Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bda86d1-1b06-3a54-ba7d-f88a53eb0f5e.roa
File:                     5bda86d1-1b06-3a54-ba7d-f88a53eb0f5e.roa (raw, json)
Hash identifier:          e0x28A85MHxjE05cmJvoAg7JZTqW+YN/cQOg+AzEDM8=
Subject key identifier:   16:E0:A2:47:AA:D0:DA:47:F1:B5:47:D8:8F:7F:A0:57:31:63:62:A0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87CFF7CC6A5AE5013BA180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bda86d1-1b06-3a54-ba7d-f88a53eb0f5e.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1014:b1e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:cf:f7:cc:6a:5a:e5:01:3b:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=e0e99b4a-1623-4d7c-a60a-50b65277abc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:f0:e3:05:69:ac:1a:de:ee:d4:77:c0:5b:
                    aa:a4:c7:15:bf:98:b8:50:73:d5:b8:01:81:8c:09:
                    3b:c0:bc:71:08:eb:0d:16:a6:34:27:00:2d:e0:8f:
                    14:11:6d:70:03:52:f5:06:bb:6c:60:9c:57:61:09:
                    14:e0:d9:64:2b:ff:36:81:ce:ec:2e:dd:2f:18:56:
                    d3:19:1b:6a:e9:d4:28:48:9d:78:20:a1:54:7f:39:
                    f3:f5:41:ff:cc:81:88:01:d6:21:8f:5c:ef:cd:23:
                    96:6d:d4:43:09:82:3a:cb:40:7b:a2:84:44:27:cf:
                    06:46:d5:fe:40:5c:94:36:65:ee:44:1f:ec:94:00:
                    60:aa:f5:51:8e:29:74:bf:1c:a4:7b:d2:e6:88:36:
                    2e:7c:a9:c4:3e:38:23:09:27:0c:13:3e:4a:e5:7f:
                    0c:b8:f3:43:dd:f6:d9:0a:05:c0:12:8e:6c:9f:8e:
                    47:6a:33:59:d4:a9:12:72:8a:3a:d4:fb:f0:74:ea:
                    0d:6c:8d:13:c2:c1:40:bb:41:c5:bc:30:28:2d:7c:
                    16:96:9e:00:be:e0:a4:48:f4:63:63:69:28:d6:22:
                    71:be:a7:31:01:36:41:a3:ac:d2:40:b4:bf:50:1e:
                    09:e7:8d:85:34:33:51:bc:e9:f8:0a:1e:6b:9f:c9:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E0:A2:47:AA:D0:DA:47:F1:B5:47:D8:8F:7F:A0:57:31:63:62:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bda86d1-1b06-3a54-ba7d-f88a53eb0f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b1e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:fa:af:2f:62:7a:8f:49:ad:88:11:05:13:7f:d3:1e:2a:b8:
         95:48:af:1d:89:d4:a9:e6:fd:b8:fc:49:21:25:87:f1:8c:57:
         1e:66:16:6c:d0:b8:5a:ee:a7:7c:3b:1f:11:ad:29:2c:6d:e4:
         ab:8b:6b:25:8c:82:c8:0a:b5:00:61:d2:04:de:ac:75:3b:a8:
         e8:62:f3:7d:7e:5d:2c:b2:57:3a:49:1c:7e:83:79:7c:a4:1d:
         4a:90:99:b1:3b:2a:88:5a:57:5d:ae:38:3a:f1:b8:fd:dc:27:
         b6:d1:a3:20:f5:18:a4:c2:26:60:44:eb:90:16:ac:6b:c6:ca:
         17:93:7f:12:85:a7:b9:af:69:60:1a:23:16:53:46:9d:06:ab:
         7d:34:ec:aa:4a:3e:a7:d6:7d:cb:db:d3:8b:d3:5c:33:95:8d:
         44:a9:ae:5d:02:52:0c:0a:e1:6a:79:fa:f4:22:ef:a5:38:08:
         91:ca:53:54:df:0e:34:c0:6f:02:f8:db:7b:6b:1a:75:2e:c2:
         c0:aa:29:f9:b1:19:58:3e:5d:7e:c9:b5:70:5d:25:44:1e:95:
         5a:7a:7a:77:f1:41:b0:06:91:97:19:aa:44:72:ed:08:a3:d5:
         6a:26:68:6d:29:59:49:4a:c7:da:9a:f2:2f:60:c6:d6:a1:87:
         3d:ba:98:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8th8/3zGpa5QE7oYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTBlOTliNGEtMTYyMy00ZDdjLWE2MGEtNTBiNjUyNzdhYmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsTw4wVprBre7tR3wFuqpMcVv5i4UHPVuAGB
jAk7wLxxCOsNFqY0JwAt4I8UEW1wA1L1BrtsYJxXYQkU4NlkK/82gc7sLt0vGFbT
GRtq6dQoSJ14IKFUfznz9UH/zIGIAdYhj1zvzSOWbdRDCYI6y0B7ooREJ88GRtX+
QFyUNmXuRB/slABgqvVRjil0vxyke9LmiDYufKnEPjgjCScMEz5K5X8MuPND3fbZ
CgXAEo5sn45HajNZ1KkScoo61PvwdOoNbI0TwsFAu0HFvDAoLXwWlp4AvuCkSPRj
Y2ko1iJxvqcxATZBo6zSQLS/UB4J542FNDNRvOn4Ch5rn8kpXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBbgokeq0NpH8bVH2I9/oFcxY2KgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWJkYTg2ZDEtMWIwNi0z
YTU0LWJhN2QtZjg4YTUzZWIwZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFLHg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKD6ry9ieo9JrYgRBRN/0x4quJVIrx2J1Knm/bj8SSElh/GMVx5m
FmzQuFrup3w7HxGtKSxt5KuLayWMgsgKtQBh0gTerHU7qOhi831+XSyyVzpJHH6D
eXykHUqQmbE7KohaV12uODrxuP3cJ7bRoyD1GKTCJmBE65AWrGvGyheTfxKFp7mv
aWAaIxZTRp0Gq3007KpKPqfWfcvb04vTXDOVjUSprl0CUgwK4Wp5+vQi76U4CJHK
U1TfDjTAbwL423trGnUuwsCqKfmxGVg+XX7JtXBdJUQelVp6enfxQbAGkZcZqkRy
7Qij1WomaG0pWUlKx9qa8i9gxtahhz26mIs=
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:44:54 2026 by rpki-client