Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5289aa19-a2d8-3480-8db0-07af7b747a41.roa
File:                     5289aa19-a2d8-3480-8db0-07af7b747a41.roa (raw, json)
Hash identifier:          ex4INwMcmFNUtLsqJcKUiHJGNCW8LXDDUlsA07Uc6sk=
Subject key identifier:   28:CA:76:4D:49:89:5E:7D:23:EE:36:75:79:E5:A3:88:D0:27:47:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B4B77FB16F87CF50C7A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5289aa19-a2d8-3480-8db0-07af7b747a41.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:1009:b170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:4b:77:fb:16:f8:7c:f5:0c:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=b8194b0f-37c2-4a9d-a7f8-37928f85e1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:bf:ec:1d:ce:c3:76:c4:1c:7c:0e:ca:c7:
                    33:11:cb:90:c2:f2:dd:84:85:2c:58:c7:53:11:34:
                    6d:d5:d0:9d:37:07:7a:87:ee:c9:ae:07:14:58:ce:
                    bf:de:fe:ac:7d:98:76:62:8f:84:7f:a8:91:dd:72:
                    95:4e:ba:3b:12:90:bc:d8:16:a4:b9:65:65:2d:d3:
                    95:24:a3:b4:9f:a0:2b:8d:e7:75:00:ee:fa:aa:b6:
                    2e:4a:f5:72:91:44:00:53:13:6e:08:74:66:ce:a8:
                    56:26:84:b7:21:42:76:63:d6:68:9c:85:15:6d:5b:
                    b4:d3:6e:94:45:7c:f7:ef:e5:9d:dd:a9:17:03:6f:
                    c6:e5:3c:d1:47:76:46:0a:31:34:04:e9:e6:eb:65:
                    d2:bf:c6:dc:3a:ed:d7:11:c6:43:88:df:f1:b1:41:
                    31:fa:9f:32:5a:db:2a:fc:8d:e2:8d:e3:49:c1:f9:
                    e0:86:7d:3d:1e:06:9e:35:2c:98:23:58:81:8b:62:
                    bd:a5:25:52:1a:2b:64:a2:77:8d:64:f4:06:07:81:
                    14:ff:4f:9e:7b:cf:e4:3b:44:c3:07:d7:0a:57:ee:
                    00:89:e2:15:e5:12:33:d5:03:c9:23:fb:50:9c:51:
                    54:0c:b2:78:5c:8d:2f:6c:a7:da:5f:0f:4b:e7:fa:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CA:76:4D:49:89:5E:7D:23:EE:36:75:79:E5:A3:88:D0:27:47:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5289aa19-a2d8-3480-8db0-07af7b747a41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5c:f2:79:55:f4:07:a0:12:a7:b9:56:80:5e:32:2d:6e:90:
         87:a8:5e:e6:bb:3f:76:5b:c0:68:da:49:8c:80:30:ba:86:4e:
         1d:e9:4b:d5:16:5a:7e:51:a3:93:5b:3a:63:0b:19:ce:e6:d5:
         6d:41:ea:2a:f5:32:81:d2:97:f4:7c:97:76:85:a3:3c:62:50:
         66:80:36:78:cb:7d:9a:49:cb:65:c7:d0:59:c3:4f:f3:0c:34:
         ea:13:96:af:0d:f9:ed:15:e6:63:0b:87:2f:fe:20:93:a5:1e:
         77:54:75:10:66:5e:16:2b:f8:b2:ee:57:68:f0:61:ad:44:38:
         d3:cc:84:8a:6b:19:16:41:ed:9a:0e:a9:0f:e9:3d:37:51:8c:
         86:00:f6:60:7d:66:33:fc:43:fc:1b:2e:2d:f7:9f:25:e0:5d:
         f7:23:f3:e9:1a:ed:24:bb:67:5f:07:08:cf:f3:9f:b4:d2:27:
         06:8c:7c:d5:2c:58:1c:c6:bc:f1:90:8d:c6:ae:fd:b2:79:e7:
         15:da:62:c0:b7:e1:7a:93:76:98:81:d7:60:aa:e0:9d:14:1b:
         41:43:a9:f7:96:51:f5:4e:1d:34:36:4a:75:a1:be:ef:12:c3:
         f7:51:91:b2:c1:d3:65:3c:5a:4f:c6:fb:66:2d:e5:87:cc:39:
         f3:8e:4c:4a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3kG0t3+xb4fPUMeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
YjgxOTRiMGYtMzdjMi00YTlkLWE3ZjgtMzc5MjhmODVlMWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8u/7B3Ow3bEHHwOysczEcuQwvLdhIUsWMdT
ETRt1dCdNwd6h+7JrgcUWM6/3v6sfZh2Yo+Ef6iR3XKVTro7EpC82BakuWVlLdOV
JKO0n6Arjed1AO76qrYuSvVykUQAUxNuCHRmzqhWJoS3IUJ2Y9ZonIUVbVu0026U
RXz37+Wd3akXA2/G5TzRR3ZGCjE0BOnm62XSv8bcOu3XEcZDiN/xsUEx+p8yWtsq
/I3ijeNJwfnghn09HgaeNSyYI1iBi2K9pSVSGitkoneNZPQGB4EU/0+ee8/kO0TD
B9cKV+4AieIV5RIz1QPJI/tQnFFUDLJ4XI0vbKfaXw9L5/qHKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCjKdk1JiV59I+42dXnlo4jQJ0dbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTI4OWFhMTktYTJkOC0z
NDgwLThkYjAtMDdhZjdiNzQ3YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCbFw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALFc8nlV9AegEqe5VoBeMi1ukIeoXua7P3ZbwGjaSYyAMLqGTh3p
S9UWWn5Ro5NbOmMLGc7m1W1B6ir1MoHSl/R8l3aFozxiUGaANnjLfZpJy2XH0FnD
T/MMNOoTlq8N+e0V5mMLhy/+IJOlHndUdRBmXhYr+LLuV2jwYa1EONPMhIprGRZB
7ZoOqQ/pPTdRjIYA9mB9ZjP8Q/wbLi33nyXgXfcj8+ka7SS7Z18HCM/zn7TSJwaM
fNUsWBzGvPGQjcau/bJ55xXaYsC34XqTdpiB12Cq4J0UG0FDqfeWUfVOHTQ2SnWh
vu8Sw/dRkbLB02U8Wk/G+2Yt5YfMOfOOTEo=
-----END CERTIFICATE-----
Generated at Thu May 28 20:07:21 2026 by rpki-client