Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7256e156-653e-3a6c-b89e-0b2d059a79d6.roa
File:                     7256e156-653e-3a6c-b89e-0b2d059a79d6.roa (raw, json)
Hash identifier:          /wZjVHWC2UpNBguDcgVGFazGhuTyok0Z/5+uEp7/1QI=
Subject key identifier:   58:2F:C2:5E:4F:72:26:E2:7D:9B:8B:57:66:98:24:26:43:75:7A:76
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D4D5A39D0D058F4ED00767300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7256e156-653e-3a6c-b89e-0b2d059a79d6.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     6167
IP address blocks:        2600:1009:b098::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:39:d0:d0:58:f4:ed:00:76:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=ad8e3044-3abc-421a-801e-cbb418469512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:15:f2:9a:56:66:3b:57:93:c0:46:36:f1:
                    74:ef:47:b8:a3:ee:83:1b:0a:77:75:a1:1c:73:ca:
                    ec:95:b1:3a:e9:3a:d2:35:af:c4:24:a8:08:26:e5:
                    31:f7:17:9e:2f:e8:c7:68:c7:fb:db:6e:9d:30:0d:
                    ab:97:9f:3a:61:5c:03:ba:56:03:30:75:40:fb:5b:
                    08:bd:11:97:13:c3:3f:05:23:ba:55:a8:7d:df:2e:
                    d0:85:1c:6c:47:9a:0a:9e:c9:ba:ee:21:ec:0b:57:
                    00:32:f1:f5:cb:08:4a:76:dc:9f:bf:42:ca:58:09:
                    44:dd:a0:b0:f9:67:38:45:66:7b:93:24:b6:a9:53:
                    42:89:e7:6d:0f:34:89:3e:44:ce:a9:47:74:83:4e:
                    67:71:b5:00:25:7f:66:0d:d5:db:d5:cf:03:dc:c4:
                    72:8e:8d:01:af:3d:87:4c:4e:0f:62:74:c4:52:45:
                    ed:b9:c6:e4:ae:9b:0f:6f:fd:21:b1:80:5c:22:56:
                    fb:2f:37:cd:29:45:9a:a0:c2:19:f7:20:4a:7a:ac:
                    9b:d3:9f:4e:eb:ad:20:26:3d:c4:79:76:91:2e:cd:
                    5d:5d:e2:c0:ee:df:fb:42:d4:3a:e6:f6:95:9e:c3:
                    56:8b:f3:36:3f:19:bb:17:da:27:e2:d0:1c:c9:2c:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:C2:5E:4F:72:26:E2:7D:9B:8B:57:66:98:24:26:43:75:7A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7256e156-653e-3a6c-b89e-0b2d059a79d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b098::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:05:55:be:d6:89:58:9a:be:dd:7f:e1:db:85:ad:98:4d:60:
         20:76:64:6a:a8:ab:81:43:39:89:a4:3d:c5:0b:f3:dc:fc:39:
         bc:09:9b:15:9d:85:05:ab:30:00:b8:49:73:e9:0d:0f:2d:c6:
         a1:11:36:cf:c7:c6:43:33:16:a3:3c:bf:92:5e:8e:cf:fc:0e:
         b8:18:d8:a3:5b:58:8b:5b:59:1c:3c:1e:73:6c:04:5d:7f:73:
         ae:5e:c9:37:a0:1e:8a:83:a3:f2:78:82:02:d6:51:95:89:e9:
         ff:a2:27:a1:36:79:ac:6b:4e:a0:9c:65:4d:ec:44:33:56:08:
         91:b9:73:81:51:92:58:9a:1e:f7:85:12:23:8a:11:9d:61:a1:
         a2:97:20:89:7b:1e:e9:36:2f:cb:87:5a:e4:8c:9c:1c:bf:ab:
         b9:80:60:a2:d9:90:bc:a6:75:2b:8e:a6:68:22:72:d9:85:08:
         03:77:ae:b0:14:45:ae:f7:27:49:76:93:dd:6e:a0:97:dd:e1:
         12:35:6d:8f:d3:83:c1:49:e9:6d:71:89:05:de:ff:03:f5:98:
         13:1b:01:83:ce:04:24:47:bb:84:e3:9d:52:33:92:8c:d9:26:
         ce:bd:30:f6:35:2c:2b:f0:70:29:bb:4c:1f:e9:c1:16:ce:ae:
         6e:a1:da:a9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWjnQ0Fj07QB2cwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YWQ4ZTMwNDQtM2FiYy00MjFhLTgwMWUtY2JiNDE4NDY5NTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioYV8ppWZjtXk8BGNvF070e4o+6DGwp3daEc
c8rslbE66TrSNa/EJKgIJuUx9xeeL+jHaMf7226dMA2rl586YVwDulYDMHVA+1sI
vRGXE8M/BSO6Vah93y7QhRxsR5oKnsm67iHsC1cAMvH1ywhKdtyfv0LKWAlE3aCw
+Wc4RWZ7kyS2qVNCiedtDzSJPkTOqUd0g05ncbUAJX9mDdXb1c8D3MRyjo0Brz2H
TE4PYnTEUkXtucbkrpsPb/0hsYBcIlb7LzfNKUWaoMIZ9yBKeqyb059O660gJj3E
eXaRLs1dXeLA7t/7QtQ65vaVnsNWi/M2Pxm7F9on4tAcySw3QwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFgvwl5PcibifZuLV2aYJCZDdXp2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzI1NmUxNTYtNjUzZS0z
YTZjLWI4OWUtMGIyZDA1OWE3OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQCbCY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABkFVb7WiViavt1/4duFrZhNYCB2ZGqoq4FDOYmkPcUL89z8ObwJ
mxWdhQWrMAC4SXPpDQ8txqERNs/HxkMzFqM8v5Jejs/8DrgY2KNbWItbWRw8HnNs
BF1/c65eyTegHoqDo/J4ggLWUZWJ6f+iJ6E2eaxrTqCcZU3sRDNWCJG5c4FRklia
HveFEiOKEZ1hoaKXIIl7Huk2L8uHWuSMnBy/q7mAYKLZkLymdSuOpmgictmFCAN3
rrAURa73J0l2k91uoJfd4RI1bY/Tg8FJ6W1xiQXe/wP1mBMbAYPOBCRHu4TjnVIz
kozZJs69MPY1LCvwcCm7TB/pwRbOrm6h2qk=
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:42 2026 by rpki-client