Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da7608c4-d417-336b-9935-94baa584463a.roa
File:                     da7608c4-d417-336b-9935-94baa584463a.roa (raw, json)
Hash identifier:          6p/xwYRNuyJolSEUztzbjg1YbILEOlCjVNBxa9b3E5g=
Subject key identifier:   4D:C4:61:09:20:2D:C7:C0:68:2C:AD:84:1D:5B:52:08:D4:5F:FA:77
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49885D0BEB72E8CC0DE78700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da7608c4-d417-336b-9935-94baa584463a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1002:a110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:5d:0b:eb:72:e8:cc:0d:e7:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=39380e33-ce4f-4b2a-9f26-1758f32ee3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:86:eb:81:1c:bf:f4:5d:33:13:01:aa:be:84:
                    72:ce:60:02:09:75:79:0d:ff:74:bf:b7:68:70:33:
                    5f:ce:40:4f:0d:84:11:1a:97:12:85:a7:81:ed:aa:
                    b2:2f:28:6c:e6:e8:36:4a:69:c1:71:67:88:d5:32:
                    2b:4f:ae:6f:71:84:5c:22:cf:0a:27:cc:c5:fc:8f:
                    00:e7:f7:b8:1e:31:f1:3b:f5:9f:87:9f:6a:25:d6:
                    89:4f:cc:ac:43:3d:52:af:6c:8d:6b:ff:cd:65:08:
                    ef:97:c2:ea:27:e7:b5:66:54:3b:b8:93:f6:34:cd:
                    7f:00:8f:41:d7:ba:81:92:a1:5e:76:e8:a6:29:46:
                    79:52:b7:9d:8b:3e:9f:07:7c:48:15:ea:13:a3:ad:
                    71:28:3b:3b:a8:dd:38:f0:7f:29:1a:80:19:49:e0:
                    34:34:d9:0e:54:17:29:a1:14:e4:58:0a:65:88:fc:
                    ed:2a:98:65:3b:24:ed:2c:ff:5a:23:2f:3b:09:0a:
                    4f:44:1b:a9:a1:ff:0b:c5:c3:aa:a5:8c:3c:4a:35:
                    ef:c5:e3:ce:8d:6a:41:69:11:d1:eb:6e:4b:02:ce:
                    3b:ed:dd:5e:c8:fd:1c:d7:a1:69:9d:a5:c7:2a:14:
                    45:74:45:05:10:90:4e:72:e2:85:d0:02:50:56:c9:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:61:09:20:2D:C7:C0:68:2C:AD:84:1D:5B:52:08:D4:5F:FA:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da7608c4-d417-336b-9935-94baa584463a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:bc:1d:7e:f5:8e:2a:6b:23:38:1c:ab:57:8e:95:c9:17:
         c0:4e:a6:27:5e:74:52:05:c2:f8:b5:82:4a:a9:cc:0b:9c:56:
         b6:9b:4e:d2:e2:fc:08:73:f9:98:84:de:ee:f7:a0:b9:fe:68:
         66:62:c9:7a:56:8b:a4:15:f1:51:0e:e6:e8:e3:7b:2b:35:cb:
         0a:49:46:ec:4c:2c:5a:6a:6d:15:c4:e3:48:5a:8b:75:94:6c:
         6a:19:da:a8:86:be:3a:2f:9b:54:56:f8:c3:bb:59:fa:1f:94:
         82:36:99:ef:43:7c:47:c4:dc:39:85:90:21:77:c4:fe:68:85:
         5a:71:18:77:13:f0:15:1f:2e:5b:28:b6:89:67:5a:6f:7c:b7:
         64:0a:e5:0a:71:55:c1:a4:e6:61:0f:d3:7d:39:53:fe:8e:66:
         df:a6:31:54:95:99:97:f4:57:79:23:04:5d:06:de:98:01:9a:
         1f:35:d2:3c:ee:4c:87:1b:11:8a:c2:0c:af:7c:02:18:3b:e4:
         7b:bd:08:ff:74:e2:db:d4:4b:d5:24:7e:d0:15:24:71:40:2a:
         d2:7f:27:ac:83:ab:c3:7a:73:3a:c8:32:41:c2:30:16:f3:bf:
         8c:f4:d1:37:11:2d:cf:b2:aa:85:2a:54:6c:51:e8:aa:1c:52:
         08:34:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:37:55 2026 by rpki-client