Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12e949b7-50a3-3eee-9a5f-b9854f422eaf.roa
File:                     12e949b7-50a3-3eee-9a5f-b9854f422eaf.roa (raw, json)
Hash identifier:          d9ACGCg+fPcC20tkmo12Nt3bFTNE/VfezZvs+ts/Eec=
Subject key identifier:   32:C1:D7:9E:4F:6C:53:F7:5F:5F:B1:5A:84:3C:5B:85:6F:F0:E7:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD513DD646869831AA5A20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12e949b7-50a3-3eee-9a5f-b9854f422eaf.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1005:a021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:51:3d:d6:46:86:98:31:aa:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=b49b9d87-b097-4270-8e7d-aa1ff57dfbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:8e:5e:5f:22:5e:d7:a0:b9:3e:95:90:9e:
                    ff:2e:99:ed:03:83:8a:e1:04:4f:cc:f5:d5:07:be:
                    8c:ac:4c:24:56:91:8b:a5:93:04:f6:9c:cf:be:a5:
                    a4:34:9f:77:d7:a0:11:4e:76:43:da:7f:2a:0e:87:
                    70:a5:e5:3c:35:6a:c1:75:a2:e3:30:ca:e8:b1:7a:
                    67:bc:79:fd:8b:cb:cf:0a:48:81:10:bc:fb:c9:84:
                    1b:5d:1d:09:43:1f:88:17:b3:48:fa:32:c6:41:ed:
                    72:c5:89:3e:73:15:fb:8d:b3:a1:0a:71:6f:33:af:
                    38:27:e1:3c:9e:b5:8a:5b:8f:aa:31:36:9e:1f:c5:
                    a2:4e:2d:6e:43:c9:ad:2a:d6:33:e9:09:f7:e7:2f:
                    e4:b1:70:e7:c5:65:fb:98:d9:45:e1:d8:96:1a:3b:
                    50:d0:f5:33:12:fd:1e:96:1c:2b:92:f7:be:af:a6:
                    7d:b7:15:dd:97:8b:66:90:e7:38:e6:5b:e2:0a:c2:
                    16:11:65:3f:9f:11:84:f7:7d:4a:43:20:dc:48:17:
                    96:3d:6a:98:56:ae:77:d7:46:8e:6e:2c:71:b5:5c:
                    ec:da:e1:f1:2a:0d:bd:c0:d1:cf:c8:e7:e8:d6:00:
                    ee:f2:8d:ed:03:b9:4d:e7:3c:ee:65:8e:54:e0:df:
                    58:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C1:D7:9E:4F:6C:53:F7:5F:5F:B1:5A:84:3C:5B:85:6F:F0:E7:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12e949b7-50a3-3eee-9a5f-b9854f422eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f8:26:42:9e:12:3c:dc:0f:20:a6:74:40:21:c1:f1:b2:76:
         f9:5c:b0:51:50:b4:53:6c:79:63:d8:97:c8:ec:ba:78:ae:b2:
         b4:4e:00:fa:85:39:f8:44:de:c2:72:85:bc:18:44:96:1a:51:
         95:89:52:cf:4d:b5:28:cd:c9:e2:25:9f:94:58:7b:a2:5f:93:
         3e:aa:d3:3d:d4:5c:fe:bd:f2:bc:b9:af:50:81:df:01:7d:2f:
         32:d2:83:5a:3c:a8:7e:af:10:dc:ea:7a:8a:9c:f9:c6:66:52:
         eb:e0:35:48:e1:9f:6a:bd:3c:a5:5c:df:be:23:30:e1:66:18:
         50:a3:f3:ac:8a:c9:57:21:e5:e1:35:e2:ec:a5:a3:dc:1a:6c:
         26:0a:7a:94:c5:41:ee:a1:18:06:01:4d:95:8d:63:b6:a3:6b:
         d9:42:5f:02:dc:b5:d3:93:78:a9:d2:1e:2f:f1:0b:9a:5f:68:
         74:fb:41:af:a1:f8:6c:d2:45:e1:d0:de:e2:2b:d7:e3:ed:cb:
         10:2e:0f:02:13:94:3c:8e:87:1a:6c:de:0e:a0:1c:11:fa:5b:
         20:fb:4f:06:2a:6a:3a:49:8e:33:35:5d:a6:36:31:1d:e7:08:
         bb:21:6b:df:62:ad:78:18:99:ce:3f:64:15:a8:34:10:60:76:
         10:40:10:63
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8/rVE91kaGmDGqWiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
YjQ5YjlkODctYjA5Ny00MjcwLThlN2QtYWExZmY1N2RmYmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+OOXl8iXteguT6VkJ7/LpntA4OK4QRPzPXV
B76MrEwkVpGLpZME9pzPvqWkNJ9316ARTnZD2n8qDodwpeU8NWrBdaLjMMrosXpn
vHn9i8vPCkiBELz7yYQbXR0JQx+IF7NI+jLGQe1yxYk+cxX7jbOhCnFvM684J+E8
nrWKW4+qMTaeH8WiTi1uQ8mtKtYz6Qn35y/ksXDnxWX7mNlF4diWGjtQ0PUzEv0e
lhwrkve+r6Z9txXdl4tmkOc45lviCsIWEWU/nxGE931KQyDcSBeWPWqYVq5310aO
bixxtVzs2uHxKg29wNHPyOfo1gDu8o3tA7lN5zzuZY5U4N9YPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDLB155PbFP3X1+xWoQ8W4Vv8OdUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTJlOTQ5YjctNTBhMy0z
ZWVlLTlhNWYtYjk4NTRmNDIyZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBaAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABT4JkKeEjzcDyCmdEAhwfGydvlcsFFQtFNseWPYl8jsuniusrRO
APqFOfhE3sJyhbwYRJYaUZWJUs9NtSjNyeIln5RYe6Jfkz6q0z3UXP698ry5r1CB
3wF9LzLSg1o8qH6vENzqeoqc+cZmUuvgNUjhn2q9PKVc374jMOFmGFCj86yKyVch
5eE14uylo9wabCYKepTFQe6hGAYBTZWNY7aja9lCXwLctdOTeKnSHi/xC5pfaHT7
Qa+h+GzSReHQ3uIr1+PtyxAuDwITlDyOhxps3g6gHBH6WyD7TwYqajpJjjM1XaY2
MR3nCLsha99irXgYmc4/ZBWoNBBgdhBAEGM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:11:39 2026 by rpki-client