Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65888da9-f2bd-31eb-b7dc-ec2c31d008f9.roa
File:                     65888da9-f2bd-31eb-b7dc-ec2c31d008f9.roa (raw, json)
Hash identifier:          9la4FtDftqIVKIahGuPfDDgLmOfM+r5gF8So6WsNOBs=
Subject key identifier:   25:EC:7F:D9:EF:48:E6:C1:3A:D8:A6:10:90:D7:DB:AE:99:6C:22:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB809DE9838D8702C56D4E480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65888da9-f2bd-31eb-b7dc-ec2c31d008f9.roa
Signing time:             Mon 03 Aug 2026 22:57:08 +0000
ROA not before:           Mon 03 Aug 2026 22:57:08 +0000
ROA not after:            Sun 01 Nov 2026 23:57:08 +0000
asID:                     5650
IP address blocks:        2001:1960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:09:de:98:38:d8:70:2c:56:d4:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  3 22:57:08 2026 GMT
            Not After : Nov  1 23:57:08 2026 GMT
        Subject: CN=35c5a0b8-25d4-477b-a4c2-cf02548fce55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:2a:f0:29:68:42:12:d0:b2:6b:bd:a1:80:
                    9e:1c:2b:82:84:76:eb:56:5f:3b:bc:f2:d4:e2:42:
                    0b:94:a7:e7:0f:1b:cd:ad:81:4d:b7:ab:41:f3:ee:
                    69:d6:84:47:56:5e:42:e2:6d:90:a7:d9:d9:5a:2d:
                    4e:7e:1e:67:d8:f2:20:55:f0:1d:a6:7e:01:ff:83:
                    68:93:d5:6a:c3:f8:8e:13:0b:d6:2f:26:61:01:11:
                    d4:a3:de:fd:7e:a9:4b:dc:c6:f2:c6:34:84:27:a7:
                    bb:0e:fa:f4:91:ab:7e:15:e0:69:92:90:02:19:10:
                    14:41:34:2f:7a:44:c7:14:73:80:f5:1f:66:8d:93:
                    72:d4:18:43:15:c8:4e:13:ae:be:e0:15:4c:f2:2d:
                    e8:cc:95:cd:bc:ff:6f:f9:0c:6d:d7:de:cb:a8:e8:
                    8f:c7:a6:c0:33:fe:d7:ce:4a:86:02:3f:ae:a1:be:
                    18:3d:b6:88:25:3c:0e:be:1f:04:d4:bd:fc:ff:48:
                    65:eb:2a:4a:5d:72:98:45:56:1b:67:cd:da:28:f6:
                    54:92:dc:c1:68:34:89:2b:26:50:3b:8e:7e:02:78:
                    2e:54:cc:42:e3:08:21:70:7a:00:9b:9f:8f:2e:d9:
                    b1:1b:52:0c:67:5b:9e:a5:6e:50:58:65:93:2d:4e:
                    68:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EC:7F:D9:EF:48:E6:C1:3A:D8:A6:10:90:D7:DB:AE:99:6C:22:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65888da9-f2bd-31eb-b7dc-ec2c31d008f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1960::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:da:86:e3:bc:36:83:ce:55:ff:d5:1b:6c:50:42:68:d7:cd:
         2b:bc:47:05:7e:5b:55:0b:7e:9e:80:e7:72:0e:92:0a:ca:66:
         ad:b6:34:71:78:8e:b4:2d:82:a2:eb:9d:a7:24:8b:59:cf:09:
         7a:46:12:8b:f6:c0:88:57:3f:15:2a:7a:33:9b:3f:55:6a:21:
         73:e8:6e:0f:ee:a2:68:ae:22:97:34:70:0e:c1:cd:c1:73:e9:
         a2:9b:f5:bc:80:60:b0:a3:b6:0b:87:29:b7:41:b5:a8:2b:48:
         b9:17:76:0f:b5:bd:fc:4e:6a:ba:79:b1:36:b5:d5:73:a8:90:
         3e:c6:d5:59:c7:f9:ec:7f:eb:a6:e2:2e:e8:4e:0b:29:18:44:
         87:9b:05:44:ec:f2:cb:8f:92:c0:e3:68:74:2f:3f:d1:29:2b:
         8c:6c:c3:0b:5d:38:5a:2e:d1:c9:7b:74:c8:66:f1:e0:13:07:
         2d:5d:2a:1c:3d:63:4d:c6:8d:05:16:d5:c9:5b:cb:94:04:61:
         aa:ca:5e:f4:dc:b8:69:6f:32:45:22:b2:8c:0d:11:26:d4:be:
         6b:74:9c:12:b9:8b:e9:e9:87:f1:9e:2c:2a:db:ef:75:4b:54:
         e8:77:4d:18:b6:87:ed:cf:2c:e2:68:1a:2e:39:8d:bd:92:24:
         42:1a:e2:0a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE64Cd6YONhwLFbU5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgwMzIyNTcwOFoXDTI2MTEwMTIzNTcwOFowLzEtMCsGA1UEAxMk
MzVjNWEwYjgtMjVkNC00NzdiLWE0YzItY2YwMjU0OGZjZTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgMq8CloQhLQsmu9oYCeHCuChHbrVl87vPLU
4kILlKfnDxvNrYFNt6tB8+5p1oRHVl5C4m2Qp9nZWi1Ofh5n2PIgVfAdpn4B/4No
k9Vqw/iOEwvWLyZhARHUo979fqlL3MbyxjSEJ6e7Dvr0kat+FeBpkpACGRAUQTQv
ekTHFHOA9R9mjZNy1BhDFchOE66+4BVM8i3ozJXNvP9v+Qxt197LqOiPx6bAM/7X
zkqGAj+uob4YPbaIJTwOvh8E1L38/0hl6ypKXXKYRVYbZ83aKPZUktzBaDSJKyZQ
O45+AnguVMxC4wghcHoAm5+PLtmxG1IMZ1uepW5QWGWTLU5o2wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCXsf9nvSObBOtimEJDX266ZbCJwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjU4ODhkYTktZjJiZC0z
MWViLWI3ZGMtZWMyYzMxZDAwOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZYDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCj2objvDaDzlX/1RtsUEJo180rvEcFfltVC36egOdyDpIKymattjRx
eI60LYKi652nJItZzwl6RhKL9sCIVz8VKnozmz9VaiFz6G4P7qJoriKXNHAOwc3B
c+mim/W8gGCwo7YLhym3QbWoK0i5F3YPtb38Tmq6ebE2tdVzqJA+xtVZx/nsf+um
4i7oTgspGESHmwVE7PLLj5LA42h0Lz/RKSuMbMMLXThaLtHJe3TIZvHgEwctXSoc
PWNNxo0FFtXJW8uUBGGqyl703LhpbzJFIrKMDREm1L5rdJwSuYvp6Yfxniwq2+91
S1Tod00YtoftzyziaBouOY29kiRCGuIK
-----END CERTIFICATE-----
Generated at Thu Aug 27 21:40:44 2026 by rpki-client