Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/b6c00fc0-b0d9-37ea-93fc-80b40533f368.roa
File:                     b6c00fc0-b0d9-37ea-93fc-80b40533f368.roa (raw, json)
Hash identifier:          NGWGP3lgf4SQvBr1cqAb75thTrzTt5L6QyFim3UduiA=
Subject key identifier:   A6:D2:87:30:CC:DB:20:88:B0:F1:EA:74:DD:77:8D:FC:3D:A1:D6:40
Certificate issuer:       /CN=9405685a-cbfe-4a3e-8842-f5f720c7959c
Certificate serial:       010D0C9F4328584EFF7783F8964ACF4587DD9300
Authority key identifier: 16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/b6c00fc0-b0d9-37ea-93fc-80b40533f368.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     396305
IP address blocks:        2604:43c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:83:f8:96:4a:cf:45:87:dd:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9405685a-cbfe-4a3e-8842-f5f720c7959c
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=a9c7db26-471c-4f0d-86fa-e62223410cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:89:4f:9a:2f:7f:d0:98:94:2c:46:d7:69:
                    a0:34:a3:34:7d:61:73:98:e4:12:9d:a1:57:87:56:
                    76:b3:bc:27:19:af:db:53:ce:87:5a:db:63:ca:cb:
                    34:64:8d:69:e0:83:d2:25:89:0d:18:70:0b:07:c5:
                    ba:3f:93:79:1c:76:55:b3:18:f5:0c:57:83:fb:39:
                    78:60:79:df:3f:e9:ed:f2:34:21:f4:71:36:b8:94:
                    3a:01:3f:f9:1e:05:10:bb:b4:49:34:fe:58:c3:45:
                    f8:dd:a5:7d:d7:95:a8:d4:97:2d:f9:38:73:62:9f:
                    34:55:6f:e1:d6:48:d2:03:c3:73:34:c4:68:55:1a:
                    8b:27:cc:0e:8f:fe:1b:11:36:2b:02:94:83:70:25:
                    23:1e:ac:b7:df:e2:b3:cf:88:28:65:21:f4:a6:e9:
                    13:72:a5:69:28:24:3e:14:05:8e:5c:46:e6:70:bc:
                    2d:0a:3b:42:29:da:37:1b:76:a7:12:05:cd:3f:ef:
                    e2:03:69:49:a2:33:4f:60:64:55:11:64:c4:39:d8:
                    e6:67:07:e1:55:21:81:98:3a:34:c5:74:bd:f4:4c:
                    8e:55:28:cb:46:04:dc:34:37:54:00:8b:30:e6:0b:
                    8c:ec:1b:fe:78:ad:5e:6b:81:51:bf:59:90:fe:d7:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D2:87:30:CC:DB:20:88:B0:F1:EA:74:DD:77:8D:FC:3D:A1:D6:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/b6c00fc0-b0d9-37ea-93fc-80b40533f368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.crl

            X509v3 Authority Key Identifier:
                keyid:16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:43c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:91:ea:02:ee:2b:8e:a2:a7:6f:10:0d:85:ce:94:f5:28:
         b0:32:21:62:62:01:36:f8:fb:70:e7:64:f8:70:ff:0a:d8:e4:
         0d:82:4d:bd:91:aa:76:e7:20:00:27:5e:ae:56:87:71:c4:1a:
         48:67:2f:53:3c:eb:3d:be:de:c9:71:a0:8d:e1:cf:42:46:d4:
         66:0b:1a:30:98:15:f4:83:00:db:6c:c8:59:91:82:3d:2e:d0:
         45:ce:aa:94:5d:ed:f9:aa:98:6c:31:e3:4c:21:1f:59:1c:04:
         c8:98:e4:3a:93:50:83:b1:6a:18:1d:2e:5f:7c:be:e9:e0:c5:
         c5:49:98:96:f4:ce:d5:39:3f:5b:97:d4:ae:13:be:8e:f1:2f:
         12:20:d4:26:59:39:72:ec:bd:a4:38:b6:bd:e7:61:4e:fc:28:
         eb:96:46:60:73:1d:ad:ec:5b:66:7c:bf:7d:48:33:ed:20:2f:
         81:f8:32:14:ee:e0:c2:94:0b:32:69:c2:ec:65:0e:3e:0e:6c:
         a3:d6:a7:3c:78:3c:90:26:9a:10:d2:68:27:58:e7:11:70:10:
         cc:a7:d8:47:e8:62:d0:cc:38:f1:6c:c9:db:95:5c:fd:52:0c:
         0f:9e:e9:92:87:4a:79:a7:0a:a3:eb:d4:23:5c:0f:79:54:0b:
         19:18:a6:f5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7/d4P4lkrPRYfdkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQwNTY4NWEtY2JmZS00YTNlLTg4NDItZjVmNzIwYzc5
NTljMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk
YTljN2RiMjYtNDcxYy00ZjBkLTg2ZmEtZTYyMjIzNDEwY2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG6JT5ovf9CYlCxG12mgNKM0fWFzmOQSnaFX
h1Z2s7wnGa/bU86HWttjyss0ZI1p4IPSJYkNGHALB8W6P5N5HHZVsxj1DFeD+zl4
YHnfP+nt8jQh9HE2uJQ6AT/5HgUQu7RJNP5Yw0X43aV915Wo1Jct+ThzYp80VW/h
1kjSA8NzNMRoVRqLJ8wOj/4bETYrApSDcCUjHqy33+Kzz4goZSH0pukTcqVpKCQ+
FAWOXEbmcLwtCjtCKdo3G3anEgXNP+/iA2lJojNPYGRVEWTEOdjmZwfhVSGBmDo0
xXS99EyOVSjLRgTcNDdUAIsw5guM7Bv+eK1ea4FRv1mQ/tf0twIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKbShzDM2yCIsPHqdN13jfw9odZAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85NDA1
Njg1YS1jYmZlLTRhM2UtODg0Mi1mNWY3MjBjNzk1OWMvYjZjMDBmYzAtYjBkOS0z
N2VhLTkzZmMtODBiNDA1MzNmMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTQwNTY4NWEtY2JmZS00YTNlLTg4
NDItZjVmNzIwYzc5NTljLzk0MDU2ODVhLWNiZmUtNGEzZS04ODQyLWY1ZjcyMGM3
OTU5Yy5jcmwwHwYDVR0jBBgwFoAUFlASX71fnf6b8M3R2TNheHsQrngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy85NDA1Njg1YS1jYmZlLTRhM2UtODg0Mi1mNWY3
MjBjNzk1OWMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRDwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBMjJHqAu4rjqKnbxANhc6U9SiwMiFiYgE2+Ptw52T4cP8K2OQNgk29
kap25yAAJ16uVodxxBpIZy9TPOs9vt7JcaCN4c9CRtRmCxowmBX0gwDbbMhZkYI9
LtBFzqqUXe35qphsMeNMIR9ZHATImOQ6k1CDsWoYHS5ffL7p4MXFSZiW9M7VOT9b
l9SuE76O8S8SINQmWTly7L2kOLa952FO/CjrlkZgcx2t7FtmfL99SDPtIC+B+DIU
7uDClAsyacLsZQ4+Dmyj1qc8eDyQJpoQ0mgnWOcRcBDMp9hH6GLQzDjxbMnblVz9
UgwPnumSh0p5pwqj69QjXA95VAsZGKb1
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:05:09 2026 by rpki-client