Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71f1d67e-65e6-3e91-bc55-a28d7a29b2ab.roa
File:                     71f1d67e-65e6-3e91-bc55-a28d7a29b2ab.roa (raw, json)
Hash identifier:          +uquAmQRDd2fdHBY6UnoyBAj4HcaW7EOk36N2mua1J0=
Subject key identifier:   5E:19:1D:21:57:86:37:70:13:F3:4C:29:BB:EC:86:CB:51:DE:2F:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790FFA1997E2774C19D0000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71f1d67e-65e6-3e91-bc55-a28d7a29b2ab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:a110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:ff:a1:99:7e:27:74:c1:9d:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f08ac0cb-4496-4a4f-b7ea-1ee80b509824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:eb:e9:96:5e:12:5f:f7:b0:35:91:65:b2:
                    2e:33:cf:b8:9c:94:c9:64:3f:5c:93:70:e1:32:c4:
                    37:9a:73:35:33:10:3d:d8:10:ed:4a:ff:2a:78:05:
                    e8:fb:cf:b7:b3:01:f7:75:6f:07:ca:d4:3f:f1:d5:
                    5b:05:2b:de:37:13:39:56:ce:cc:7f:43:89:90:95:
                    19:b2:7a:1c:70:c3:1c:a8:5f:4d:c5:97:50:9d:3c:
                    24:2f:8a:c7:07:7e:c1:54:69:1c:23:c7:d4:2b:35:
                    b5:92:e6:dc:6a:28:62:9a:90:bb:e9:3d:cf:5d:8e:
                    63:34:39:0b:07:64:7d:92:07:d2:9a:a7:84:8f:75:
                    e4:9a:78:b3:5d:0a:60:ec:3b:25:d6:8e:36:00:1d:
                    56:6b:31:4e:88:87:6e:e4:13:3a:31:f6:66:46:a8:
                    fe:7c:7e:17:9a:31:00:40:92:d7:c7:60:b0:8f:be:
                    6e:46:e5:c9:a4:0b:b0:1e:ed:77:e0:28:d6:64:d1:
                    72:d6:2f:35:ce:b9:23:94:ae:6f:31:54:85:3f:83:
                    aa:02:d3:a0:92:21:05:30:22:a5:0d:d1:49:29:22:
                    62:61:38:f4:87:48:53:1f:87:1a:cb:d7:81:f7:58:
                    ee:06:96:1b:f5:9a:06:0c:ec:6f:d5:1c:1a:6c:fc:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:19:1D:21:57:86:37:70:13:F3:4C:29:BB:EC:86:CB:51:DE:2F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71f1d67e-65e6-3e91-bc55-a28d7a29b2ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:9d:68:fa:93:82:b8:e5:ae:43:f1:83:3c:4b:33:75:59:0b:
         24:cf:c5:07:9f:1d:3a:92:98:a6:d1:2d:52:ed:e3:71:76:c2:
         92:63:1f:2f:cb:b2:00:41:1d:f9:3a:80:dc:40:30:50:3b:54:
         19:54:64:97:27:ce:2c:2f:01:95:37:10:a5:ca:0b:cb:75:e2:
         e3:23:d1:69:5f:0d:6c:00:70:12:26:df:c9:c8:38:e8:d5:72:
         79:77:c1:1b:e1:0f:29:b7:de:e9:2d:58:e6:5a:63:14:52:df:
         d2:3c:47:31:5d:49:60:63:09:91:d5:a3:f7:94:f6:5b:bc:23:
         b2:06:be:53:83:5e:55:02:c7:cd:3b:c5:61:86:e4:1d:03:26:
         e8:1e:6c:45:2a:d0:41:ce:6b:7d:20:33:1c:6a:90:56:02:fc:
         50:55:a6:84:7b:b5:82:68:2a:dc:8d:91:1e:9e:b5:c3:bf:31:
         12:5e:b6:81:08:48:99:cc:d0:12:8a:e9:99:b8:78:74:95:b7:
         f5:85:a5:3a:6d:ee:21:ca:19:52:1c:b3:bd:07:b4:56:b3:88:
         dc:89:6f:39:1c:6a:d8:3d:1a:85:6f:67:e3:9e:03:24:80:2e:
         e6:03:4f:6e:80:b5:a6:dd:6c:58:1b:9c:c6:ec:0e:40:4a:b8:
         fb:3f:11:1d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkP+hmX4ndMGdAAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjA4YWMwY2ItNDQ5Ni00YTRmLWI3ZWEtMWVlODBiNTA5ODI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI7r6ZZeEl/3sDWRZbIuM8+4nJTJZD9ck3Dh
MsQ3mnM1MxA92BDtSv8qeAXo+8+3swH3dW8HytQ/8dVbBSveNxM5Vs7Mf0OJkJUZ
snoccMMcqF9NxZdQnTwkL4rHB37BVGkcI8fUKzW1kubcaihimpC76T3PXY5jNDkL
B2R9kgfSmqeEj3XkmnizXQpg7Dsl1o42AB1WazFOiIdu5BM6MfZmRqj+fH4XmjEA
QJLXx2Cwj75uRuXJpAuwHu134CjWZNFy1i81zrkjlK5vMVSFP4OqAtOgkiEFMCKl
DdFJKSJiYTj0h0hTH4cay9eB91juBpYb9ZoGDOxv1RwabPzkpwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF4ZHSFXhjdwE/NMKbvshstR3i8LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzFmMWQ2N2UtNjVlNi0z
ZTkxLWJjNTUtYTI4ZDdhMjliMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDKEQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADGdaPqTgrjlrkPxgzxLM3VZCyTPxQefHTqSmKbRLVLt43F2wpJj
Hy/LsgBBHfk6gNxAMFA7VBlUZJcnziwvAZU3EKXKC8t14uMj0WlfDWwAcBIm38nI
OOjVcnl3wRvhDym33uktWOZaYxRS39I8RzFdSWBjCZHVo/eU9lu8I7IGvlODXlUC
x807xWGG5B0DJugebEUq0EHOa30gMxxqkFYC/FBVpoR7tYJoKtyNkR6etcO/MRJe
toEISJnM0BKK6Zm4eHSVt/WFpTpt7iHKGVIcs70HtFaziNyJbzkcatg9GoVvZ+Oe
AySALuYDT26AtabdbFgbnMbsDkBKuPs/ER0=
-----END CERTIFICATE-----
Generated at Thu Aug 27 22:48:53 2026 by rpki-client