Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ba964dd-bec4-3e7b-a789-1f55e7b9d396.roa
File:                     2ba964dd-bec4-3e7b-a789-1f55e7b9d396.roa (raw, json)
Hash identifier:          cAGZ0TodApaBAFtZGzi67srCnLM6Hp2oILJloI++TKA=
Subject key identifier:   9C:7B:27:5D:ED:D9:BB:81:A3:82:B4:0D:97:A5:F7:FB:71:5A:1A:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3CE290401DFFD57E89005300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ba964dd-bec4-3e7b-a789-1f55e7b9d396.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:a128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:90:40:1d:ff:d5:7e:89:00:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=edaaeffc-6657-4fe4-a084-ae128a7b0939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:ab:b8:9a:c7:6e:a6:83:cf:94:b0:59:57:
                    ea:7e:a9:a7:0a:bb:bb:41:4f:3e:0a:50:ed:ef:33:
                    a9:74:1e:6b:aa:8f:23:e3:93:95:67:95:c3:65:be:
                    fe:8b:f3:2d:a4:58:53:06:3f:68:b5:40:27:c0:b5:
                    9c:d6:79:03:e5:52:e0:22:f4:20:4f:48:ad:cc:c0:
                    30:b9:42:36:23:f3:a7:d7:1e:99:69:ca:c7:00:f8:
                    95:67:bc:2a:f6:46:5f:6e:f9:42:2e:3c:3f:ff:31:
                    b0:08:b2:dc:6f:d5:1f:de:fb:c8:0a:6e:d3:86:2f:
                    ef:25:bb:7d:fc:39:37:6d:24:54:57:a5:ac:c4:ed:
                    b3:2b:1a:e7:84:cf:63:f0:5b:14:12:92:33:c5:66:
                    8a:4f:f9:b2:d6:d8:db:61:ad:e4:91:02:49:cd:9c:
                    45:9a:3f:04:9b:b1:b7:15:2a:7e:3a:69:42:2d:63:
                    da:2e:ed:5e:61:ea:ca:3a:2c:d5:2a:15:43:a5:2b:
                    a6:9e:ba:02:62:f0:c3:b6:49:aa:b3:e3:2f:de:b8:
                    12:0f:bd:f7:fd:98:46:f7:05:2e:cd:d2:53:79:ab:
                    51:b0:5e:37:24:9f:cc:c5:8d:59:9c:fb:4a:a5:8a:
                    54:f9:0a:e0:8e:21:bb:c7:4f:2e:4c:87:40:0d:3a:
                    23:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7B:27:5D:ED:D9:BB:81:A3:82:B4:0D:97:A5:F7:FB:71:5A:1A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ba964dd-bec4-3e7b-a789-1f55e7b9d396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a128::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f0:2f:a2:27:75:1a:ed:df:f4:12:11:1e:4d:e3:31:d9:43:
         d3:0f:93:19:33:cf:b9:82:99:e2:20:bd:95:8f:b5:51:11:73:
         ba:b2:e7:1a:24:54:41:39:86:91:43:d1:9b:d0:fc:54:d7:cf:
         35:0f:19:ad:12:e8:9c:e0:2d:93:f4:5a:51:2c:76:7b:77:53:
         08:0a:ec:61:2e:c1:45:8f:7c:58:87:9c:bf:28:47:36:9d:e6:
         56:b3:64:4f:07:57:b5:31:15:98:15:89:e7:07:d4:f7:53:66:
         fb:de:3c:ca:a1:52:27:13:0f:a0:54:93:fc:68:1c:38:fc:64:
         02:98:63:13:8f:a9:81:f0:a9:91:a1:b6:1a:d9:87:d8:b7:08:
         9c:ad:f4:59:08:c5:a8:df:ff:b0:3c:a2:82:f7:44:cb:f5:d5:
         ba:c0:f4:43:27:aa:ed:10:81:5a:98:7b:d6:90:33:da:a0:ad:
         c3:db:d1:69:d6:b2:26:76:95:ba:da:b6:36:00:81:38:64:c8:
         47:62:8a:61:af:ee:02:ea:3b:dc:dc:98:6b:57:9f:a2:c6:e9:
         c2:3e:65:84:5a:e7:95:d7:db:d6:44:ae:84:de:79:1e:75:da:
         3d:71:de:42:0e:6b:4b:7e:73:ee:7a:9a:83:a4:85:24:38:35:
         08:5b:3f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:05:54 2026 by rpki-client