Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa
File:                     5e960e85-1abd-344d-89f3-a74eaa12b893.roa (raw, json)
Hash identifier:          SHVbUtOgiwFShTUcbpfHhlguwAslCC7bJpbK95+jjyM=
Subject key identifier:   75:27:5A:31:9B:FA:06:DE:73:E4:46:3C:4B:26:F0:9E:E2:67:F2:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F21C8CEC2BA25B35D2180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:b1c0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:21:c8:ce:c2:ba:25:b3:5d:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9f5a426e-0105-4f3b-a586-303b8f13eabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:ec:aa:01:2c:a3:42:57:45:8d:21:78:e0:
                    1b:01:3a:bb:eb:ce:3b:b9:25:a3:8e:55:76:87:5b:
                    9c:f5:5f:be:e1:ca:5d:e5:92:7c:9c:0f:b0:04:f7:
                    a3:23:a5:48:dd:a5:27:c2:7a:ac:96:10:80:58:fe:
                    50:b4:af:45:a4:8d:a4:8a:cb:0c:1f:17:12:0d:0c:
                    fd:df:3f:a0:9e:e4:20:83:c8:2d:f4:15:62:da:71:
                    81:6e:57:b4:5f:7f:90:7d:7b:b1:59:f9:21:51:00:
                    fd:e6:77:63:1d:4e:5b:ca:5a:2d:76:80:84:05:2e:
                    88:1d:d1:a9:41:13:05:f7:ed:6d:7d:37:fc:9b:d3:
                    4f:77:38:f3:b5:ca:4d:fa:a8:c9:8c:a1:0c:95:1d:
                    2c:0a:58:2c:2e:c1:d5:b3:fd:71:30:81:bd:df:f7:
                    9d:bf:5b:3a:5f:58:cd:dd:7b:eb:90:0b:93:90:93:
                    79:1b:f2:bb:6d:9b:42:21:1f:c4:f4:0e:30:6f:33:
                    65:0a:a5:91:a7:f9:67:78:09:06:87:34:15:a8:87:
                    35:fd:a5:04:db:7a:14:85:13:30:76:eb:49:f9:3f:
                    ce:d7:43:64:1a:dc:c8:d3:82:02:55:3f:3f:85:9b:
                    ee:80:3e:1b:2d:60:23:ce:de:4b:9a:10:46:8f:08:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:5A:31:9B:FA:06:DE:73:E4:46:3C:4B:26:F0:9E:E2:67:F2:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e960e85-1abd-344d-89f3-a74eaa12b893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1c0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2a:f1:a9:54:f4:60:11:b1:6c:43:55:ba:4c:c7:47:52:c7:
         b6:bd:b4:df:d2:db:ea:6f:ef:ba:9f:99:ad:c8:86:de:f8:3f:
         39:25:71:63:5a:ff:65:64:09:f7:fc:46:e6:05:33:5e:98:e4:
         81:e0:c5:6c:1b:93:21:5b:23:40:89:98:d5:17:9b:cf:00:ab:
         89:40:08:cb:f5:30:9e:5c:e6:7f:4d:a0:c1:4e:ea:e5:70:52:
         3c:17:db:5d:64:46:f7:77:57:fb:5f:8e:7c:e2:42:3c:a0:3b:
         86:11:86:83:a6:44:26:30:e9:46:2c:f4:66:cc:b3:f5:c1:b9:
         21:42:11:1d:2b:b7:ac:66:5d:f7:3f:1a:c4:e4:86:8d:65:2c:
         56:af:0d:a1:92:91:c2:ea:59:4c:14:a2:c5:14:8a:8f:9e:6e:
         34:84:db:63:8c:00:5f:d6:8b:bd:e4:13:24:35:ae:f2:18:24:
         c6:7e:1d:c9:14:a2:21:fc:dd:d3:16:79:d1:05:59:37:3b:00:
         2a:3c:39:d5:da:3a:1e:95:f3:40:4c:d6:8c:35:f1:f1:34:d7:
         52:52:2f:93:34:b8:95:d5:58:55:5e:52:7d:d1:0d:08:6c:e3:
         a1:ae:ba:ed:6a:96:dd:1a:f6:d8:63:76:d2:ec:67:ab:5a:df:
         04:ef:95:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JfyHIzsK6JbNdIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWY1YTQyNmUtMDEwNS00ZjNiLWE1ODYtMzAzYjhmMTNlYWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUzsqgEso0JXRY0heOAbATq76847uSWjjlV2
h1uc9V++4cpd5ZJ8nA+wBPejI6VI3aUnwnqslhCAWP5QtK9FpI2kissMHxcSDQz9
3z+gnuQgg8gt9BVi2nGBble0X3+QfXuxWfkhUQD95ndjHU5bylotdoCEBS6IHdGp
QRMF9+1tfTf8m9NPdzjztcpN+qjJjKEMlR0sClgsLsHVs/1xMIG93/edv1s6X1jN
3XvrkAuTkJN5G/K7bZtCIR/E9A4wbzNlCqWRp/lneAkGhzQVqIc1/aUE23oUhRMw
dutJ+T/O10NkGtzI04ICVT8/hZvugD4bLWAjzt5LmhBGjwggUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHUnWjGb+gbec+RGPEsm8J7iZ/ISMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWU5NjBlODUtMWFiZC0z
NDRkLTg5ZjMtYTc0ZWFhMTJiODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDbHA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABwq8alU9GARsWxDVbpMx0dSx7a9tN/S2+pv77qfma3Iht74Pzkl
cWNa/2VkCff8RuYFM16Y5IHgxWwbkyFbI0CJmNUXm88Aq4lACMv1MJ5c5n9NoMFO
6uVwUjwX211kRvd3V/tfjnziQjygO4YRhoOmRCYw6UYs9GbMs/XBuSFCER0rt6xm
Xfc/GsTkho1lLFavDaGSkcLqWUwUosUUio+ebjSE22OMAF/Wi73kEyQ1rvIYJMZ+
HckUoiH83dMWedEFWTc7ACo8OdXaOh6V80BM1ow18fE011JSL5M0uJXVWFVeUn3R
DQhs46Guuu1qlt0a9thjdtLsZ6ta3wTvlVY=
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:44:06 2026 by rpki-client