Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc98f26a-4108-32b2-92fc-b041538af622.roa
File:                     fc98f26a-4108-32b2-92fc-b041538af622.roa (raw, json)
Hash identifier:          oFFaQo0X/sFy6fUSKTw86N27zGNoHr8IGceVke5QOH8=
Subject key identifier:   A0:BD:DE:87:8F:83:1F:A1:C3:B8:C3:F5:E9:80:69:F0:08:F8:79:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497367A39F9DBFE818CDB280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc98f26a-4108-32b2-92fc-b041538af622.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1009:a028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:67:a3:9f:9d:bf:e8:18:cd:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aa938226-79e6-4595-8c36-4b0f67991681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:bd:13:f6:70:87:cc:82:1b:48:53:a1:d3:
                    f1:92:e4:13:8c:0b:79:5c:de:22:0f:00:31:6b:05:
                    2d:20:fb:f8:2c:37:e4:ee:89:65:09:ee:52:45:35:
                    d3:96:7b:9b:b2:d0:94:5a:0f:5d:ee:fd:1d:fc:3c:
                    ce:8f:b6:e9:e7:29:ce:af:6b:b2:6f:56:6d:d9:63:
                    a1:eb:d2:0a:2e:51:60:3c:2c:d1:24:1d:2b:53:4f:
                    7c:cc:15:38:be:83:1a:5a:f4:91:a5:7b:9d:de:e2:
                    b9:2e:3d:4d:bf:72:9d:0a:6e:c3:e3:f2:6e:61:be:
                    02:15:9c:00:55:34:5a:2c:28:6d:d2:93:72:ee:53:
                    c2:44:4c:3d:ea:44:32:ad:b4:66:f8:8b:33:dc:0e:
                    9b:31:02:a4:cf:ed:c7:24:59:02:ca:82:f3:d5:17:
                    dd:2a:c1:27:fa:96:c2:9d:04:84:6a:d9:f6:89:b7:
                    7a:c6:80:31:78:93:31:4d:39:21:3c:2f:32:50:15:
                    cf:77:4b:34:13:e6:fa:61:8c:c2:2c:ab:77:23:ef:
                    35:30:1e:11:12:c0:28:04:5e:16:c4:f9:ef:c8:df:
                    6b:bd:ed:d5:75:17:a8:df:64:87:11:4f:98:f0:ae:
                    80:d0:ba:aa:66:61:f6:b5:65:c1:49:70:4f:e7:5e:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BD:DE:87:8F:83:1F:A1:C3:B8:C3:F5:E9:80:69:F0:08:F8:79:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc98f26a-4108-32b2-92fc-b041538af622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d7:d6:71:10:f2:98:ea:8f:55:32:f5:93:d1:1a:37:97:f2:
         9e:65:40:a7:9f:01:46:ea:f1:f8:3c:b2:47:d2:15:00:3b:53:
         bc:5d:86:a4:e3:9f:a8:a8:6f:60:ee:bf:a8:f4:a3:52:a6:91:
         60:28:46:7d:b2:77:cd:33:21:52:ce:ec:86:ba:16:51:7c:1f:
         17:6b:2a:d6:90:3a:92:11:57:be:f5:21:2f:4d:61:90:c7:80:
         53:cc:01:9d:28:e0:c4:4f:d6:7a:9b:89:d9:4b:28:8f:5a:b8:
         87:52:a4:1c:75:14:8e:79:7b:11:4c:d2:28:eb:41:b5:da:12:
         e3:74:e2:ae:8e:a0:21:11:8f:54:1a:54:df:31:8d:32:9d:5d:
         97:14:be:c6:9f:12:4c:ad:fe:88:f4:28:16:5c:5b:0e:4b:bf:
         91:17:41:2d:9a:4d:d7:42:8d:94:6c:84:44:0c:31:ab:27:fe:
         61:72:9b:40:c7:a8:d8:e6:43:40:5d:ae:93:34:11:38:e2:0e:
         34:5e:17:6a:c6:44:67:00:b0:b2:7d:ab:b5:1e:a2:3e:a5:f3:
         1e:eb:8e:ee:4b:d2:07:2b:d0:21:54:9d:c8:87:6a:0d:1c:65:
         58:ae:11:a2:59:3a:9e:96:71:d7:cf:74:c5:43:a5:94:30:52:
         e0:2b:fd:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc2ejn52/6BjNsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWE5MzgyMjYtNzllNi00NTk1LThjMzYtNGIwZjY3OTkxNjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy69E/Zwh8yCG0hTodPxkuQTjAt5XN4iDwAx
awUtIPv4LDfk7ollCe5SRTXTlnubstCUWg9d7v0d/DzOj7bp5ynOr2uyb1Zt2WOh
69IKLlFgPCzRJB0rU098zBU4voMaWvSRpXud3uK5Lj1Nv3KdCm7D4/JuYb4CFZwA
VTRaLCht0pNy7lPCREw96kQyrbRm+Isz3A6bMQKkz+3HJFkCyoLz1RfdKsEn+pbC
nQSEatn2ibd6xoAxeJMxTTkhPC8yUBXPd0s0E+b6YYzCLKt3I+81MB4REsAoBF4W
xPnvyN9rve3VdReo32SHEU+Y8K6A0LqqZmH2tWXBSXBP516/rQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKC93oePgx+hw7jD9emAafAI+HlFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmM5OGYyNmEtNDEwOC0z
MmIyLTkyZmMtYjA0MTUzOGFmNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCaAo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEfX1nEQ8pjqj1Uy9ZPRGjeX8p5lQKefAUbq8fg8skfSFQA7U7xd
hqTjn6iob2Duv6j0o1KmkWAoRn2yd80zIVLO7Ia6FlF8HxdrKtaQOpIRV771IS9N
YZDHgFPMAZ0o4MRP1nqbidlLKI9auIdSpBx1FI55exFM0ijrQbXaEuN04q6OoCER
j1QaVN8xjTKdXZcUvsafEkyt/oj0KBZcWw5Lv5EXQS2aTddCjZRshEQMMasn/mFy
m0DHqNjmQ0BdrpM0ETjiDjReF2rGRGcAsLJ9q7Ueoj6l8x7rju5L0gcr0CFUnciH
ag0cZViuEaJZOp6WcdfPdMVDpZQwUuAr/Vs=
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:16:20 2026 by rpki-client