Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d61f6e28-00a3-35be-941c-a2eb026581d7.roa
File:                     d61f6e28-00a3-35be-941c-a2eb026581d7.roa (raw, json)
Hash identifier:          I1cgu49LrbmVCioRZmR183zLBdUVthbc/uCdi8JN8Wk=
Subject key identifier:   1A:7E:E7:DC:D2:1A:1C:16:03:B7:60:6A:64:CA:6A:24:56:FF:A3:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B53436FC5E2A124A887C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d61f6e28-00a3-35be-941c-a2eb026581d7.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100d:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:53:43:6f:c5:e2:a1:24:a8:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=1cfd76f6-e88f-4cdb-afd3-9fc61c82f311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:5e:d4:53:d4:07:ed:fc:f1:f7:b9:a4:99:
                    83:13:35:95:1b:bd:15:e7:75:62:89:dc:28:47:16:
                    b0:73:9b:4d:3f:97:a7:72:45:4d:52:39:96:e3:44:
                    76:ef:e3:3c:a0:fc:8e:f9:a6:ba:46:56:cf:2e:33:
                    91:8e:aa:db:4b:9c:54:cd:22:67:6e:fd:96:d8:24:
                    e0:9f:88:c6:9f:05:17:56:52:2d:01:a0:30:db:8b:
                    bc:71:0a:3c:0a:76:02:fa:50:ba:dc:de:5c:ec:3a:
                    cd:4c:88:31:6b:25:f9:7c:5b:03:6c:a3:eb:34:07:
                    14:c4:38:73:87:bc:58:4c:c3:ac:36:19:87:d9:27:
                    7c:bc:8e:7d:fc:39:05:a1:84:57:07:7d:4f:57:2c:
                    59:f1:00:24:bd:f5:ad:b6:5f:90:10:ae:41:68:05:
                    79:bf:6b:2f:0b:a8:4c:53:60:a3:25:ec:d1:c1:48:
                    50:e4:ab:d9:db:95:89:7d:c7:f7:a3:bb:eb:fb:2b:
                    33:b3:b0:26:07:90:be:99:96:7b:40:18:8e:38:b6:
                    14:f0:9f:9f:a9:23:50:1f:8f:db:97:2d:34:22:f1:
                    61:36:88:b0:72:13:8a:42:8b:fb:86:70:63:92:e0:
                    61:23:7e:65:07:f5:df:c9:28:e0:09:23:0d:a8:94:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7E:E7:DC:D2:1A:1C:16:03:B7:60:6A:64:CA:6A:24:56:FF:A3:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d61f6e28-00a3-35be-941c-a2eb026581d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:64:55:e3:36:6e:ef:c5:94:42:ed:85:ee:bd:4f:57:e4:a4:
         83:70:1e:d8:42:1b:3d:aa:6b:8e:c7:40:82:d9:9b:0e:28:54:
         1c:24:d9:0f:cc:86:2f:21:ae:9d:db:6c:85:7d:eb:2f:06:74:
         3c:ef:32:e6:11:cd:18:bc:a8:7a:a5:e1:5e:e5:70:01:08:df:
         57:cd:42:e8:dc:18:dc:2a:7d:6d:eb:cf:35:57:d5:a1:98:a1:
         bd:3f:dc:cc:80:72:cc:43:c4:12:d7:a7:b0:92:00:96:70:f1:
         f4:de:4f:23:a8:55:17:7e:83:da:b4:a1:c3:82:cc:61:87:36:
         d1:5e:82:60:25:f2:92:a2:09:7c:ee:42:e5:63:c5:23:3e:54:
         f0:b2:0a:79:b3:bf:26:59:d3:53:f2:66:b8:41:d1:c0:0f:15:
         ba:31:54:ac:ee:38:f7:9b:b5:ce:98:5a:55:dc:58:a7:ef:70:
         5a:ce:0f:65:a8:7b:0c:44:d9:95:e2:65:11:5d:32:fe:c2:d1:
         0c:98:08:5b:5f:d8:c1:a3:ae:b3:d5:d4:b5:ce:b5:3d:fe:85:
         b7:e6:cb:3e:4c:44:e6:ce:e2:81:81:7a:4e:4a:90:e6:de:9e:
         01:49:68:e9:e1:f2:fd:72:73:45:1c:f0:fe:13:1c:70:da:5b:
         4b:cf:cc:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3kG1NDb8XioSSoh8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
MWNmZDc2ZjYtZTg4Zi00Y2RiLWFmZDMtOWZjNjFjODJmMzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoRe1FPUB+388fe5pJmDEzWVG70V53Viidwo
Rxawc5tNP5enckVNUjmW40R27+M8oPyO+aa6RlbPLjORjqrbS5xUzSJnbv2W2CTg
n4jGnwUXVlItAaAw24u8cQo8CnYC+lC63N5c7DrNTIgxayX5fFsDbKPrNAcUxDhz
h7xYTMOsNhmH2Sd8vI59/DkFoYRXB31PVyxZ8QAkvfWttl+QEK5BaAV5v2svC6hM
U2CjJezRwUhQ5KvZ25WJfcf3o7vr+yszs7AmB5C+mZZ7QBiOOLYU8J+fqSNQH4/b
ly00IvFhNoiwchOKQov7hnBjkuBhI35lB/XfySjgCSMNqJQ/qwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBp+59zSGhwWA7dgamTKaiRW/6P/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDYxZjZlMjgtMDBhMy0z
NWJlLTk0MWMtYTJlYjAyNjU4MWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQDbEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADVkVeM2bu/FlELthe69T1fkpINwHthCGz2qa47HQILZmw4oVBwk
2Q/Mhi8hrp3bbIV96y8GdDzvMuYRzRi8qHql4V7lcAEI31fNQujcGNwqfW3rzzVX
1aGYob0/3MyAcsxDxBLXp7CSAJZw8fTeTyOoVRd+g9q0ocOCzGGHNtFegmAl8pKi
CXzuQuVjxSM+VPCyCnmzvyZZ01PyZrhB0cAPFboxVKzuOPebtc6YWlXcWKfvcFrO
D2WoewxE2ZXiZRFdMv7C0QyYCFtf2MGjrrPV1LXOtT3+hbfmyz5MRObO4oGBek5K
kObengFJaOnh8v1yc0Uc8P4THHDaW0vPzOs=
-----END CERTIFICATE-----
Generated at Thu May 28 21:00:00 2026 by rpki-client