Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98b1d4eb-56b2-3b05-8f4e-f5e8e9482239.roa
File:                     98b1d4eb-56b2-3b05-8f4e-f5e8e9482239.roa (raw, json)
Hash identifier:          2ia0aDKUeQP/klkMeqn6MuJhbTYYm9BqFf3AldBAIlk=
Subject key identifier:   FC:1E:1A:34:A2:57:79:6B:92:BC:0E:3D:A2:5D:C7:8F:1F:EF:B5:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E74CF73312121B87C48F28B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98b1d4eb-56b2-3b05-8f4e-f5e8e9482239.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:b200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:73:31:21:21:b8:7c:48:f2:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=206e2ea1-10ff-414c-81f8-1fd72d190ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:19:8b:c3:92:f0:96:af:36:4d:62:ce:cc:98:
                    83:65:6a:33:7f:12:f1:30:83:19:7d:a0:dd:01:14:
                    8e:3f:53:29:a6:99:f9:80:25:d0:37:73:90:b2:66:
                    15:44:f0:e9:2f:dd:39:73:da:15:40:bc:93:ea:72:
                    54:4e:35:bf:b5:9e:16:55:b7:e4:e3:72:51:ba:18:
                    b2:72:10:fc:20:3b:fa:50:6d:88:b8:bf:de:26:75:
                    f2:f0:93:71:29:19:91:29:77:a7:d9:8c:74:78:78:
                    ec:f7:9d:1c:b0:1f:ba:1a:70:d8:f1:e5:3f:3f:b7:
                    5f:ba:52:0d:31:9e:d2:61:79:15:87:fc:62:9c:de:
                    ba:97:1e:a2:5a:d4:8e:c6:9c:1f:18:03:9f:84:d4:
                    a9:32:8f:27:63:94:23:a5:5c:38:8d:da:87:12:16:
                    9e:aa:29:73:fb:87:26:42:5a:17:d3:5f:d1:08:61:
                    0c:d1:91:cc:95:b4:7f:ba:a0:7f:ee:2f:56:08:67:
                    5f:8a:35:4a:6a:2c:3a:dd:f7:e2:00:0b:ea:3c:51:
                    19:fe:49:55:23:c1:e7:c2:c6:6d:e2:25:56:a5:03:
                    c7:c0:d5:e3:51:9f:b6:32:ed:e0:dd:fd:05:94:d9:
                    28:a9:12:71:df:91:6d:bb:ab:64:55:2e:92:9c:96:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1E:1A:34:A2:57:79:6B:92:BC:0E:3D:A2:5D:C7:8F:1F:EF:B5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98b1d4eb-56b2-3b05-8f4e-f5e8e9482239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:5d:87:92:1f:d3:6a:04:33:6f:9b:a9:ab:74:f6:10:62:
         1c:8c:b7:a7:d5:b7:43:38:58:c6:1f:85:84:c3:21:e7:e9:e6:
         70:2f:52:dc:1d:c3:a7:0d:15:53:45:48:f9:7c:4e:52:85:91:
         ab:ae:8f:aa:6b:94:c1:0b:24:d1:62:49:50:82:b0:c6:32:f1:
         97:2e:11:8e:7a:e7:ab:b5:d0:42:ee:f7:df:d4:7a:ca:53:18:
         e2:e5:70:8c:e2:ef:67:33:34:74:44:02:cd:e7:a2:b8:e3:76:
         df:d5:ad:64:50:ec:98:99:22:14:97:d0:3d:20:f7:5f:17:23:
         3f:02:2f:b5:80:48:5a:04:69:a3:d9:96:36:a2:d6:d4:a0:8e:
         cb:63:da:76:06:d9:d9:ba:40:a9:4e:2f:bc:73:b0:a9:b1:9a:
         8d:57:24:4f:e6:7c:61:f8:2c:0e:83:24:6d:4e:52:62:2b:75:
         e6:a1:1d:78:6e:18:66:88:e4:f2:6d:a7:29:80:64:d6:82:78:
         df:b4:b8:6b:15:65:43:83:01:5b:0b:8c:bb:29:02:59:dd:40:
         99:40:7f:09:ae:2a:e8:f4:18:8e:c1:9b:9b:4f:f6:85:20:15:
         89:de:74:47:b4:eb:d6:51:3e:f5:af:a9:93:e7:cf:8a:17:dc:
         58:f3:8c:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE50z3MxISG4fEjyi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk
MjA2ZTJlYTEtMTBmZi00MTRjLTgxZjgtMWZkNzJkMTkwYWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxmLw5Lwlq82TWLOzJiDZWozfxLxMIMZfaDd
ARSOP1Mpppn5gCXQN3OQsmYVRPDpL905c9oVQLyT6nJUTjW/tZ4WVbfk43JRuhiy
chD8IDv6UG2IuL/eJnXy8JNxKRmRKXen2Yx0eHjs950csB+6GnDY8eU/P7dfulIN
MZ7SYXkVh/xinN66lx6iWtSOxpwfGAOfhNSpMo8nY5QjpVw4jdqHEhaeqilz+4cm
QloX01/RCGEM0ZHMlbR/uqB/7i9WCGdfijVKaiw63ffiAAvqPFEZ/klVI8HnwsZt
4iVWpQPHwNXjUZ+2Mu3g3f0FlNkoqRJx35Ftu6tkVS6SnJY2iQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPweGjSiV3lrkrwOPaJdx48f77WbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOThiMWQ0ZWItNTZiMi0z
YjA1LThmNGUtZjVlOGU5NDgyMjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDbIA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALH4XYeSH9NqBDNvm6mrdPYQYhyMt6fVt0M4WMYfhYTDIefp5nAv
Utwdw6cNFVNFSPl8TlKFkauuj6prlMELJNFiSVCCsMYy8ZcuEY5656u10ELu99/U
espTGOLlcIzi72czNHREAs3norjjdt/VrWRQ7JiZIhSX0D0g918XIz8CL7WASFoE
aaPZljai1tSgjstj2nYG2dm6QKlOL7xzsKmxmo1XJE/mfGH4LA6DJG1OUmIrdeah
HXhuGGaI5PJtpymAZNaCeN+0uGsVZUODAVsLjLspAlndQJlAfwmuKuj0GI7Bm5tP
9oUgFYnedEe069ZRPvWvqZPnz4oX3FjzjAk=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:37:55 2026 by rpki-client