Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebcb9959-7946-3f5a-8ae3-adc8d5799827.roa
File:                     ebcb9959-7946-3f5a-8ae3-adc8d5799827.roa (raw, json)
Hash identifier:          muS+y4vaZBmrlMsTWvTpiFMGes1WiBzRQyGQ5a0k21w=
Subject key identifier:   5E:1C:F6:4D:5A:66:3C:9A:64:0F:01:99:E9:2D:63:9F:B6:D2:7C:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67D1F80E89C5F59CC99E9C
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebcb9959-7946-3f5a-8ae3-adc8d5799827.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:d1:f8:0e:89:c5:f5:9c:c9:9e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=3a2c40a9-f7fe-4325-9642-d8503c749400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7b:0a:7a:9f:8f:d1:f1:b0:a3:a6:92:69:3a:
                    2c:20:7a:13:52:8d:e1:74:38:a1:55:02:05:25:9a:
                    2b:0f:81:53:f6:40:65:ee:a0:e0:a7:6d:6f:8c:62:
                    3f:7e:2f:1a:e4:fe:55:91:fe:31:7f:f0:b9:82:fe:
                    6e:31:c0:41:e7:e0:7d:03:d1:4a:e7:ab:e3:51:65:
                    78:a8:8c:b0:a0:1b:a0:1b:79:e8:ad:ff:09:78:fd:
                    bd:8b:4a:aa:65:20:51:b9:21:a4:d1:d5:45:bf:3e:
                    e4:c8:16:6b:12:7b:27:10:e5:fc:a1:c0:50:e5:9b:
                    69:f7:8a:37:5b:4d:0e:0b:f9:9f:62:77:12:2d:27:
                    7b:2c:ce:9d:02:38:63:7c:c0:38:cc:c5:d8:fd:86:
                    40:31:e5:75:65:ac:48:81:3a:a6:82:5a:de:6c:ea:
                    ed:b9:52:56:01:ad:50:7a:df:47:f5:80:3f:9c:9a:
                    7f:aa:bb:40:92:1a:8d:80:ed:7a:59:42:1a:f8:c9:
                    d2:3d:17:ad:c0:93:be:d3:b4:2f:85:9f:d6:a8:14:
                    be:9c:7a:a2:17:fc:74:fd:ff:01:ae:f4:38:50:ad:
                    c6:ca:f8:0e:4b:c3:db:df:d6:11:4d:49:ca:b6:cf:
                    c5:ce:23:17:b5:3e:70:18:51:de:87:5a:bc:ed:5e:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1C:F6:4D:5A:66:3C:9A:64:0F:01:99:E9:2D:63:9F:B6:D2:7C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebcb9959-7946-3f5a-8ae3-adc8d5799827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:94:8f:2f:e6:e8:e7:ab:70:da:f5:b6:ea:e4:b4:68:dc:cf:
         13:e0:03:16:71:1b:e5:23:42:a5:a0:02:df:e5:a4:e7:af:5e:
         4d:e9:19:32:71:d3:43:35:36:d2:03:9a:d8:d0:eb:87:42:ed:
         69:34:a3:de:bc:f5:0a:9b:5a:f8:dc:c2:d0:0f:c5:7b:df:97:
         5f:9a:8c:28:04:0a:dc:64:0d:66:98:ee:58:28:af:68:f5:5b:
         fd:55:a2:fb:46:af:f6:65:34:46:bd:9d:c4:2c:7c:c5:b2:f7:
         01:3d:7d:ed:68:da:1c:9e:a7:dc:15:a2:77:12:dc:ec:5e:c4:
         bc:25:92:14:3e:50:29:97:ab:2f:6e:a4:19:36:d3:9c:b6:0a:
         f6:2e:9e:2e:ad:91:1f:84:66:90:52:da:e4:46:10:17:23:4f:
         df:ec:af:b4:50:75:e5:24:5e:ae:38:a0:82:c5:60:ff:7e:92:
         02:d2:fb:13:71:aa:48:e4:52:79:fd:26:3e:65:3e:87:b8:c4:
         c3:f1:9d:ba:ec:ed:25:67:e6:3f:08:ef:06:13:05:a9:a6:e2:
         19:06:e1:65:39:3a:9f:dd:28:b1:cd:d0:86:cd:93:7f:4d:d7:
         27:30:91:d1:94:b0:49:96:ca:e9:c5:2d:60:5c:19:f7:78:72:
         43:5e:c9:d6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzcZ9H4DonF9ZzJnpwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
M2EyYzQwYTktZjdmZS00MzI1LTk2NDItZDg1MDNjNzQ5NDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXsKep+P0fGwo6aSaTosIHoTUo3hdDihVQIF
JZorD4FT9kBl7qDgp21vjGI/fi8a5P5Vkf4xf/C5gv5uMcBB5+B9A9FK56vjUWV4
qIywoBugG3norf8JeP29i0qqZSBRuSGk0dVFvz7kyBZrEnsnEOX8ocBQ5Ztp94o3
W00OC/mfYncSLSd7LM6dAjhjfMA4zMXY/YZAMeV1ZaxIgTqmglrebOrtuVJWAa1Q
et9H9YA/nJp/qrtAkhqNgO16WUIa+MnSPRetwJO+07QvhZ/WqBS+nHqiF/x0/f8B
rvQ4UK3GyvgOS8Pb39YRTUnKts/FziMXtT5wGFHeh1q87V6pjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF4c9k1aZjyaZA8BmektY5+20nzbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWJjYjk5NTktNzk0Ni0z
ZjVhLThhZTMtYWRjOGQ1Nzk5ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQAKAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFiUjy/m6OercNr1turktGjczxPgAxZxG+UjQqWgAt/lpOevXk3p
GTJx00M1NtIDmtjQ64dC7Wk0o9689QqbWvjcwtAPxXvfl1+ajCgECtxkDWaY7lgo
r2j1W/1VovtGr/ZlNEa9ncQsfMWy9wE9fe1o2hyep9wVoncS3OxexLwlkhQ+UCmX
qy9upBk205y2CvYuni6tkR+EZpBS2uRGEBcjT9/sr7RQdeUkXq44oILFYP9+kgLS
+xNxqkjkUnn9Jj5lPoe4xMPxnbrs7SVn5j8I7wYTBamm4hkG4WU5Op/dKLHN0IbN
k39N1ycwkdGUsEmWyunFLWBcGfd4ckNeydY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:34 2026 by rpki-client