIw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEWqSVCh7tOxZlgPGuH+hpGamJUtPNELK5nKKPCvjSVnxhPHn4Qr
9BUFB/89ZKf6/vKdd1pScXjjJfaRG8+M4pNGxabRvJPkm67AJ7RzqxR+nbgtRKbL
m0pB0UHUTfw85OGUpsVgaBwy0hfvdrY/BP4ZBQx1ixhNpIitQaGxeXpDUDCUH4pK
WaxMds+AqElrEYcecL05Dxzf7H3rfBiNc/VndFTbyXLIno8tsoPdwRro7LZkquim
Qya1hHL5GuwjY7dL1BYLjCO1TSzqgZE1It0NGzB+GCtdji86KjQiOcmiOyPArbKQ
4EIzN0veYRYmEe1ONnVQ3iOQwDCQeiHKTGg=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:35:36 2026 by rpki-client