Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39740e66-321e-3274-995b-fed0ea9e53e5.roa
File:                     39740e66-321e-3274-995b-fed0ea9e53e5.roa (raw, json)
Hash identifier:          kaVZ+4gXxv+pWQHKfRWWa5QFh9hwtxClmiFSv0MWEa8=
Subject key identifier:   28:1E:02:3F:5F:E3:FD:82:2F:E5:9F:ED:BE:DB:F5:FE:15:4B:14:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EB2B1F1A8472D856BACE7FE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39740e66-321e-3274-995b-fed0ea9e53e5.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     6167
IP address blocks:        2600:1009:a124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:f1:a8:47:2d:85:6b:ac:e7:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=1b04445a-1e4f-45c0-9f22-b75c734fc5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:07:ec:fd:d7:a9:e9:d7:75:93:63:7b:69:
                    9a:be:e2:50:e2:5b:af:3e:45:3a:d7:b0:5f:82:80:
                    53:83:da:85:8c:ab:82:49:6c:2d:4d:ce:10:f3:e8:
                    cd:f7:03:c3:7e:8d:63:f3:11:97:85:87:c9:7b:69:
                    ea:21:5a:d8:5c:7d:0f:43:dd:4a:0b:25:91:17:cf:
                    11:39:3c:49:ec:32:e2:d2:7f:86:e6:33:2f:92:9d:
                    ef:81:70:65:2a:f9:a6:6e:bb:48:76:a0:0f:99:e5:
                    9f:2d:ed:26:74:6b:af:ff:d7:fc:eb:02:92:c3:84:
                    f0:69:86:3a:94:cd:ee:11:79:bc:45:6e:40:2a:5a:
                    96:0c:0a:ca:4a:2e:8e:a3:5d:97:c4:9c:d9:29:04:
                    bd:3f:1f:5f:b7:3e:98:46:94:83:44:29:69:dc:6c:
                    41:4d:41:83:71:ca:6d:e8:1d:e4:e0:d4:10:0c:9c:
                    99:17:67:be:03:22:fb:ba:14:a1:50:8c:81:53:34:
                    73:1f:31:f0:f7:b4:86:a1:89:50:b2:cf:99:ca:e9:
                    f3:eb:8e:3d:23:33:bc:d0:c8:2a:d3:a7:24:87:02:
                    ef:25:cf:d0:14:c7:4c:16:8d:b6:16:98:c3:32:49:
                    51:8a:6a:e9:d3:df:55:bc:6a:cb:8b:ee:54:c3:73:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1E:02:3F:5F:E3:FD:82:2F:E5:9F:ED:BE:DB:F5:FE:15:4B:14:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39740e66-321e-3274-995b-fed0ea9e53e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:be:c5:81:c7:1e:af:4f:2b:f0:fa:9b:ad:cb:19:a5:e0:5a:
         8d:2d:51:09:17:8f:01:e1:5a:68:02:2b:64:fc:29:67:e2:f2:
         6e:f0:64:06:0d:26:e4:e3:4c:77:e1:5c:19:00:ad:3d:98:c8:
         30:f1:23:ea:77:90:0f:5e:ee:78:ee:5d:f2:0f:0b:74:81:47:
         22:0e:00:66:b1:ab:cd:84:ce:f4:7c:bc:43:89:d1:4d:a8:1b:
         44:6d:bb:57:86:1c:e6:02:04:52:20:0f:e0:86:12:59:61:71:
         eb:a1:18:19:d0:a0:43:be:9d:5e:46:77:d2:da:4b:06:2c:2e:
         e7:b7:59:53:90:48:0a:53:52:9f:1b:d0:62:d2:3f:42:ff:09:
         b7:e8:23:7d:65:7c:28:a9:4a:58:7e:bd:2d:82:7d:9b:ee:ed:
         6a:33:83:09:1c:26:b4:60:04:86:73:3f:a8:37:82:df:53:44:
         73:d5:d4:9d:53:38:a0:49:f2:56:94:9e:97:34:31:cf:62:fc:
         be:3c:74:b7:4d:a3:53:4b:b2:5b:1c:94:6b:9e:e8:20:71:d4:
         3d:ab:6f:17:35:1b:45:98:90:01:53:d2:35:df:42:cf:dd:0e:
         f6:f8:2b:0a:2a:e4:9f:7f:a9:54:51:6f:23:64:3e:eb:60:de:
         d9:3f:b3:04
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6ysfGoRy2Fa6zn/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
MWIwNDQ0NWEtMWU0Zi00NWMwLTlmMjItYjc1YzczNGZjNWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6sH7P3XqenXdZNje2mavuJQ4luvPkU617Bf
goBTg9qFjKuCSWwtTc4Q8+jN9wPDfo1j8xGXhYfJe2nqIVrYXH0PQ91KCyWRF88R
OTxJ7DLi0n+G5jMvkp3vgXBlKvmmbrtIdqAPmeWfLe0mdGuv/9f86wKSw4TwaYY6
lM3uEXm8RW5AKlqWDArKSi6Oo12XxJzZKQS9Px9ftz6YRpSDRClp3GxBTUGDccpt
6B3k4NQQDJyZF2e+AyL7uhShUIyBUzRzHzHw97SGoYlQss+Zyunz6449IzO80Mgq
06ckhwLvJc/QFMdMFo22FpjDMklRimrp099VvGrLi+5Uw3P7/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCgeAj9f4/2CL+Wf7b7b9f4VSxRUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzk3NDBlNjYtMzIxZS0z
Mjc0LTk5NWItZmVkMGVhOWU1M2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCaEk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAe+xYHHHq9PK/D6m63LGaXgWo0tUQkXjwHhWmgCK2T8KWfi8m7w
ZAYNJuTjTHfhXBkArT2YyDDxI+p3kA9e7njuXfIPC3SBRyIOAGaxq82EzvR8vEOJ
0U2oG0Rtu1eGHOYCBFIgD+CGEllhceuhGBnQoEO+nV5Gd9LaSwYsLue3WVOQSApT
Up8b0GLSP0L/CbfoI31lfCipSlh+vS2CfZvu7WozgwkcJrRgBIZzP6g3gt9TRHPV
1J1TOKBJ8laUnpc0Mc9i/L48dLdNo1NLslsclGue6CBx1D2rbxc1G0WYkAFT0jXf
Qs/dDvb4Kwoq5J9/qVRRbyNkPutg3tk/swQ=
-----END CERTIFICATE-----
Generated at Thu Aug 27 23:52:58 2026 by rpki-client