Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dda30-845a-3129-b5da-6bddf2ab9520.roa
File:                     563dda30-845a-3129-b5da-6bddf2ab9520.roa (raw, json)
Hash identifier:          w/Qgv372c2vB6Ebbe4PvfhJ0l9cIwtoSpyVWEhJMhI0=
Subject key identifier:   B6:8E:F6:CA:29:B0:26:92:7A:DE:DB:0A:E7:06:3E:15:7B:54:00:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B53D772C9A890D9F3AF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dda30-845a-3129-b5da-6bddf2ab9520.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     22394
IP address blocks:        2600:100c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:53:d7:72:c9:a8:90:d9:f3:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=2e0fb2a2-acbc-45eb-925b-f297c4e19e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:14:cd:a1:ec:16:99:9e:a9:3e:e6:d7:c9:
                    4a:26:7a:5f:93:26:ea:a5:52:c9:bc:82:87:42:12:
                    ce:6d:69:63:61:9a:d8:ca:ef:50:0c:1c:bd:69:cd:
                    6b:20:83:17:3f:49:0a:11:d2:29:94:1c:66:17:e4:
                    b9:a7:19:34:16:66:8e:10:ef:53:dd:5a:ed:ef:17:
                    4c:d6:dc:1b:85:35:cd:ac:79:83:5d:ad:6a:b2:cf:
                    d4:83:e4:12:e4:fe:f0:2a:2f:a3:8d:83:92:47:d0:
                    dc:d1:ab:ef:70:11:66:ae:0f:f5:06:b9:05:8a:2f:
                    64:a4:c7:60:77:ef:af:3e:46:ce:dd:49:72:07:4f:
                    72:39:7a:04:3c:8f:b0:68:d4:92:fb:d8:8b:83:75:
                    ff:c4:fa:e7:f5:0b:94:e8:15:77:41:bc:1c:f7:54:
                    7e:81:97:a0:cc:99:57:42:e8:82:73:e6:aa:4b:a3:
                    bf:87:5d:9b:4f:48:f9:d8:9f:12:ce:50:de:95:a1:
                    78:3b:b7:79:e0:24:35:30:03:d6:7e:97:f8:ab:a8:
                    11:fc:79:56:f0:f2:f1:bf:e3:c3:ef:08:ff:5a:2b:
                    35:2c:94:0c:78:0f:83:87:15:aa:af:ca:81:4a:0c:
                    7e:f5:08:e0:9c:d4:ba:3b:e1:4a:ff:03:12:59:bc:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8E:F6:CA:29:B0:26:92:7A:DE:DB:0A:E7:06:3E:15:7B:54:00:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dda30-845a-3129-b5da-6bddf2ab9520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:93:f9:3a:69:42:b1:d9:70:9d:ed:ed:1d:a1:0a:8d:4b:7b:
         48:09:c5:3b:b3:3b:c3:2b:2e:e6:f9:98:f9:3f:84:d4:4f:99:
         1a:a2:3d:10:73:8d:ff:bf:73:cb:86:58:3b:ae:c2:7a:6e:f1:
         81:83:64:ad:d4:47:ca:fe:e9:a7:0f:5a:25:44:1d:eb:1f:a5:
         c8:ff:3d:3d:d0:a2:57:21:a0:34:88:1f:1a:de:b5:9c:44:45:
         d4:63:67:13:54:ac:c7:99:9b:c3:c3:86:88:8c:f4:4e:78:a2:
         11:35:ef:02:0f:83:68:d3:a5:c3:c3:bd:56:9b:dd:14:8c:07:
         94:58:80:26:a2:b9:6d:8c:7e:c3:aa:d7:cf:e4:cb:ab:18:d2:
         f0:fd:9b:a6:ec:7b:b4:bc:f7:2d:9f:b2:be:bf:7f:99:cb:5a:
         9f:b3:10:b5:89:11:3c:7e:06:a2:8f:db:b9:7f:03:0f:54:2e:
         4f:d2:e7:2a:99:fa:41:fb:a3:50:14:38:29:64:9a:73:81:ed:
         a9:e4:08:60:34:63:48:27:35:ad:5a:0d:c9:1d:ab:43:a7:5a:
         41:fc:dc:ae:be:54:38:08:e5:27:fe:dd:e7:35:ea:ed:54:d0:
         7e:c2:9c:b0:e9:93:82:f5:ea:ff:7f:e6:8f:a4:03:77:d8:20:
         42:c7:bf:da
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3kG1PXcsmokNnzr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
MmUwZmIyYTItYWNiYy00NWViLTkyNWItZjI5N2M0ZTE5ZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDcUzaHsFpmeqT7m18lKJnpfkybqpVLJvIKH
QhLObWljYZrYyu9QDBy9ac1rIIMXP0kKEdIplBxmF+S5pxk0FmaOEO9T3Vrt7xdM
1twbhTXNrHmDXa1qss/Ug+QS5P7wKi+jjYOSR9Dc0avvcBFmrg/1BrkFii9kpMdg
d++vPkbO3UlyB09yOXoEPI+waNSS+9iLg3X/xPrn9QuU6BV3Qbwc91R+gZegzJlX
QuiCc+aqS6O/h12bT0j52J8SzlDelaF4O7d54CQ1MAPWfpf4q6gR/HlW8PLxv+PD
7wj/Wis1LJQMeA+DhxWqr8qBSgx+9QjgnNS6O+FK/wMSWbwHYQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLaO9sopsCaSet7bCucGPhV7VAAYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTYzZGRhMzAtODQ1YS0z
MTI5LWI1ZGEtNmJkZGYyYWI5NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAQDDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCBk/k6aUKx2XCd7e0doQqNS3tICcU7szvDKy7m+Zj5P4TUT5kaoj0Q
c43/v3PLhlg7rsJ6bvGBg2St1EfK/umnD1olRB3rH6XI/z090KJXIaA0iB8a3rWc
REXUY2cTVKzHmZvDw4aIjPROeKIRNe8CD4No06XDw71Wm90UjAeUWIAmorltjH7D
qtfP5MurGNLw/Zum7Hu0vPctn7K+v3+Zy1qfsxC1iRE8fgaij9u5fwMPVC5P0ucq
mfpB+6NQFDgpZJpzge2p5AhgNGNIJzWtWg3JHatDp1pB/NyuvlQ4COUn/t3nNert
VNB+wpyw6ZOC9er/f+aPpAN32CBCx7/a
-----END CERTIFICATE-----
Generated at Thu May 21 22:46:56 2026 by rpki-client