Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be4c9bc8-7f9b-3653-b79f-aa31651cd147.roa
File:                     be4c9bc8-7f9b-3653-b79f-aa31651cd147.roa (raw, json)
Hash identifier:          Vh2G14Q9ApyGK+2jTOVSqou20dwo43ccQWBbdAyYEW4=
Subject key identifier:   16:4A:27:2F:C4:0F:21:D4:65:88:1F:5C:8B:BF:A7:EC:E5:F0:BA:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F498BA15E67CB2F8DC39AE280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be4c9bc8-7f9b-3653-b79f-aa31651cd147.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1006:a133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:a1:5e:67:cb:2f:8d:c3:9a:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4343bf0b-1697-418d-ac28-2cf2704e0a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e4:74:90:5c:a9:5a:e6:06:f1:3f:bd:5b:02:
                    c7:20:87:0c:d1:99:ff:e5:04:f2:25:2a:44:4f:10:
                    1e:23:e8:cd:c5:11:ea:49:8e:79:1f:11:37:40:9b:
                    db:3c:5b:51:56:63:02:95:cd:ff:18:e4:e3:c6:42:
                    64:8c:6b:27:b6:04:5b:38:3c:3c:ac:f7:d5:f1:3a:
                    61:3b:5b:ba:d2:d2:9b:9b:07:06:cc:88:ab:0f:e5:
                    7e:3b:16:eb:af:ff:f0:77:7c:84:91:68:29:2f:ba:
                    ce:2c:b1:6f:56:a0:a6:30:dd:5e:7a:dd:0d:39:2d:
                    84:f3:bd:71:a9:33:d6:8f:b4:8b:fc:bd:7f:8c:93:
                    a8:42:c9:59:96:19:0a:6a:bb:2f:a3:0b:61:c6:25:
                    51:16:02:60:27:e1:8e:30:98:26:d2:4d:47:4c:23:
                    fe:f1:9d:1f:44:8f:fb:d8:ae:80:06:10:1b:7f:86:
                    22:a8:d4:e2:c6:44:99:f5:3a:c8:5d:4c:46:bd:bd:
                    e8:39:7e:85:23:1c:f2:27:d6:6c:8d:fd:4c:45:ee:
                    ba:1f:79:d6:6d:db:29:14:2e:9e:ce:fa:76:da:a6:
                    f4:91:ce:9d:a4:c5:03:5d:cf:1d:4e:d6:bc:81:1c:
                    fb:08:8a:af:7f:5a:98:ee:69:f6:cb:8b:b1:ce:c7:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4A:27:2F:C4:0F:21:D4:65:88:1F:5C:8B:BF:A7:EC:E5:F0:BA:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/be4c9bc8-7f9b-3653-b79f-aa31651cd147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:74:36:37:b0:aa:08:7e:e7:87:9a:e5:cb:9a:f3:c7:1c:06:
         bc:52:95:ca:b1:b0:83:fc:ef:e8:44:a3:df:95:33:01:bb:01:
         8e:d6:06:2e:3d:b2:27:76:77:8b:29:a4:bd:3c:e5:b6:ba:aa:
         39:72:19:7c:f4:68:a2:e3:ba:d9:11:45:32:c6:dc:47:16:75:
         7d:4f:10:68:6c:c6:e2:31:c9:20:25:f7:33:15:51:95:8b:08:
         7c:5a:25:85:54:b3:e6:10:5c:0c:11:a1:6d:60:39:3a:fd:04:
         ff:17:fb:3e:b2:f1:6f:4b:39:f8:6c:c1:c2:7a:31:35:a2:7e:
         2f:5f:39:52:04:85:2e:29:29:ef:19:b5:00:1d:67:32:40:0c:
         54:6b:1c:3c:b4:b2:7c:60:f2:31:91:82:93:92:e4:eb:57:b0:
         c6:50:59:87:92:8e:14:c2:6d:de:52:82:23:80:bb:32:48:c1:
         de:6a:62:a1:cf:03:f1:d7:1c:48:26:68:36:20:c6:5d:4b:f7:
         41:98:99:ac:60:eb:67:d2:29:bf:1a:90:84:36:ca:c0:54:c4:
         ed:5d:fa:0f:b7:e5:0d:07:ef:a6:ee:24:30:28:4f:c2:65:51:
         38:2b:13:0c:05:da:42:63:c3:ed:bf:80:7b:cd:f7:0e:a9:c6:
         d7:4c:bc:b4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji6FeZ8svjcOa4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDM0M2JmMGItMTY5Ny00MThkLWFjMjgtMmNmMjcwNGUwYTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uR0kFypWuYG8T+9WwLHIIcM0Zn/5QTyJSpE
TxAeI+jNxRHqSY55HxE3QJvbPFtRVmMClc3/GOTjxkJkjGsntgRbODw8rPfV8Tph
O1u60tKbmwcGzIirD+V+Oxbrr//wd3yEkWgpL7rOLLFvVqCmMN1eet0NOS2E871x
qTPWj7SL/L1/jJOoQslZlhkKarsvowthxiVRFgJgJ+GOMJgm0k1HTCP+8Z0fRI/7
2K6ABhAbf4YiqNTixkSZ9TrIXUxGvb3oOX6FIxzyJ9Zsjf1MRe66H3nWbdspFC6e
zvp22qb0kc6dpMUDXc8dTta8gRz7CIqvf1qY7mn2y4uxzsc9JwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBZKJy/EDyHUZYgfXIu/p+zl8LpdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmU0YzliYzgtN2Y5Yi0z
NjUzLWI3OWYtYWEzMTY1MWNkMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBqEz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJN0Njewqgh+54ea5cua88ccBrxSlcqxsIP87+hEo9+VMwG7AY7W
Bi49sid2d4sppL085ba6qjlyGXz0aKLjutkRRTLG3EcWdX1PEGhsxuIxySAl9zMV
UZWLCHxaJYVUs+YQXAwRoW1gOTr9BP8X+z6y8W9LOfhswcJ6MTWifi9fOVIEhS4p
Ke8ZtQAdZzJADFRrHDy0snxg8jGRgpOS5OtXsMZQWYeSjhTCbd5SgiOAuzJIwd5q
YqHPA/HXHEgmaDYgxl1L90GYmaxg62fSKb8akIQ2ysBUxO1d+g+35Q0H76buJDAo
T8JlUTgrEwwF2kJjw+2/gHvN9w6pxtdMvLQ=
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:32:36 2026 by rpki-client