Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa
File:                     a2086c90-a19e-34c2-9f70-84be6d8812f7.roa (raw, json)
Hash identifier:          Q3I/xy1DQTRUIRhtxPQAemfHkNY9ktF142mnnOZEWBQ=
Subject key identifier:   7F:63:AB:FF:9F:25:74:CE:DB:D3:73:A6:22:0D:C1:7B:21:A0:3C:AB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B4D1B850DC1725AAEE58A
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100a:b1c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:4d:1b:85:0d:c1:72:5a:ae:e5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=6f53be57-ffc2-4275-9253-4770d1061b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5f:5d:0b:96:56:55:ec:28:ee:c2:4c:e6:44:
                    7c:23:a9:0f:95:87:bd:23:85:fb:4e:80:60:88:10:
                    9f:56:46:af:1f:35:99:ec:a9:1b:e6:da:0c:99:39:
                    ea:6d:bd:05:b0:fd:d2:c4:c8:68:e0:b4:b1:f9:f2:
                    13:9f:4e:be:90:78:8f:a0:e1:51:97:f3:ff:73:aa:
                    0f:a6:25:0e:ae:99:e9:ed:48:f7:32:ae:ec:a6:fc:
                    db:da:a7:81:ab:13:de:b3:c5:49:26:d5:a1:08:13:
                    93:4c:7a:57:5e:11:19:d0:fd:98:5c:8f:28:56:00:
                    25:1a:b3:39:b4:0f:e1:11:c9:c9:c6:99:a2:69:27:
                    12:d8:43:07:c4:b2:bd:ad:ef:be:61:9c:ad:7a:07:
                    72:98:fb:24:73:5d:70:1e:d0:08:a0:70:c1:3c:64:
                    c3:7b:d8:ff:4c:cc:32:6a:49:01:77:6d:5e:aa:57:
                    33:6c:08:a7:a9:dc:8b:57:6b:f1:f9:43:7f:b7:a9:
                    1f:c0:29:89:af:53:5c:ef:ad:1d:06:f0:3d:3c:7d:
                    78:60:7e:83:d5:e6:9b:a9:13:3a:8f:94:6b:ab:f2:
                    1d:45:bb:60:ee:aa:63:e2:fb:a8:ef:21:4e:ef:88:
                    ce:a9:9b:c6:8a:f1:3f:50:33:89:73:7b:02:0e:0c:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:63:AB:FF:9F:25:74:CE:DB:D3:73:A6:22:0D:C1:7B:21:A0:3C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b1c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:39:0a:23:f9:51:83:dc:1a:9d:8e:34:87:4f:31:da:64:32:
         0c:96:46:99:08:20:0e:f0:da:b6:7f:ac:72:ba:32:25:83:4a:
         cf:81:61:81:ce:b8:ea:e8:a5:69:af:ba:d3:4d:d3:ec:d0:53:
         fc:56:6b:8b:1f:20:36:d3:61:95:01:06:d4:8e:77:3f:2f:9c:
         d5:78:2b:ec:6d:32:82:0a:5e:fd:76:3e:82:37:be:9d:00:de:
         5a:4d:96:47:82:a5:a9:ff:79:0e:62:60:e6:8f:5d:b1:e1:31:
         0a:1e:0e:19:5f:0a:8c:8f:f0:88:0d:a8:24:53:31:1c:53:7a:
         f3:ec:6b:ca:1b:bf:e2:ab:0b:78:32:01:dd:cd:0c:68:63:95:
         95:cd:b8:03:14:ff:12:ce:f0:4c:aa:7d:b0:2c:32:0e:fa:11:
         3b:a7:5f:86:2b:2d:cf:e6:5a:41:26:b6:78:4f:32:5e:94:8b:
         a0:b9:cc:80:6e:37:70:09:41:a2:f7:73:92:be:c1:4d:92:72:
         9d:21:cb:2a:fa:cd:d1:c1:83:8f:0e:38:dc:c2:da:12:10:14:
         2b:db:a3:aa:3e:a2:24:02:78:d4:64:39:91:b1:fa:43:89:e9:
         e3:7d:c8:23:43:71:42:22:f5:73:4f:4a:41:75:b3:66:1d:7b:
         e3:08:6d:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3kG00bhQ3Bclqu5YowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
NmY1M2JlNTctZmZjMi00Mjc1LTkyNTMtNDc3MGQxMDYxYjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy19dC5ZWVewo7sJM5kR8I6kPlYe9I4X7ToBg
iBCfVkavHzWZ7Kkb5toMmTnqbb0FsP3SxMho4LSx+fITn06+kHiPoOFRl/P/c6oP
piUOrpnp7Uj3Mq7spvzb2qeBqxPes8VJJtWhCBOTTHpXXhEZ0P2YXI8oVgAlGrM5
tA/hEcnJxpmiaScS2EMHxLK9re++YZytegdymPskc11wHtAIoHDBPGTDe9j/TMwy
akkBd21eqlczbAinqdyLV2vx+UN/t6kfwCmJr1Nc760dBvA9PH14YH6D1eabqRM6
j5Rrq/IdRbtg7qpj4vuo7yFO74jOqZvGivE/UDOJc3sCDgxFgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH9jq/+fJXTO29NzpiINwXshoDyrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTIwODZjOTAtYTE5ZS0z
NGMyLTlmNzAtODRiZTZkODgxMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCrHA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI45CiP5UYPcGp2ONIdPMdpkMgyWRpkIIA7w2rZ/rHK6MiWDSs+B
YYHOuOropWmvutNN0+zQU/xWa4sfIDbTYZUBBtSOdz8vnNV4K+xtMoIKXv12PoI3
vp0A3lpNlkeCpan/eQ5iYOaPXbHhMQoeDhlfCoyP8IgNqCRTMRxTevPsa8obv+Kr
C3gyAd3NDGhjlZXNuAMU/xLO8EyqfbAsMg76ETunX4YrLc/mWkEmtnhPMl6Ui6C5
zIBuN3AJQaL3c5K+wU2Scp0hyyr6zdHBg48OONzC2hIQFCvbo6o+oiQCeNRkOZGx
+kOJ6eN9yCNDcUIi9XNPSkF1s2Yde+MIbTQ=
-----END CERTIFICATE-----
Generated at Thu May 28 20:06:47 2026 by rpki-client