Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a85b5267-6a19-3bc3-ba14-d002b295be7c.roa
File:                     a85b5267-6a19-3bc3-ba14-d002b295be7c.roa (raw, json)
Hash identifier:          UDixfOx3QC0Iq/X+LzoTkvr4WKQqTu9pPNWlqBKl3IU=
Subject key identifier:   3B:EC:3A:0A:58:E6:15:04:C2:B3:BF:7A:81:4B:BA:EC:C0:03:B5:72
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4989ABE288C4A71E9E6E2B79
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a85b5267-6a19-3bc3-ba14-d002b295be7c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1012:a126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:ab:e2:88:c4:a7:1e:9e:6e:2b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ec7b4616-4a58-4242-a371-32fe5146cf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:e8:98:65:84:c7:69:86:fe:35:92:11:e2:
                    42:fa:60:37:de:4b:50:9f:e0:21:c7:75:ff:9c:18:
                    fd:2e:d9:d6:af:f0:4c:50:5a:30:08:d2:b2:6e:39:
                    b7:2f:38:10:a5:89:6b:4b:f8:15:f9:82:96:39:20:
                    a3:74:1f:09:87:90:e8:49:7b:7f:92:29:d3:3a:4a:
                    6a:b3:d1:5d:86:64:4c:1d:26:8b:6e:02:66:15:d6:
                    4e:ff:9f:45:d4:a5:78:70:1f:94:af:33:fc:1c:64:
                    c5:08:1c:9f:11:b8:00:98:a4:12:38:68:e9:11:1b:
                    bc:ee:c6:08:96:5b:96:93:fa:12:57:7c:59:9b:bd:
                    31:e3:55:83:b2:da:4a:e7:c4:cd:3f:1f:8c:36:a3:
                    63:7b:df:ba:e0:05:e1:06:8f:d8:08:af:04:15:a7:
                    f3:4b:2f:6a:30:33:9d:93:ec:7d:81:28:87:cf:2f:
                    fb:0a:05:85:c8:d1:bd:ea:12:0e:c4:0d:0b:2f:12:
                    a7:d1:eb:2a:d8:57:c5:6a:fc:71:7f:f6:6e:98:e9:
                    83:39:12:0f:5b:97:ac:96:f9:53:e8:a0:e9:59:fb:
                    76:f7:f9:13:98:52:bc:85:ce:ee:ee:38:68:4c:a2:
                    a3:34:31:f9:b3:6e:fe:82:20:2c:df:c1:37:4c:ff:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EC:3A:0A:58:E6:15:04:C2:B3:BF:7A:81:4B:BA:EC:C0:03:B5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a85b5267-6a19-3bc3-ba14-d002b295be7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:f1:ca:ab:2c:5a:fd:11:30:87:df:0e:d1:3f:b8:de:bc:
         d5:20:d2:36:6b:a8:5d:b1:98:e6:99:1a:de:84:51:cc:de:a1:
         8d:cf:cc:cf:de:88:0a:ec:f1:1f:6e:19:2c:61:bf:ed:df:08:
         a8:9b:7e:70:a3:1e:f6:84:09:c7:bc:cc:a0:d3:96:f8:43:db:
         f2:ca:d1:57:9f:ec:97:6b:65:95:aa:9e:72:10:0b:fd:a4:72:
         36:69:51:10:31:59:e9:9a:ef:ca:37:84:21:2f:4e:06:48:51:
         bc:6a:39:10:b3:73:21:97:ce:b7:d6:b8:f8:a7:30:0a:37:8c:
         4d:19:30:bb:62:9e:c9:76:62:7e:be:d7:09:1f:7e:0e:61:ac:
         1e:4f:40:ea:a4:5e:17:5d:d6:81:92:9c:2a:2b:10:b2:48:99:
         cb:58:05:15:5e:8a:d3:d3:8f:93:b7:86:e5:1d:70:56:61:65:
         13:8a:54:96:ae:f6:14:af:e8:7d:c7:cf:a8:0e:24:f4:4e:f6:
         f7:c7:71:d2:7d:37:6c:02:85:61:ce:2f:c5:71:41:43:67:4e:
         53:7f:6f:c4:00:fa:4b:6a:a1:e5:23:16:3a:9b:14:40:38:9a:
         29:20:54:1f:20:fd:c3:e8:06:2c:98:1a:77:d1:7d:46:6e:e1:
         0b:9f:91:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiaviiMSnHp5uK3kwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWM3YjQ2MTYtNGE1OC00MjQyLWEzNzEtMzJmZTUxNDZjZjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2/omGWEx2mG/jWSEeJC+mA33ktQn+Ahx3X/
nBj9LtnWr/BMUFowCNKybjm3LzgQpYlrS/gV+YKWOSCjdB8Jh5DoSXt/kinTOkpq
s9FdhmRMHSaLbgJmFdZO/59F1KV4cB+UrzP8HGTFCByfEbgAmKQSOGjpERu87sYI
lluWk/oSV3xZm70x41WDstpK58TNPx+MNqNje9+64AXhBo/YCK8EFafzSy9qMDOd
k+x9gSiHzy/7CgWFyNG96hIOxA0LLxKn0esq2FfFavxxf/ZumOmDORIPW5eslvlT
6KDpWft29/kTmFK8hc7u7jhoTKKjNDH5s27+giAs38E3TP9xYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDvsOgpY5hUEwrO/eoFLuuzAA7VyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTg1YjUyNjctNmExOS0z
YmMzLWJhMTQtZDAwMmIyOTViZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQEqEm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGW58cqrLFr9ETCH3w7RP7jevNUg0jZrqF2xmOaZGt6EUczeoY3P
zM/eiArs8R9uGSxhv+3fCKibfnCjHvaECce8zKDTlvhD2/LK0Vef7JdrZZWqnnIQ
C/2kcjZpURAxWema78o3hCEvTgZIUbxqORCzcyGXzrfWuPinMAo3jE0ZMLtinsl2
Yn6+1wkffg5hrB5PQOqkXhdd1oGSnCorELJImctYBRVeitPTj5O3huUdcFZhZROK
VJau9hSv6H3Hz6gOJPRO9vfHcdJ9N2wChWHOL8VxQUNnTlN/b8QA+ktqoeUjFjqb
FEA4mikgVB8g/cPoBiyYGnfRfUZu4Qufkcg=
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:52:12 2026 by rpki-client