Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
File:                     bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa (raw, json)
Hash identifier:          vUgvrK0hPzu1aucJBbwkLjDio6FKgOKp4po+tOYP4uA=
Subject key identifier:   A2:F9:76:3A:2E:99:C7:9D:E3:C2:7B:24:CF:B4:B2:D8:42:8F:11:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F2FCE95810D78AA8804C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100e:bf18::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:2f:ce:95:81:0d:78:aa:88:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=70904880-255f-457b-9470-58ee5d9f1c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:6f:24:09:3b:d5:0a:23:21:06:a8:5d:44:
                    7f:cf:14:a4:79:1c:1a:45:4e:e0:1d:67:7f:4a:bf:
                    3c:e3:80:58:45:d3:11:e1:d8:9b:48:42:f3:2d:b4:
                    d9:dd:fb:81:f5:1d:ee:a1:c9:b5:05:eb:f5:60:04:
                    8c:ea:d4:6d:33:6f:bf:e3:60:3f:f4:48:ef:ce:50:
                    0c:4c:b5:99:3d:95:b2:7f:06:b6:f5:d4:89:3b:ce:
                    29:51:85:0b:cd:f4:11:72:d7:dc:50:a8:17:c6:f1:
                    80:09:bd:26:6a:fe:9c:13:fe:b9:38:c3:44:bc:66:
                    c7:b5:d9:04:2f:d0:b0:08:1a:c5:fb:ed:ec:88:44:
                    98:5f:74:ff:dc:59:3a:00:f2:f0:06:c4:38:ac:33:
                    02:2f:23:d3:6c:b0:58:d8:e8:c2:b3:71:6d:d4:34:
                    89:80:1c:2f:4f:58:30:f9:2c:3c:38:bf:e1:18:75:
                    89:83:09:70:1a:f2:e9:74:dd:0e:2d:71:aa:e0:67:
                    b5:fc:a3:60:bb:06:32:81:72:a6:76:8e:e6:68:60:
                    ba:73:b4:6c:59:99:aa:f1:1d:91:a8:96:a2:fb:23:
                    d0:46:95:95:c5:13:01:dd:57:e8:86:45:c2:f0:1e:
                    07:03:25:77:c5:52:15:4a:be:52:08:c7:07:e6:38:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F9:76:3A:2E:99:C7:9D:E3:C2:7B:24:CF:B4:B2:D8:42:8F:11:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdab653c-bbe0-3353-91b3-708e17ef5d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf18::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e8:c9:e4:55:9d:a5:9b:03:39:df:04:42:04:57:7d:28:72:
         da:dc:4e:1a:1a:d8:d9:81:5a:4d:68:11:82:50:a1:66:3c:b7:
         ff:45:5f:c9:20:ed:e9:18:a3:bd:e0:d4:ca:af:35:e0:2b:d2:
         71:51:1e:9f:e5:5c:7a:7a:63:c0:47:db:1b:8a:24:e6:eb:a1:
         9a:c1:ca:89:fa:32:f1:8e:5f:c1:20:53:7f:53:2e:b3:71:73:
         b5:a8:84:7b:4c:dc:c1:21:90:08:20:58:be:90:0f:fb:3a:56:
         1d:67:91:c0:26:9c:42:04:10:94:74:8c:b4:dd:64:67:c5:87:
         77:68:99:e3:6b:a5:76:1b:02:27:0f:bb:29:c5:a2:34:29:0d:
         d7:1b:ed:8f:98:20:8a:a8:0c:cc:97:6d:9c:dc:8c:34:f8:e9:
         34:d7:fb:54:7e:2c:02:ae:f5:90:75:69:a1:c2:41:0f:93:37:
         fb:84:6c:d5:a0:72:73:b9:83:9b:cb:ec:79:f3:40:d1:b9:bb:
         83:fa:cc:fd:08:a7:11:67:8f:a1:ea:5f:31:78:7a:61:79:d7:
         b5:1e:57:82:2c:3b:e5:90:02:cc:98:be:2c:fb:a9:a2:43:e5:
         b6:40:d7:cc:b7:d7:ca:70:7a:9a:72:84:c2:38:3b:05:42:0b:
         16:98:7a:f0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jfy/OlYENeKqIBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NzA5MDQ4ODAtMjU1Zi00NTdiLTk0NzAtNThlZTVkOWYxYzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNFvJAk71QojIQaoXUR/zxSkeRwaRU7gHWd/
Sr8844BYRdMR4dibSELzLbTZ3fuB9R3uocm1Bev1YASM6tRtM2+/42A/9EjvzlAM
TLWZPZWyfwa29dSJO84pUYULzfQRctfcUKgXxvGACb0mav6cE/65OMNEvGbHtdkE
L9CwCBrF++3siESYX3T/3Fk6APLwBsQ4rDMCLyPTbLBY2OjCs3Ft1DSJgBwvT1gw
+Sw8OL/hGHWJgwlwGvLpdN0OLXGq4Ge1/KNguwYygXKmdo7maGC6c7RsWZmq8R2R
qJai+yPQRpWVxRMB3VfohkXC8B4HAyV3xVIVSr5SCMcH5jgZ9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKL5djoumced48J7JM+0sthCjxGyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmRhYjY1M2MtYmJlMC0z
MzUzLTkxYjMtNzA4ZTE3ZWY1ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDr8Y
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABboyeRVnaWbAznfBEIEV30octrcThoa2NmBWk1oEYJQoWY8t/9F
X8kg7ekYo73g1MqvNeAr0nFRHp/lXHp6Y8BH2xuKJObroZrByon6MvGOX8EgU39T
LrNxc7WohHtM3MEhkAggWL6QD/s6Vh1nkcAmnEIEEJR0jLTdZGfFh3domeNrpXYb
AicPuynFojQpDdcb7Y+YIIqoDMyXbZzcjDT46TTX+1R+LAKu9ZB1aaHCQQ+TN/uE
bNWgcnO5g5vL7HnzQNG5u4P6zP0IpxFnj6HqXzF4emF517UeV4IsO+WQAsyYviz7
qaJD5bZA18y318pweppyhMI4OwVCCxaYevA=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:47:34 2026 by rpki-client