Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef0a69c8-5b42-3aa5-8fe9-fca9a827ab0c.roa
File:                     ef0a69c8-5b42-3aa5-8fe9-fca9a827ab0c.roa (raw, json)
Hash identifier:          w8um2szo51gETgQJOF5u2RUW6NL6GvofFDub2EhOOSM=
Subject key identifier:   77:6E:77:C2:B0:76:D7:59:F9:65:9A:92:57:88:87:18:F5:7F:A3:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F498662E295F83573A50EB080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef0a69c8-5b42-3aa5-8fe9-fca9a827ab0c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:a0ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:62:e2:95:f8:35:73:a5:0e:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=516ef592-bc8e-4898-8b82-4458752db8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:cd:79:b6:98:f2:a6:71:94:55:55:ad:64:
                    94:38:2f:68:44:4b:30:27:e5:b8:06:9d:b9:c8:4b:
                    70:d9:4b:8b:0a:6a:50:ff:15:3f:35:3b:12:19:65:
                    d3:86:f5:b9:8b:30:2d:8e:2b:28:05:13:fe:b1:63:
                    b0:09:46:74:42:7d:21:24:fc:06:13:65:dd:c7:3e:
                    15:8d:38:9d:76:8b:3e:d0:0c:ce:91:88:7d:9f:a3:
                    ce:63:27:5c:af:52:fa:6a:22:73:3c:a7:fe:9d:d0:
                    41:ce:8c:ef:0c:87:55:ca:4a:d7:09:e5:2b:11:b4:
                    a4:3e:15:5c:36:19:a3:21:a3:1d:1d:28:68:f4:1f:
                    da:66:c5:88:4a:91:2a:b3:b4:6b:b9:b6:ca:0e:61:
                    2f:93:ef:a5:b5:a6:b0:1c:8a:66:e0:3f:df:63:7c:
                    0a:a0:71:84:47:82:78:b3:09:a2:56:d7:5d:17:6b:
                    e3:5d:58:ef:9d:14:10:ef:6f:7c:00:77:eb:78:e1:
                    d1:68:24:46:12:8e:82:11:6a:21:26:f3:78:d5:d0:
                    df:d4:66:53:a6:7a:7e:54:9d:bf:c8:f6:64:f9:05:
                    b4:33:da:5b:d5:fa:af:6c:a5:6b:5b:24:9b:49:39:
                    9a:fd:a8:d5:47:be:ac:d9:d7:89:53:0f:e9:35:ea:
                    4d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6E:77:C2:B0:76:D7:59:F9:65:9A:92:57:88:87:18:F5:7F:A3:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef0a69c8-5b42-3aa5-8fe9-fca9a827ab0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a0ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0c:87:cd:26:b1:d4:f1:2b:6c:23:dd:a0:12:74:60:c6:84:
         2d:dc:9f:ae:b6:f5:3a:93:f5:bc:e3:e4:7e:b4:e3:57:49:2e:
         0b:90:ab:86:3e:ae:42:21:23:2d:ca:53:a5:be:b2:91:64:f5:
         b9:40:7e:bb:a6:8f:2b:4b:4c:f1:47:de:ea:1a:d1:22:a1:a3:
         02:68:8d:eb:25:53:f8:88:59:dc:41:47:12:51:71:3f:91:66:
         a8:fa:3b:e5:df:84:20:c7:f5:eb:52:db:13:a9:18:c5:5d:04:
         51:dd:49:c8:03:5f:6c:99:98:92:60:4a:c3:85:7e:a0:5a:84:
         b5:be:a1:37:a0:c5:98:86:ac:46:e3:0e:dc:34:ac:03:65:12:
         28:0f:06:bd:7f:32:f4:cc:c4:c0:c1:9b:eb:f8:ab:5d:a4:9d:
         7d:92:50:fb:6e:43:86:11:db:26:26:50:3a:e7:ab:db:4b:ad:
         d6:ce:85:8b:fb:ea:23:0c:af:01:59:a9:24:70:0c:64:eb:1d:
         09:bd:ca:02:64:ca:1b:8e:59:a3:57:3e:90:b5:4a:d1:2f:2c:
         e8:c8:90:50:9d:24:c7:2e:c4:df:c3:14:83:37:76:4e:20:8d:
         79:21:18:89:e2:66:1c:f6:d8:86:2c:30:56:95:ca:41:6c:20:
         ac:f2:2d:7b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhmLilfg1c6UOsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTE2ZWY1OTItYmM4ZS00ODk4LThiODItNDQ1ODc1MmRiOGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuHNebaY8qZxlFVVrWSUOC9oREswJ+W4Bp25
yEtw2UuLCmpQ/xU/NTsSGWXThvW5izAtjisoBRP+sWOwCUZ0Qn0hJPwGE2Xdxz4V
jTiddos+0AzOkYh9n6POYydcr1L6aiJzPKf+ndBBzozvDIdVykrXCeUrEbSkPhVc
NhmjIaMdHSho9B/aZsWISpEqs7RrubbKDmEvk++ltaawHIpm4D/fY3wKoHGER4J4
swmiVtddF2vjXVjvnRQQ7298AHfreOHRaCRGEo6CEWohJvN41dDf1GZTpnp+VJ2/
yPZk+QW0M9pb1fqvbKVrWySbSTma/ajVR76s2deJUw/pNepNhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHdud8KwdtdZ+WWakleIhxj1f6OxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWYwYTY5YzgtNWI0Mi0z
YWE1LThmZTktZmNhOWE4MjdhYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQDaDt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFoMh80msdTxK2wj3aASdGDGhC3cn6629TqT9bzj5H6041dJLguQ
q4Y+rkIhIy3KU6W+spFk9blAfrumjytLTPFH3uoa0SKhowJojeslU/iIWdxBRxJR
cT+RZqj6O+XfhCDH9etS2xOpGMVdBFHdScgDX2yZmJJgSsOFfqBahLW+oTegxZiG
rEbjDtw0rANlEigPBr1/MvTMxMDBm+v4q12knX2SUPtuQ4YR2yYmUDrnq9tLrdbO
hYv76iMMrwFZqSRwDGTrHQm9ygJkyhuOWaNXPpC1StEvLOjIkFCdJMcuxN/DFIM3
dk4gjXkhGIniZhz22IYsMFaVykFsIKzyLXs=
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:39:12 2026 by rpki-client