Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca7cb612-0e19-3e96-b943-218bda1fb060.roa
File:                     ca7cb612-0e19-3e96-b943-218bda1fb060.roa (raw, json)
Hash identifier:          lMMyjx/LK3omUM2BVLY4OUuvdiQ+RsKzhciIHoEVFrM=
Subject key identifier:   AB:0F:B8:60:47:CD:AA:79:B3:A0:9C:C9:F0:25:8A:26:9C:90:F4:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D22AC5399B3DEE3F902C0A7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca7cb612-0e19-3e96-b943-218bda1fb060.roa
Signing time:             Wed 11 Mar 2026 18:06:17 +0000
ROA not before:           Wed 11 Mar 2026 18:06:17 +0000
ROA not after:            Tue 09 Jun 2026 18:06:17 +0000
asID:                     6167
IP address blocks:        2600:1009:a130::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:ac:53:99:b3:de:e3:f9:02:c0:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 18:06:17 2026 GMT
            Not After : Jun  9 18:06:17 2026 GMT
        Subject: CN=2ba1de9a-75e6-4abf-abf0-6376ab3bad64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:00:3b:6b:0c:90:54:d6:ba:c6:a3:b5:aa:6d:
                    06:e4:f5:a6:83:2f:18:cd:ac:9a:af:03:04:48:28:
                    8d:e7:66:ed:42:90:1f:c7:d5:fb:60:fc:b8:1f:17:
                    29:b8:f6:7f:65:52:ab:e3:19:9b:c1:7b:c2:1f:0b:
                    79:8e:37:91:dc:61:e6:38:b3:b3:c3:dc:81:97:da:
                    7d:8a:c0:45:6f:93:68:de:65:54:3f:cc:1e:fa:e7:
                    55:5d:83:5a:ee:ad:50:e8:a5:ab:e9:5b:3c:14:d2:
                    4b:9c:98:54:4b:b8:89:ec:f2:91:00:74:9a:59:9d:
                    57:b7:00:42:2b:83:88:cc:45:26:6f:9d:94:d6:58:
                    32:4d:48:2b:a9:da:ba:3c:0f:f4:ca:55:9a:10:67:
                    78:3d:ef:f3:77:40:ed:dd:35:96:d7:85:21:7b:c5:
                    ad:8b:72:db:1b:66:82:86:8f:13:ea:71:ea:96:6f:
                    0b:05:99:5b:48:5f:3d:76:ee:5d:a2:41:85:ae:0a:
                    7b:b7:0a:cf:cf:ca:43:0a:f3:06:04:8d:b5:fb:15:
                    f5:dc:e4:a2:4e:2b:65:b3:1b:45:19:a1:47:ba:34:
                    3c:63:fa:f1:fa:e6:5e:8b:94:16:13:6f:23:e8:39:
                    75:a3:65:20:1f:16:aa:ad:7b:25:49:ac:3b:02:51:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0F:B8:60:47:CD:AA:79:B3:A0:9C:C9:F0:25:8A:26:9C:90:F4:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca7cb612-0e19-3e96-b943-218bda1fb060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a130::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:3d:86:9d:aa:5d:66:ab:67:48:75:d7:b0:09:4a:38:6b:96:
         c3:dd:fb:a1:b4:64:29:fc:d3:e0:2b:ed:24:07:9a:b8:95:b2:
         a2:42:87:3e:71:05:51:6a:c4:06:42:b0:86:a6:37:20:4d:b6:
         4b:97:11:1b:39:b6:9d:5f:d5:5c:48:c1:9d:fd:0b:0f:7b:8a:
         0c:13:9f:3d:56:6f:dc:56:04:d5:bf:92:ef:8e:75:95:2a:b8:
         c8:c4:4a:f4:30:92:ba:f2:e9:1a:d7:04:3b:86:65:f8:86:4e:
         ac:dc:2f:49:ae:67:ad:00:56:d2:ac:16:ed:a1:6f:00:99:9e:
         78:8b:70:8c:a6:e7:43:4b:7d:72:a7:3b:eb:73:b7:63:29:9e:
         b3:0b:fe:e9:e7:f6:8a:f4:81:5a:aa:d7:25:3d:0a:92:44:d0:
         69:96:47:ba:bb:5d:c3:59:42:56:31:b7:8e:98:de:61:d9:03:
         ed:f1:2e:c8:91:7a:66:c9:c3:ac:0c:59:89:6e:30:5b:28:65:
         6b:2b:ec:10:00:d7:6a:f1:67:5b:b9:99:b4:b0:88:94:3f:0d:
         7b:6d:6e:10:b5:aa:e2:7a:a3:ea:6e:5f:e4:59:e2:5f:4e:2a:
         8c:03:09:3f:8c:90:88:f6:03:f4:96:ec:8f:90:d1:c0:03:f1:
         c6:73:95:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0irFOZs97j+QLAp8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxMTE4MDYxN1oXDTI2MDYwOTE4MDYxN1owLzEtMCsGA1UEAxMk
MmJhMWRlOWEtNzVlNi00YWJmLWFiZjAtNjM3NmFiM2JhZDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAA7awyQVNa6xqO1qm0G5PWmgy8YzayarwME
SCiN52btQpAfx9X7YPy4HxcpuPZ/ZVKr4xmbwXvCHwt5jjeR3GHmOLOzw9yBl9p9
isBFb5No3mVUP8we+udVXYNa7q1Q6KWr6Vs8FNJLnJhUS7iJ7PKRAHSaWZ1XtwBC
K4OIzEUmb52U1lgyTUgrqdq6PA/0ylWaEGd4Pe/zd0Dt3TWW14Uhe8Wti3LbG2aC
ho8T6nHqlm8LBZlbSF89du5dokGFrgp7twrPz8pDCvMGBI21+xX13OSiTitlsxtF
GaFHujQ8Y/rx+uZei5QWE28j6Dl1o2UgHxaqrXslSaw7AlGWMwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKsPuGBHzap5s6CcyfAliiackPTAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2E3Y2I2MTItMGUxOS0z
ZTk2LWI5NDMtMjE4YmRhMWZiMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCaEw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKI9hp2qXWarZ0h117AJSjhrlsPd+6G0ZCn80+Ar7SQHmriVsqJC
hz5xBVFqxAZCsIamNyBNtkuXERs5tp1f1VxIwZ39Cw97igwTnz1Wb9xWBNW/ku+O
dZUquMjESvQwkrry6RrXBDuGZfiGTqzcL0muZ60AVtKsFu2hbwCZnniLcIym50NL
fXKnO+tzt2MpnrML/unn9or0gVqq1yU9CpJE0GmWR7q7XcNZQlYxt46Y3mHZA+3x
LsiRembJw6wMWYluMFsoZWsr7BAA12rxZ1u5mbSwiJQ/DXttbhC1quJ6o+puX+RZ
4l9OKowDCT+MkIj2A/SW7I+Q0cAD8cZzlbI=
-----END CERTIFICATE-----
Generated at Tue Mar 24 14:42:44 2026 by rpki-client