Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9aad2995-8dc7-3e0e-8b5a-a26a167a6339.roa
File:                     9aad2995-8dc7-3e0e-8b5a-a26a167a6339.roa (raw, json)
Hash identifier:          yEJGTH5zm4zayCVSX6uXz1APbiY4KS6bKTddV2BPipI=
Subject key identifier:   F0:D0:3D:3E:23:59:76:AD:07:AB:A4:79:D3:E2:11:71:95:87:15:1B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECBD1E389FC86B5FEB2EC7400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9aad2995-8dc7-3e0e-8b5a-a26a167a6339.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     6167
IP address blocks:        2600:1011:b388::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e3:89:fc:86:b5:fe:b2:ec:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=190a2b1e-ce82-42d8-829c-32d1203d7b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:5d:72:33:d9:bb:82:11:6a:28:eb:58:b0:
                    64:e1:f3:56:e7:90:81:ca:fa:c4:aa:18:2c:cd:51:
                    2a:fb:be:30:c7:0d:58:d3:d5:3c:08:11:36:6b:b3:
                    a5:b3:f9:ba:11:28:57:8a:db:47:fb:1d:5d:68:a4:
                    c9:e8:e2:9f:b0:7b:4d:eb:38:7c:34:f5:85:f1:38:
                    ac:97:c2:08:92:82:1a:67:fa:f2:af:3b:aa:f9:75:
                    a7:95:1a:35:f1:06:6f:10:71:57:e2:72:6d:41:c6:
                    70:4d:25:22:15:09:bf:b6:b1:29:a5:e9:9b:af:cd:
                    d6:e3:59:82:c1:10:7e:e4:a3:06:3e:12:cf:cc:d2:
                    ea:42:2d:7c:58:f2:f4:8b:79:db:f4:24:d9:0a:76:
                    92:6b:34:b3:6d:da:85:0f:fb:b5:01:23:9e:0e:aa:
                    e1:04:a5:50:56:99:cc:3f:01:03:73:da:6e:dd:a5:
                    31:46:f5:64:d1:f7:69:43:38:94:42:13:5b:17:88:
                    0d:fb:66:06:3b:1d:e8:90:03:94:a0:c9:b3:ee:c1:
                    c0:69:44:c8:20:76:8a:2b:a7:47:17:90:e3:f7:99:
                    ab:18:e1:ed:51:b9:85:23:24:63:59:98:ce:31:53:
                    08:fa:f5:0d:90:f8:ea:e8:bf:77:83:25:35:c0:32:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D0:3D:3E:23:59:76:AD:07:AB:A4:79:D3:E2:11:71:95:87:15:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9aad2995-8dc7-3e0e-8b5a-a26a167a6339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b388::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fa:33:08:ab:0f:2a:cf:69:1e:aa:0a:fc:c0:57:70:2c:7f:
         33:44:aa:79:44:a5:41:fa:b1:5f:5d:f6:98:1e:d6:39:4b:4f:
         71:2c:f1:ef:0b:f7:bf:04:e5:e2:5c:a9:0c:7b:4f:3b:a0:f2:
         94:09:2a:df:1a:b0:c0:0f:99:15:d5:fa:90:3a:43:4e:ca:1f:
         dc:e3:7a:1b:9b:43:5f:60:3a:72:86:ac:60:e3:6d:23:dd:fa:
         f4:8b:10:d8:d8:ce:e2:e4:35:ff:25:b4:f5:2b:29:1b:c0:a2:
         cf:d1:c3:a2:ee:7d:18:60:53:dd:db:f1:90:a9:e7:4c:02:d7:
         8a:32:21:eb:6e:1b:b0:d6:26:28:c9:c4:8b:21:7b:2d:8f:c6:
         74:56:3f:e7:9a:c6:cb:f7:66:1e:0f:08:dd:53:1a:5c:a1:0d:
         2e:dc:dc:83:eb:05:ef:d3:ce:7f:4a:a3:6d:b7:f8:b0:d3:18:
         3a:97:11:e0:b9:9e:f6:20:c9:a7:5d:12:04:df:c5:7d:50:c0:
         85:c4:6c:d6:17:fb:43:b8:6d:6b:70:e6:74:a2:39:8e:54:63:
         62:c1:7e:eb:ee:21:0f:46:ec:7d:ba:40:eb:b4:9e:e2:88:bf:
         fe:29:e4:73:da:1c:6b:17:c3:a4:7c:f6:7e:d1:c0:ba:9c:a8:
         42:d8:b8:66
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7L0eOJ/Ia1/rLsdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
MTkwYTJiMWUtY2U4Mi00MmQ4LTgyOWMtMzJkMTIwM2Q3YjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmZdcjPZu4IRaijrWLBk4fNW55CByvrEqhgs
zVEq+74wxw1Y09U8CBE2a7Ols/m6EShXittH+x1daKTJ6OKfsHtN6zh8NPWF8Tis
l8IIkoIaZ/ryrzuq+XWnlRo18QZvEHFX4nJtQcZwTSUiFQm/trEppembr83W41mC
wRB+5KMGPhLPzNLqQi18WPL0i3nb9CTZCnaSazSzbdqFD/u1ASOeDqrhBKVQVpnM
PwEDc9pu3aUxRvVk0fdpQziUQhNbF4gN+2YGOx3okAOUoMmz7sHAaUTIIHaKK6dH
F5Dj95mrGOHtUbmFIyRjWZjOMVMI+vUNkPjq6L93gyU1wDLS8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPDQPT4jWXatB6ukedPiEXGVhxUbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWFhZDI5OTUtOGRjNy0z
ZTBlLThiNWEtYTI2YTE2N2E2MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQEbOI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEL6MwirDyrPaR6qCvzAV3AsfzNEqnlEpUH6sV9d9pge1jlLT3Es
8e8L978E5eJcqQx7Tzug8pQJKt8asMAPmRXV+pA6Q07KH9zjehubQ19gOnKGrGDj
bSPd+vSLENjYzuLkNf8ltPUrKRvAos/Rw6LufRhgU93b8ZCp50wC14oyIetuG7DW
JijJxIshey2PxnRWP+eaxsv3Zh4PCN1TGlyhDS7c3IPrBe/Tzn9Ko223+LDTGDqX
EeC5nvYgyaddEgTfxX1QwIXEbNYX+0O4bWtw5nSiOY5UY2LBfuvuIQ9G7H26QOu0
nuKIv/4p5HPaHGsXw6R89n7RwLqcqELYuGY=
-----END CERTIFICATE-----
Generated at Thu Aug 27 22:48:08 2026 by rpki-client