Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871eea0e-f873-37fb-b9d5-45136a056620.roa
File:                     871eea0e-f873-37fb-b9d5-45136a056620.roa (raw, json)
Hash identifier:          uqqnV2GN9kGH9ckniJX+vetdx+mh2KjMSDHfKoIKWAY=
Subject key identifier:   88:E8:70:80:31:C5:00:2B:22:35:10:4E:7B:80:21:89:8D:EB:27:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AA92FBA0D09B08E5D3680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871eea0e-f873-37fb-b9d5-45136a056620.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1003:b888::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:a9:2f:ba:0d:09:b0:8e:5d:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=b589303a-2197-4a42-928e-7e96c5c3fa83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:e6:f9:a0:01:7a:e3:86:47:79:d8:a4:48:
                    a7:8a:97:6c:0f:fb:29:0d:08:e2:12:79:d1:26:ab:
                    73:64:b1:59:e4:0c:f3:eb:ee:e4:56:16:a3:a1:ee:
                    65:9d:7c:8c:44:a2:cc:3e:a6:a6:d6:c6:a3:13:c5:
                    00:c6:bf:04:b6:3c:de:05:c1:21:91:2d:1e:d1:21:
                    0c:bd:7f:07:dc:94:60:95:11:0d:ab:26:03:25:72:
                    70:da:13:30:89:53:63:6f:d1:6b:6b:af:bc:77:ab:
                    7a:bd:78:c2:a8:77:79:60:18:16:45:e9:66:74:e4:
                    79:2c:94:1a:84:29:88:db:b1:ef:14:4e:ef:16:60:
                    9e:a8:fa:75:37:d7:28:4a:0d:73:48:44:e2:7d:f6:
                    6e:a0:58:59:59:01:f0:25:be:69:66:48:ea:95:5a:
                    97:bb:0c:0c:fb:f2:c4:d8:2d:8e:8e:3a:38:cc:45:
                    15:fb:3e:e4:7a:80:23:f6:b4:7e:0d:71:07:99:a4:
                    51:22:e5:0b:5b:52:43:48:9b:58:ec:55:cc:ee:20:
                    85:46:86:b1:e5:77:21:15:f5:97:53:de:47:51:87:
                    76:47:6f:73:65:b4:07:98:3d:1f:b5:87:e8:6e:3a:
                    ca:81:61:36:77:84:cd:b0:51:63:01:2b:a9:07:6e:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E8:70:80:31:C5:00:2B:22:35:10:4E:7B:80:21:89:8D:EB:27:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/871eea0e-f873-37fb-b9d5-45136a056620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b888::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:79:10:55:ac:17:d2:5a:4f:e2:cf:fa:1d:e4:cf:a3:a8:ce:
         c1:6f:66:34:5c:2e:cc:ec:a3:a3:a1:1c:84:45:16:d6:d6:01:
         1f:31:e7:26:0f:b1:66:01:58:e8:9b:8d:a7:2a:b4:cf:2f:86:
         d1:9d:a7:b6:59:c5:45:5c:6e:96:fe:21:0a:af:b5:d5:e7:cc:
         c5:4b:62:80:dd:20:05:bc:4b:67:ee:5b:f8:66:ab:a0:0c:20:
         8d:03:00:de:ba:03:91:cb:03:ec:4f:3e:cd:30:4e:02:70:11:
         4e:fb:b2:c9:ae:4a:51:29:f3:eb:4e:19:6d:3a:76:16:ff:e4:
         97:28:d9:5a:95:d9:44:cb:5d:58:5e:7b:da:1e:5c:ac:73:fe:
         86:dc:22:78:bd:9b:c8:7a:7a:b8:77:0f:8c:da:ce:17:d7:2e:
         d7:3d:d7:43:08:ff:81:b3:07:d1:ce:79:50:83:5b:62:c5:53:
         1b:cc:07:59:7f:7f:6d:8f:f3:da:ff:bb:b6:9c:a5:ff:3c:32:
         75:f8:36:0d:b7:91:92:96:cd:bd:41:90:b6:47:f1:25:36:d2:
         bb:ef:0d:04:a4:d2:93:c7:a6:6a:31:8a:a8:76:b1:87:51:d7:
         a6:69:28:63:99:e4:3b:f7:47:08:b3:e6:0a:11:e4:75:7a:44:
         d6:0d:70:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6dSqkvug0JsI5dNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
YjU4OTMwM2EtMjE5Ny00YTQyLTkyOGUtN2U5NmM1YzNmYTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAPm+aABeuOGR3nYpEinipdsD/spDQjiEnnR
JqtzZLFZ5Azz6+7kVhajoe5lnXyMRKLMPqam1sajE8UAxr8EtjzeBcEhkS0e0SEM
vX8H3JRglRENqyYDJXJw2hMwiVNjb9Fra6+8d6t6vXjCqHd5YBgWRelmdOR5LJQa
hCmI27HvFE7vFmCeqPp1N9coSg1zSETiffZuoFhZWQHwJb5pZkjqlVqXuwwM+/LE
2C2Ojjo4zEUV+z7keoAj9rR+DXEHmaRRIuULW1JDSJtY7FXM7iCFRoax5XchFfWX
U95HUYd2R29zZbQHmD0ftYfobjrKgWE2d4TNsFFjASupB264vQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIjocIAxxQArIjUQTnuAIYmN6yckMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODcxZWVhMGUtZjg3My0z
N2ZiLWI5ZDUtNDUxMzZhMDU2NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQA7iI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJF5EFWsF9JaT+LP+h3kz6OozsFvZjRcLszso6OhHIRFFtbWAR8x
5yYPsWYBWOibjacqtM8vhtGdp7ZZxUVcbpb+IQqvtdXnzMVLYoDdIAW8S2fuW/hm
q6AMII0DAN66A5HLA+xPPs0wTgJwEU77ssmuSlEp8+tOGW06dhb/5Jco2VqV2UTL
XVhee9oeXKxz/obcIni9m8h6erh3D4zazhfXLtc910MI/4GzB9HOeVCDW2LFUxvM
B1l/f22P89r/u7acpf88MnX4Ng23kZKWzb1BkLZH8SU20rvvDQSk0pPHpmoxiqh2
sYdR16ZpKGOZ5Dv3Rwiz5goR5HV6RNYNcBg=
-----END CERTIFICATE-----
Generated at Thu Aug 27 22:54:37 2026 by rpki-client