Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1708434f-8818-3036-b065-48044e434a40.roa
File:                     1708434f-8818-3036-b065-48044e434a40.roa (raw, json)
Hash identifier:          Ely0I5FXhYJa4E6VS3rPYklGlkxOPsVdGbNIzpZEGss=
Subject key identifier:   C1:DE:C0:8A:6F:B7:D6:42:4B:A4:9E:66:B6:A8:51:EF:14:8E:10:6E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79107DFF76B278D809673F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1708434f-8818-3036-b065-48044e434a40.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:9f00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:07:df:f7:6b:27:8d:80:96:73:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=33b3e0b5-9edf-4e50-8f81-ab40d2315b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:c7:e2:f8:32:95:8d:aa:6e:76:cf:f0:c5:
                    85:c1:59:13:4c:e1:7e:64:0d:f7:05:3e:17:d4:03:
                    79:ac:15:14:d0:25:06:1d:34:de:2b:32:ad:f7:01:
                    ec:96:c0:69:19:9a:7b:19:8b:9e:c9:e9:21:87:5d:
                    72:45:d6:43:e6:65:3f:ed:b6:47:91:67:0e:e6:e7:
                    79:61:83:ce:b0:bc:fc:ad:3a:b7:9f:09:16:7b:61:
                    25:47:30:85:d3:49:ba:0c:b0:c2:0d:e0:21:22:94:
                    06:25:5a:7c:f6:09:0f:6d:d4:46:5f:d9:c5:5d:1d:
                    e5:89:d7:ab:a8:77:5c:ff:de:a3:7d:51:c6:9f:ab:
                    47:97:6c:03:0b:f2:d2:6b:14:a5:81:50:bf:11:d1:
                    92:07:3c:ff:1a:16:51:0e:86:a2:e8:b5:c8:a7:6b:
                    c1:27:86:2d:e4:e7:8e:fe:28:f8:c2:f1:20:7c:31:
                    6d:f5:63:0b:88:0f:93:6a:d6:0f:6f:12:f1:89:ec:
                    79:bf:63:93:02:34:ad:9f:1f:63:d6:9a:4b:95:8b:
                    d2:5d:71:cc:a4:91:b3:82:db:90:99:30:25:03:cf:
                    b6:7c:f7:3c:07:e3:f5:73:ca:7f:d4:19:f9:5c:8e:
                    b7:b4:88:b2:ba:2b:27:10:90:f7:28:48:e8:b8:e4:
                    53:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DE:C0:8A:6F:B7:D6:42:4B:A4:9E:66:B6:A8:51:EF:14:8E:10:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1708434f-8818-3036-b065-48044e434a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9f00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cd:ad:8e:2c:32:2c:1f:c0:b4:6c:bc:13:e6:76:4e:20:72:
         97:a6:c8:16:e4:99:33:da:f8:6c:88:5c:aa:f9:45:ad:ec:ad:
         37:6d:0a:86:4f:ee:04:46:3d:fc:43:83:96:c4:d1:ac:cf:4b:
         75:d3:ac:b3:b7:b0:e5:42:4e:47:8a:64:31:eb:3b:de:f7:21:
         62:ae:c1:4a:b9:13:b4:3b:a9:ed:b4:26:67:fe:d1:a2:cf:d9:
         21:d6:7c:4b:4f:f9:c7:34:f2:b4:dd:c2:77:cb:8f:6b:04:de:
         9c:8c:bb:b8:63:3c:ff:90:67:eb:03:78:bd:12:70:2c:13:b0:
         ed:69:1c:99:1c:1f:cc:27:cd:b0:49:0e:cc:aa:41:24:45:71:
         8e:00:5f:db:c5:39:d7:1e:0e:cf:c3:42:8a:d5:e9:0b:28:ce:
         f8:ae:e9:d9:68:2c:9f:72:69:1b:db:c8:61:34:b2:9e:3c:0c:
         dd:4a:3b:0c:40:dc:d0:ef:58:ab:6b:9a:80:57:23:c1:1a:63:
         43:09:26:ea:65:91:66:b6:81:5c:07:69:25:01:57:c5:b3:e5:
         26:f2:a7:92:4f:5b:40:fd:6a:e0:ed:2b:23:8d:7b:53:b1:bb:
         3f:2c:0b:52:67:d2:f5:a5:d9:87:fa:0d:66:a8:b2:d0:83:40:
         65:ba:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:52:29 2026 by rpki-client