Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a749de6-9d5a-3abd-96be-c42291c7c683.roa
File:                     5a749de6-9d5a-3abd-96be-c42291c7c683.roa (raw, json)
Hash identifier:          8vDCY5RyDZ8JwnY7MplkEn78klNdw20CZqEVWO/qi2s=
Subject key identifier:   48:B3:A3:FC:62:BB:F4:29:D6:4B:69:BE:0C:82:E4:5F:B6:7B:23:50
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640FD6B5F6FD30E05F4E3880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a749de6-9d5a-3abd-96be-c42291c7c683.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        2600:1004:a125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:d6:b5:f6:fd:30:e0:5f:4e:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=a1f4d639-aeda-476f-832b-687ab3f82538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7d:89:46:ca:59:92:64:6a:6a:0e:a9:96:a2:
                    78:12:91:05:09:08:7e:9a:dc:13:d5:37:47:b5:a3:
                    e9:5c:e3:4d:78:0e:87:ad:54:3a:92:23:63:ed:59:
                    d9:b8:5a:e8:f0:e5:26:ae:2d:f9:58:d4:f3:6d:b1:
                    94:82:64:32:10:01:c5:44:88:5c:11:de:3c:6b:07:
                    91:56:95:0f:0f:01:a6:11:82:1d:cc:82:d5:4c:8d:
                    e8:2d:00:43:dd:12:35:24:a5:b9:b6:3c:72:ff:19:
                    69:52:5f:85:f2:dd:b4:09:76:7e:95:7c:e9:97:b2:
                    7f:4c:4f:3e:af:0e:7c:20:cc:34:a4:8e:b9:44:07:
                    60:a5:f3:e9:a1:9a:95:93:40:3a:0b:c4:09:5c:ca:
                    0c:6f:e8:33:17:a6:97:00:5f:95:1d:f0:46:3a:f2:
                    f9:07:fa:15:0f:bc:bb:da:ba:19:20:02:dc:6e:9e:
                    dc:a5:52:e6:54:d0:72:a6:b1:82:3b:bb:4f:7d:65:
                    f5:f0:7e:f2:80:03:1e:78:be:ef:6b:62:10:c9:46:
                    8f:5a:a0:8b:bb:ce:d5:ff:b2:36:78:86:32:f2:04:
                    d7:91:1a:29:5d:f7:d7:f3:58:d8:cb:09:6a:f1:59:
                    f5:2d:7f:65:2b:86:54:8b:e2:cb:75:64:13:a6:4e:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B3:A3:FC:62:BB:F4:29:D6:4B:69:BE:0C:82:E4:5F:B6:7B:23:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a749de6-9d5a-3abd-96be-c42291c7c683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:c0:3c:56:17:9d:a1:41:3a:38:6e:35:90:9e:d9:f9:08:
         21:3a:a2:76:2e:0e:6d:63:fc:46:21:cc:fc:64:2a:8f:af:24:
         18:04:73:02:2a:b7:1d:17:86:15:42:4d:58:68:0d:dd:ec:80:
         24:6e:23:06:4d:29:71:11:08:28:6a:39:39:c3:31:cc:96:e2:
         8d:71:21:b1:02:d9:8c:93:a5:1f:c5:5c:dc:f7:2f:ae:d9:6a:
         1e:55:16:a3:5b:94:a7:d4:9b:e5:11:a8:21:fb:e3:ca:2f:ee:
         8e:36:96:0b:64:74:5f:f9:7b:05:71:bf:78:38:b9:77:cf:19:
         65:86:24:a8:7a:15:63:39:03:24:bc:95:36:94:48:9d:23:e7:
         bd:96:59:ad:9c:68:aa:09:11:6a:79:4e:e3:44:71:c8:68:dc:
         93:b1:b7:fc:02:d2:51:bd:14:0d:9c:16:23:aa:b0:f0:2e:98:
         6a:c1:08:53:8a:dc:89:e0:44:42:25:18:5f:d4:f3:ea:aa:33:
         08:55:e7:f1:82:d3:16:3d:8a:30:fa:bb:d2:41:5d:ad:b7:08:
         3f:7d:18:bf:eb:63:94:06:cf:92:a6:4b:1e:66:70:83:c2:c4:
         1d:0d:ef:bb:f6:25:6f:37:9e:c9:1d:47:95:64:69:5b:c2:74:
         e7:14:55:f4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5kD9a19v0w4F9OOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
YTFmNGQ2MzktYWVkYS00NzZmLTgzMmItNjg3YWIzZjgyNTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX2JRspZkmRqag6plqJ4EpEFCQh+mtwT1TdH
taPpXONNeA6HrVQ6kiNj7VnZuFro8OUmri35WNTzbbGUgmQyEAHFRIhcEd48aweR
VpUPDwGmEYIdzILVTI3oLQBD3RI1JKW5tjxy/xlpUl+F8t20CXZ+lXzpl7J/TE8+
rw58IMw0pI65RAdgpfPpoZqVk0A6C8QJXMoMb+gzF6aXAF+VHfBGOvL5B/oVD7y7
2roZIALcbp7cpVLmVNByprGCO7tPfWX18H7ygAMeeL7va2IQyUaPWqCLu87V/7I2
eIYy8gTXkRopXffX81jYywlq8Vn1LX9lK4ZUi+LLdWQTpk6b/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEizo/xiu/Qp1ktpvgyC5F+2eyNQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWE3NDlkZTYtOWQ1YS0z
YWJkLTk2YmUtYzQyMjkxYzdjNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBKEl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEz2wDxWF52hQTo4bjWQntn5CCE6onYuDm1j/EYhzPxkKo+vJBgE
cwIqtx0XhhVCTVhoDd3sgCRuIwZNKXERCChqOTnDMcyW4o1xIbEC2YyTpR/FXNz3
L67Zah5VFqNblKfUm+URqCH748ov7o42lgtkdF/5ewVxv3g4uXfPGWWGJKh6FWM5
AyS8lTaUSJ0j572WWa2caKoJEWp5TuNEccho3JOxt/wC0lG9FA2cFiOqsPAumGrB
CFOK3IngREIlGF/U8+qqMwhV5/GC0xY9ijD6u9JBXa23CD99GL/rY5QGz5KmSx5m
cIPCxB0N77v2JW83nskdR5VkaVvCdOcUVfQ=
-----END CERTIFICATE-----
Generated at Tue Jul 7 03:44:25 2026 by rpki-client