Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba976431-89fa-3a11-9263-5ea18c79a193.roa
File:                     ba976431-89fa-3a11-9263-5ea18c79a193.roa (raw, json)
Hash identifier:          iptIShoC5e06VDZM1UwIalcCh2t5h7E+UjxkMq4eMtU=
Subject key identifier:   30:D8:A7:B5:D2:7E:D3:FF:7A:C0:98:98:8D:D6:78:5B:7E:E9:27:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD59E5F2D1343EB321E460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba976431-89fa-3a11-9263-5ea18c79a193.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1008:b130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:59:e5:f2:d1:34:3e:b3:21:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=984c4294-a9ba-4c06-bf8e-ecdc51e6648c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:25:0e:22:00:f3:b5:20:ea:04:37:09:5c:13:
                    c3:97:7d:7b:e1:1d:b9:c0:b4:da:b4:74:6a:d8:9f:
                    b9:d1:ff:52:6d:9e:81:f6:fe:15:0f:fc:33:bd:b0:
                    b4:d3:8a:06:27:ae:4f:b0:16:ad:c2:2f:9d:05:67:
                    cd:eb:ee:27:90:ef:fd:71:d4:84:8a:3f:eb:aa:3d:
                    aa:8b:45:fd:ce:f5:f4:c7:48:7e:b1:0a:2d:ba:77:
                    17:62:82:b5:92:ca:c5:0c:d8:10:f1:73:07:e5:0d:
                    be:c2:cc:e0:cf:7f:65:c0:ef:31:b1:52:29:3e:45:
                    65:c4:15:34:fc:ec:0a:29:81:4f:ac:3a:28:81:ce:
                    69:6b:f5:12:66:7d:65:fc:df:86:e0:83:b2:e7:38:
                    53:a8:e4:cb:3d:4a:06:aa:a2:10:47:3c:67:40:ad:
                    97:55:e2:e3:64:07:ff:df:5c:65:27:ec:42:c9:2b:
                    fd:cd:f3:c8:4d:71:23:95:41:57:4f:a9:a8:b7:60:
                    c7:0c:02:de:2d:af:2d:88:0f:bc:c7:88:3c:e9:a3:
                    af:60:8c:f0:6d:db:53:0c:a6:08:47:8a:ef:a3:89:
                    49:b0:e6:e8:48:56:82:54:82:ea:83:a0:c4:7a:f5:
                    76:85:83:e3:af:30:8f:6f:d8:5d:58:ad:61:54:ce:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:A7:B5:D2:7E:D3:FF:7A:C0:98:98:8D:D6:78:5B:7E:E9:27:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba976431-89fa-3a11-9263-5ea18c79a193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:2f:38:bf:ca:f8:f4:88:5f:63:44:29:72:34:88:17:ee:
         cc:60:32:f5:a7:32:71:0d:e0:cb:84:76:e0:5f:b9:dd:43:67:
         88:fe:9a:75:2a:86:0b:87:6a:82:02:fc:f0:c4:ac:ee:cf:cb:
         1c:d5:08:82:96:8d:1e:7b:67:5b:2f:8a:43:0a:22:72:9f:f5:
         a6:16:4d:21:0d:84:a7:94:60:7b:94:b0:0e:67:9b:d8:7f:1c:
         a8:17:bd:ef:ac:42:ce:28:8d:f7:95:a1:78:b5:9b:01:80:ee:
         1d:9c:7f:8a:5c:0c:bf:f3:17:ff:8a:98:74:ca:24:5d:6e:48:
         1a:c5:97:94:9d:7b:26:d9:d8:bf:3e:16:ff:e4:16:ea:4d:b5:
         0d:9d:89:97:31:e4:32:dd:48:6a:f0:a7:26:73:2c:6a:47:ed:
         89:2a:74:ae:6f:04:5f:42:2d:41:d2:6d:1e:5b:6e:84:6a:20:
         69:32:50:07:d7:d4:29:b1:5b:5e:df:69:d2:56:b4:c5:98:26:
         a6:a7:36:15:87:70:e6:1d:eb:eb:bc:a6:d5:6e:19:7c:4e:54:
         f8:89:4c:c3:a8:ac:1c:e5:50:8b:60:ed:e1:36:a4:94:33:47:
         bd:1d:f9:10:94:3b:e0:cd:0c:ad:5c:0e:ab:40:d9:be:f4:36:
         76:84:d1:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8/rVnl8tE0PrMh5GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk
OTg0YzQyOTQtYTliYS00YzA2LWJmOGUtZWNkYzUxZTY2NDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyUOIgDztSDqBDcJXBPDl3174R25wLTatHRq
2J+50f9SbZ6B9v4VD/wzvbC004oGJ65PsBatwi+dBWfN6+4nkO/9cdSEij/rqj2q
i0X9zvX0x0h+sQotuncXYoK1ksrFDNgQ8XMH5Q2+wszgz39lwO8xsVIpPkVlxBU0
/OwKKYFPrDoogc5pa/USZn1l/N+G4IOy5zhTqOTLPUoGqqIQRzxnQK2XVeLjZAf/
31xlJ+xCySv9zfPITXEjlUFXT6mot2DHDALeLa8tiA+8x4g86aOvYIzwbdtTDKYI
R4rvo4lJsOboSFaCVILqg6DEevV2hYPjrzCPb9hdWK1hVM4Y0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDDYp7XSftP/esCYmI3WeFt+6SeSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmE5NzY0MzEtODlmYS0z
YTExLTkyNjMtNWVhMThjNzlhMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCLEw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABCLLzi/yvj0iF9jRClyNIgX7sxgMvWnMnEN4MuEduBfud1DZ4j+
mnUqhguHaoIC/PDErO7PyxzVCIKWjR57Z1svikMKInKf9aYWTSENhKeUYHuUsA5n
m9h/HKgXve+sQs4ojfeVoXi1mwGA7h2cf4pcDL/zF/+KmHTKJF1uSBrFl5SdeybZ
2L8+Fv/kFupNtQ2diZcx5DLdSGrwpyZzLGpH7YkqdK5vBF9CLUHSbR5bboRqIGky
UAfX1CmxW17fadJWtMWYJqanNhWHcOYd6+u8ptVuGXxOVPiJTMOorBzlUItg7eE2
pJQzR70d+RCUO+DNDK1cDqtA2b70NnaE0bU=
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:22:23 2026 by rpki-client