Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e59e5d3e-cb74-38c2-ba4f-53384a9304e9.roa
File:                     e59e5d3e-cb74-38c2-ba4f-53384a9304e9.roa (raw, json)
Hash identifier:          1r/t/Z/BwUAS9axPdA2PwP1kS38869gK7JwJY9dGvYE=
Subject key identifier:   67:E3:A3:5A:31:61:05:68:24:37:E2:1F:C5:26:DA:8A:75:E3:2D:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DC8305AD9F1381B49BF42D800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e59e5d3e-cb74-38c2-ba4f-53384a9304e9.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     11145
IP address blocks:        2607:f160::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:5a:d9:f1:38:1b:49:bf:42:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=0ec52e53-927b-498d-9863-056b2b0996bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:77:c0:dd:73:26:ec:54:0e:1d:97:09:ef:
                    59:26:af:62:cc:37:41:61:e3:69:d2:eb:9b:c0:17:
                    d4:8d:a5:01:45:ca:e3:ee:a4:a5:1f:ec:93:a5:68:
                    39:36:52:98:8e:78:cb:3c:c1:14:0b:6d:15:bc:9d:
                    cb:58:99:d5:62:eb:27:b1:55:89:31:93:d5:29:e7:
                    58:dd:0c:58:02:fa:f6:ad:c6:f8:fc:57:5d:77:bf:
                    55:17:f4:31:d7:97:69:d9:ce:b7:92:3c:45:4a:de:
                    f5:1d:ae:c4:f1:1f:cd:d1:bf:b9:58:81:ea:4b:af:
                    37:11:9c:73:35:50:fd:b5:4b:b1:5a:2e:40:4e:3e:
                    7e:d9:07:e2:73:f0:a5:d6:75:05:a5:2b:d0:ee:95:
                    ae:b6:a2:82:b4:09:b0:72:9f:82:b4:10:d2:98:a5:
                    e2:e7:54:4f:45:8b:4b:73:0a:f1:d2:fd:9f:a6:a2:
                    91:9d:f7:34:a7:13:84:fb:00:0a:d3:bc:51:9c:ff:
                    83:08:c4:7c:be:b4:4f:57:d7:2e:b6:c3:fa:0f:11:
                    a8:65:de:03:60:55:f6:29:8c:48:8d:e3:8a:62:55:
                    ed:49:96:a1:77:55:dd:f8:dd:45:11:e8:2c:5c:79:
                    6c:3b:53:15:91:aa:63:05:57:e2:4b:e1:99:85:e4:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E3:A3:5A:31:61:05:68:24:37:E2:1F:C5:26:DA:8A:75:E3:2D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e59e5d3e-cb74-38c2-ba4f-53384a9304e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8c:e9:af:dc:20:8e:93:d7:18:36:88:58:59:af:63:51:71:
         f4:92:18:e1:47:68:ec:c4:30:ad:9a:dc:97:1e:69:31:37:d8:
         62:10:ed:d3:a7:04:15:d7:ed:e1:ed:49:12:4e:22:fb:57:cf:
         ae:c2:1b:c3:46:d9:13:cf:24:df:9c:3e:ad:df:12:e9:e8:13:
         cd:4f:a6:24:b3:e8:b9:00:80:0e:d0:96:44:a8:d9:5a:6f:63:
         a8:6d:50:38:3c:a1:f7:86:c5:f7:08:f6:03:ac:63:9a:7e:5c:
         dc:5e:bd:c5:c2:41:7b:aa:3e:54:b2:49:68:71:ac:22:68:3a:
         2e:11:a4:7f:8a:97:89:51:e2:58:ee:50:57:74:97:17:47:32:
         c1:e8:46:64:9a:19:48:a8:64:ae:41:0f:f8:53:0d:69:30:f2:
         6d:1c:05:50:3b:de:00:9f:e8:8a:83:b2:82:f8:c2:80:1f:fc:
         c8:7c:9c:5f:20:cb:8f:c5:26:d2:c0:2a:73:0c:57:ca:30:3c:
         60:89:24:6b:aa:3e:70:b7:8b:c8:f0:99:13:4e:51:f6:32:77:
         57:81:00:31:fc:1c:5a:fb:30:77:9b:4d:73:28:68:0c:00:8d:
         ec:be:8c:7e:18:12:48:b9:19:62:23:33:66:3e:ed:d6:1d:8a:
         c5:88:0b:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3IMFrZ8TgbSb9C2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk
MGVjNTJlNTMtOTI3Yi00OThkLTk4NjMtMDU2YjJiMDk5NmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAx3wN1zJuxUDh2XCe9ZJq9izDdBYeNp0uub
wBfUjaUBRcrj7qSlH+yTpWg5NlKYjnjLPMEUC20VvJ3LWJnVYusnsVWJMZPVKedY
3QxYAvr2rcb4/Fddd79VF/Qx15dp2c63kjxFSt71Ha7E8R/N0b+5WIHqS683EZxz
NVD9tUuxWi5ATj5+2Qfic/Cl1nUFpSvQ7pWutqKCtAmwcp+CtBDSmKXi51RPRYtL
cwrx0v2fpqKRnfc0pxOE+wAK07xRnP+DCMR8vrRPV9cutsP6DxGoZd4DYFX2KYxI
jeOKYlXtSZahd1Xd+N1FEegsXHlsO1MVkapjBVfiS+GZheS6uwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGfjo1oxYQVoJDfiH8Um2op14y2nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTU5ZTVkM2UtY2I3NC0z
OGMyLWJhNGYtNTMzODRhOTMwNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfxYAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJmM6a/cII6T1xg2iFhZr2NRcfSSGOFHaOzEMK2a3JceaTE32GIQ
7dOnBBXX7eHtSRJOIvtXz67CG8NG2RPPJN+cPq3fEunoE81PpiSz6LkAgA7QlkSo
2VpvY6htUDg8ofeGxfcI9gOsY5p+XNxevcXCQXuqPlSySWhxrCJoOi4RpH+Kl4lR
4ljuUFd0lxdHMsHoRmSaGUioZK5BD/hTDWkw8m0cBVA73gCf6IqDsoL4woAf/Mh8
nF8gy4/FJtLAKnMMV8owPGCJJGuqPnC3i8jwmRNOUfYyd1eBADH8HFr7MHebTXMo
aAwAjey+jH4YEki5GWIjM2Y+7dYdisWICxI=
-----END CERTIFICATE-----
Generated at Wed May 13 15:00:59 2026 by rpki-client