Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f990fcc2-e2e1-359b-820f-a6583223747e.roa
File:                     f990fcc2-e2e1-359b-820f-a6583223747e.roa (raw, json)
Hash identifier:          MuTp30BD0YJ1qoSqviQZTGyHDCLqvfzfzozkbwj3s3M=
Subject key identifier:   8A:FF:DF:CF:34:DE:1D:FA:54:A4:6D:D1:2F:7A:D6:7A:A1:9C:B3:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5D2FA0EC681658206BAB41A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f990fcc2-e2e1-359b-820f-a6583223747e.roa
Signing time:             Wed 01 Apr 2026 17:07:43 +0000
ROA not before:           Wed 01 Apr 2026 17:07:43 +0000
ROA not after:            Tue 30 Jun 2026 17:07:43 +0000
asID:                     6167
IP address blocks:        2600:1003:b898::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:2f:a0:ec:68:16:58:20:6b:ab:41:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  1 17:07:43 2026 GMT
            Not After : Jun 30 17:07:43 2026 GMT
        Subject: CN=961be599-469f-4471-8c71-6ee4b266034e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:3a:ef:38:ce:e2:f3:44:fc:69:17:72:aa:
                    eb:0b:bb:b4:f4:c5:10:ce:62:cd:4c:65:2f:e0:95:
                    91:fd:f2:98:a6:bf:79:57:bb:39:fb:de:ef:7e:59:
                    23:ef:90:32:d2:b0:2e:4c:44:02:30:de:80:e2:b0:
                    45:0f:37:78:fc:62:e9:69:fd:92:9e:da:57:3a:9c:
                    df:b8:77:80:f9:5f:3e:ca:8f:0e:3c:ae:a6:4a:f4:
                    f2:f2:0d:ca:9f:00:54:70:b8:ea:3c:f0:c6:83:ab:
                    39:a5:1b:81:bd:70:8f:d4:80:b5:e4:6a:61:a9:09:
                    83:38:16:f2:0a:23:1e:b1:90:11:28:ae:21:48:f4:
                    80:f3:60:fb:f8:09:e9:04:04:c0:0a:8d:00:75:12:
                    c0:df:73:d6:c8:41:c8:9c:eb:60:8c:04:4d:8e:82:
                    fa:90:fc:41:c7:b9:7f:92:8b:cc:2f:3c:1a:34:36:
                    12:39:83:e1:37:7f:2b:e6:cf:87:aa:d8:32:1a:dd:
                    e0:7b:52:32:2d:54:36:1d:bd:9e:e4:aa:77:c7:65:
                    13:80:3d:13:c2:0a:14:02:c5:23:e6:cc:aa:79:09:
                    ee:32:52:2e:37:ed:7d:3f:84:46:1d:54:42:39:65:
                    89:ce:d5:e7:40:29:c3:a8:6a:3d:f2:29:84:65:1b:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FF:DF:CF:34:DE:1D:FA:54:A4:6D:D1:2F:7A:D6:7A:A1:9C:B3:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f990fcc2-e2e1-359b-820f-a6583223747e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b898::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:3b:08:3c:37:47:50:30:1c:08:5d:e7:dc:95:7a:9c:c7:
         30:25:93:42:fc:2b:4e:ff:b6:00:db:ff:15:12:3b:71:a5:6b:
         ed:4f:28:29:f7:c2:c9:68:c3:51:03:ae:0f:29:9d:d2:3d:08:
         15:6a:d8:c4:37:1b:e0:e5:ce:c7:22:5f:ef:ac:e6:53:61:42:
         20:06:01:20:e9:6f:00:09:83:d1:19:64:87:f8:9d:8e:2e:e7:
         bf:96:10:21:0c:c7:de:68:3e:73:60:43:bd:94:f7:82:fa:83:
         d0:94:04:34:43:3c:e2:22:8b:51:52:ad:56:3f:78:ba:54:9c:
         0d:40:c6:46:f4:41:78:67:c1:6c:59:5c:6a:b7:fc:23:68:a4:
         4f:8f:3f:8f:93:a4:26:79:24:0d:3b:d8:95:8c:d5:ec:e7:88:
         ee:8d:59:9e:87:1a:33:80:be:12:f2:ac:1a:1f:b3:3b:8f:b3:
         16:79:fc:b2:71:cb:42:86:8e:d5:15:00:e8:b9:f4:4a:a8:37:
         ca:cc:d2:c8:b1:f2:dc:91:a9:58:80:b0:df:70:11:bb:cf:fd:
         09:11:71:d7:60:83:9a:57:d0:1d:b0:a4:59:7e:91:84:8b:a9:
         32:05:08:a0:27:08:46:31:c2:d9:42:da:49:38:53:6b:3c:68:
         9d:ef:fc:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1dL6DsaBZYIGurQaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwMTE3MDc0M1oXDTI2MDYzMDE3MDc0M1owLzEtMCsGA1UEAxMk
OTYxYmU1OTktNDY5Zi00NDcxLThjNzEtNmVlNGIyNjYwMzRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTk67zjO4vNE/GkXcqrrC7u09MUQzmLNTGUv
4JWR/fKYpr95V7s5+97vflkj75Ay0rAuTEQCMN6A4rBFDzd4/GLpaf2SntpXOpzf
uHeA+V8+yo8OPK6mSvTy8g3KnwBUcLjqPPDGg6s5pRuBvXCP1IC15GphqQmDOBby
CiMesZARKK4hSPSA82D7+AnpBATACo0AdRLA33PWyEHInOtgjARNjoL6kPxBx7l/
kovMLzwaNDYSOYPhN38r5s+HqtgyGt3ge1IyLVQ2Hb2e5Kp3x2UTgD0TwgoUAsUj
5syqeQnuMlIuN+19P4RGHVRCOWWJztXnQCnDqGo98imEZRtXoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIr/38803h36VKRt0S961nqhnLMHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjk5MGZjYzItZTJlMS0z
NTliLTgyMGYtYTY1ODMyMjM3NDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQA7iY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI0eOwg8N0dQMBwIXefclXqcxzAlk0L8K07/tgDb/xUSO3Gla+1P
KCn3wslow1EDrg8pndI9CBVq2MQ3G+DlzsciX++s5lNhQiAGASDpbwAJg9EZZIf4
nY4u57+WECEMx95oPnNgQ72U94L6g9CUBDRDPOIii1FSrVY/eLpUnA1Axkb0QXhn
wWxZXGq3/CNopE+PP4+TpCZ5JA072JWM1ezniO6NWZ6HGjOAvhLyrBofszuPsxZ5
/LJxy0KGjtUVAOi59EqoN8rM0six8tyRqViAsN9wEbvP/QkRcddgg5pX0B2wpFl+
kYSLqTIFCKAnCEYxwtlC2kk4U2s8aJ3v/K8=
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:14:12 2026 by rpki-client