Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c84b552c-9090-3945-9370-04f88ee779b2.roa
File:                     c84b552c-9090-3945-9370-04f88ee779b2.roa (raw, json)
Hash identifier:          xIHkHdF/p3hwzJh/v/jyxFC/pVQHsHxfNXXsZVgr3Kc=
Subject key identifier:   D1:E8:EF:CF:0E:71:CB:99:F8:D2:F5:C3:3A:49:92:78:43:0C:CB:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87CCE8FE06B999DDA50300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c84b552c-9090-3945-9370-04f88ee779b2.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1011:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:cc:e8:fe:06:b9:99:dd:a5:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=dcfbf1e6-97ca-4788-82b0-5a473ee1e5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:8a:92:df:61:de:62:ad:b9:c3:e6:01:8a:
                    d1:32:25:1c:5f:a3:69:a4:a6:95:4b:54:62:7b:c7:
                    89:ac:bf:f1:6b:d5:d2:75:17:85:45:ed:22:c0:6f:
                    2c:99:8a:9f:eb:50:f0:57:c5:15:37:74:05:90:87:
                    73:17:62:bd:0e:54:24:37:0f:77:86:91:a6:fe:b3:
                    78:25:a4:5a:0a:a2:5b:a3:3a:0a:0d:34:82:4c:3d:
                    36:2c:36:14:ca:2e:5f:2e:8a:44:ef:21:5d:b5:72:
                    7b:2c:ff:53:8c:76:25:1a:2c:50:2c:f3:d6:dd:32:
                    bf:6f:ef:62:85:dd:ca:fd:bf:67:e4:c6:68:f8:9b:
                    c8:6e:42:9e:19:69:62:61:fa:7a:5f:fb:0f:86:e9:
                    4c:68:5f:d1:14:12:8d:98:94:4a:fe:59:e9:53:a1:
                    69:d2:a3:11:d2:f2:1b:48:76:f0:4d:25:84:cc:27:
                    b3:2d:c8:4b:8d:d2:c3:d9:be:01:12:c9:9c:2c:d7:
                    4c:3b:e5:76:09:ce:11:ee:97:a7:61:d3:23:07:54:
                    f6:27:db:9c:ca:6d:61:9c:f0:c1:ef:ec:0f:5e:8f:
                    e8:ca:e0:d3:76:b5:1d:de:1b:65:ac:e3:13:7e:ab:
                    92:dd:44:84:3c:3d:6a:75:4d:1f:81:01:13:f4:da:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E8:EF:CF:0E:71:CB:99:F8:D2:F5:C3:3A:49:92:78:43:0C:CB:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c84b552c-9090-3945-9370-04f88ee779b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:5b:77:f8:32:ab:bd:c3:16:41:19:ed:6f:bc:81:0f:96:84:
         d1:9b:33:a4:98:10:30:23:3d:77:80:ae:3d:86:9c:7d:50:15:
         03:0a:7f:9c:7e:02:29:69:76:23:52:31:b2:9c:8e:01:48:96:
         c8:d9:d1:95:08:08:26:77:a9:46:59:43:8b:17:bb:77:36:34:
         3c:a0:ee:d5:29:58:74:01:59:82:d0:4b:40:65:0e:7c:14:a4:
         33:bf:24:78:6f:a2:86:34:28:0c:2f:18:7c:de:2d:5e:d7:0a:
         8f:7b:e5:58:5a:b7:c6:ff:2e:4e:5e:d7:f0:2c:8d:57:66:c9:
         34:ad:98:af:f8:50:fc:31:14:52:44:42:f1:8c:64:9d:6d:71:
         82:f0:b7:16:e3:8d:f9:31:81:e6:62:7a:e9:57:19:3e:f8:54:
         b1:e6:86:15:3b:c3:d8:cd:f6:00:c1:a0:01:6c:a6:f5:0c:b0:
         59:ad:22:51:44:09:d1:f6:a5:58:65:be:dd:ac:70:ba:7d:ee:
         71:ae:f0:9a:72:71:51:41:fe:ac:d8:12:0b:a0:20:99:de:a5:
         51:b0:35:0b:3c:4d:04:7e:0e:b2:83:a8:44:0b:2c:97:da:d6:
         9c:9f:ea:1a:ed:b5:f3:c9:fa:9a:8f:97:b4:17:66:0d:3a:c2:
         f0:7b:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:48:28 2026 by rpki-client