Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7301f495-bdc7-3b88-b118-2d715795b494.roa
File:                     7301f495-bdc7-3b88-b118-2d715795b494.roa (raw, json)
Hash identifier:          1t6xVy307gQVsixezzwwG/4hT6VILSWdIhIIY6l230c=
Subject key identifier:   C4:2A:BB:A2:0A:2E:E8:44:C2:7C:63:10:DD:7C:A3:8F:C2:A0:0E:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49865112F0ED65490BEA2DE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7301f495-bdc7-3b88-b118-2d715795b494.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1009:b090::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:51:12:f0:ed:65:49:0b:ea:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ab840689-50ea-474b-ae0b-128700f55ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:54:09:10:61:49:05:30:5f:5b:5a:08:48:
                    e2:91:28:fe:c5:22:ad:20:0b:cc:a0:fe:29:14:3d:
                    83:b1:cc:d8:2d:ac:ff:15:21:5a:1f:fb:ef:fd:fd:
                    e0:0f:52:d2:6a:4c:a9:bb:1a:20:28:34:5f:b8:c3:
                    53:5d:64:e2:19:07:4b:1e:9f:82:1e:e5:e5:48:88:
                    69:1e:02:56:16:21:63:b8:3e:bb:7e:fa:9c:c6:6c:
                    e5:44:29:13:78:ce:13:57:af:36:0c:72:99:86:ed:
                    b5:db:b5:a4:18:42:5c:2d:a4:aa:0a:85:0f:ef:ed:
                    54:a4:6f:b0:85:bb:17:e2:63:cb:b5:d0:0b:52:a0:
                    03:4b:c3:00:be:53:ac:0d:7a:84:9e:64:69:4a:44:
                    3d:b5:7d:6d:f5:d9:7e:31:57:70:03:6b:4c:f0:73:
                    97:7c:dd:e8:d5:52:41:e8:b9:b9:ea:d7:c8:cd:fa:
                    69:2b:9b:f1:91:3a:08:ce:ed:ef:7e:54:d4:3c:98:
                    52:b2:c7:82:5e:f5:0a:7d:b9:95:9e:ee:7f:aa:49:
                    d4:d2:12:bf:33:4e:f2:d5:7f:3d:a9:95:12:83:31:
                    ae:bf:ec:be:32:9b:20:21:6c:6a:71:9c:98:90:34:
                    cf:45:45:25:b5:25:42:1a:02:b1:bc:24:36:96:fd:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2A:BB:A2:0A:2E:E8:44:C2:7C:63:10:DD:7C:A3:8F:C2:A0:0E:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7301f495-bdc7-3b88-b118-2d715795b494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b090::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:e2:4d:6e:69:53:a6:7f:ed:bd:64:ff:c7:66:20:63:6f:
         62:66:8d:ee:40:a0:30:96:fb:8c:0d:a4:41:69:77:2f:46:b6:
         67:4b:7f:e8:27:95:5d:1c:ce:72:47:ad:bc:59:94:9f:9e:92:
         9f:29:7c:22:b1:31:e1:4e:14:bf:4b:a2:06:61:46:28:76:bb:
         35:4f:a7:32:1c:cc:65:8d:34:e9:d5:e4:ba:6d:a8:56:f5:83:
         24:62:e6:25:e9:46:07:13:4c:8a:16:c2:cd:10:04:df:8d:3e:
         3b:9d:d0:ca:09:85:2f:c6:f6:dc:eb:07:0a:8a:79:58:7e:3e:
         4d:a0:88:04:2d:54:e0:f1:3e:ff:c0:97:0b:66:cc:00:0a:6b:
         d3:e3:fe:cf:86:99:fc:b2:68:e8:14:3a:c8:3c:40:08:60:ab:
         61:44:e8:62:90:ad:ef:5f:36:cb:c6:ac:c8:da:9d:5e:50:d9:
         d6:53:d5:3f:c8:b6:8c:ee:f8:26:a0:ea:cc:95:b5:ca:6b:5f:
         27:e9:86:06:67:1f:35:c4:4a:b0:6f:02:02:cc:eb:1a:60:40:
         86:56:e2:be:e1:f5:aa:7d:4a:19:8b:b8:e2:6f:4c:34:3c:bb:
         9c:d0:8d:9a:ed:2e:fb:59:a1:db:58:c3:88:0e:94:d0:fb:7d:
         98:67:22:02
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhlES8O1lSQvqLeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWI4NDA2ODktNTBlYS00NzRiLWFlMGItMTI4NzAwZjU1ZWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00xUCRBhSQUwX1taCEjikSj+xSKtIAvMoP4p
FD2DsczYLaz/FSFaH/vv/f3gD1LSakypuxogKDRfuMNTXWTiGQdLHp+CHuXlSIhp
HgJWFiFjuD67fvqcxmzlRCkTeM4TV682DHKZhu2127WkGEJcLaSqCoUP7+1UpG+w
hbsX4mPLtdALUqADS8MAvlOsDXqEnmRpSkQ9tX1t9dl+MVdwA2tM8HOXfN3o1VJB
6Lm56tfIzfppK5vxkToIzu3vflTUPJhSsseCXvUKfbmVnu5/qknU0hK/M07y1X89
qZUSgzGuv+y+MpsgIWxqcZyYkDTPRUUltSVCGgKxvCQ2lv1t0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMQqu6IKLuhEwnxjEN18o4/CoA79MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzMwMWY0OTUtYmRjNy0z
Yjg4LWIxMTgtMmQ3MTU3OTViNDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQCbCQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABXh4k1uaVOmf+29ZP/HZiBjb2Jmje5AoDCW+4wNpEFpdy9GtmdL
f+gnlV0cznJHrbxZlJ+ekp8pfCKxMeFOFL9LogZhRih2uzVPpzIczGWNNOnV5Lpt
qFb1gyRi5iXpRgcTTIoWws0QBN+NPjud0MoJhS/G9tzrBwqKeVh+Pk2giAQtVODx
Pv/AlwtmzAAKa9Pj/s+GmfyyaOgUOsg8QAhgq2FE6GKQre9fNsvGrMjanV5Q2dZT
1T/Itozu+Cag6syVtcprXyfphgZnHzXESrBvAgLM6xpgQIZW4r7h9ap9ShmLuOJv
TDQ8u5zQjZrtLvtZodtYw4gOlND7fZhnIgI=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:03:53 2026 by rpki-client