Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a584aae-95ce-353a-8520-7f5bbe5fd413.roa
File:                     1a584aae-95ce-353a-8520-7f5bbe5fd413.roa (raw, json)
Hash identifier:          95O7sIQp5X7MDgYqQPtDsVZgX+sQNza4AqwZQPrRDvc=
Subject key identifier:   19:25:FE:01:A6:0A:8B:DA:32:59:EF:A6:F8:EF:DE:DE:0F:DE:A4:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E428F2095665BDAB52E45CA70
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a584aae-95ce-353a-8520-7f5bbe5fd413.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        2600:1008:b330::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:20:95:66:5b:da:b5:2e:45:ca:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=45f8ab7b-7b71-4968-8f9e-d2a37fbdc8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:d2:6b:f4:3a:51:67:99:a6:be:70:20:a0:
                    5d:c7:a9:cb:60:4c:7e:89:15:05:8a:34:e9:92:5a:
                    2b:a3:97:40:5e:62:9c:c6:cb:05:27:d7:97:41:e8:
                    2b:cf:8a:f4:60:94:31:c5:4f:35:be:d1:b8:e0:10:
                    b6:d3:31:74:81:45:da:54:79:34:6b:f4:70:91:c3:
                    df:e4:df:1d:8c:14:54:0e:f9:4c:a0:34:58:0b:2f:
                    e8:4d:bc:5b:1e:70:33:4a:d6:a6:48:d6:25:e0:e0:
                    f4:72:60:7e:0f:47:6c:5c:b1:16:23:4c:d4:0f:61:
                    57:eb:d3:2d:6d:94:3d:86:b3:76:d7:48:e4:d2:bb:
                    4c:5e:d4:ac:0b:c2:a8:09:e6:f8:a3:5e:8b:3d:1b:
                    ea:2b:de:4b:ec:ef:9f:f6:e5:d9:72:5d:e8:fe:1c:
                    fa:de:81:9c:bb:b3:a4:17:9d:2d:69:29:53:0a:bf:
                    8e:e2:42:8a:53:2d:95:f4:25:38:64:0c:95:14:c5:
                    3f:e6:bb:af:98:27:f6:f7:94:b1:17:44:30:3d:50:
                    43:67:e9:49:ff:9d:88:03:59:a0:3f:fd:a0:95:fd:
                    34:b8:9a:fb:8e:12:64:00:c0:4a:4c:07:e2:32:84:
                    2a:04:64:a1:b1:8d:bb:81:f9:96:39:e7:f3:1c:42:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:FE:01:A6:0A:8B:DA:32:59:EF:A6:F8:EF:DE:DE:0F:DE:A4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1a584aae-95ce-353a-8520-7f5bbe5fd413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b330::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:40:88:06:da:bb:87:4b:55:aa:59:35:4b:67:a6:98:79:41:
         f6:53:be:b2:1e:20:d3:ed:99:7c:8d:d1:7f:6b:df:2d:a2:9a:
         6f:98:94:aa:b8:98:17:38:55:5f:20:ec:46:2b:34:38:3f:6d:
         3a:63:b9:a0:36:84:c3:eb:3b:42:02:3a:3d:41:fd:7d:ea:fb:
         ef:7f:f0:e3:b8:dc:2a:cf:03:ad:d7:7e:2e:57:91:57:e2:46:
         6b:68:2d:99:66:8a:16:65:5e:0c:1f:4e:3e:4a:90:cb:89:7c:
         3b:6d:40:92:25:da:ce:cf:8d:5f:dc:4d:b6:1a:2f:cd:12:0c:
         bd:0f:16:e8:7c:a8:85:eb:02:94:0d:71:af:8b:20:b6:c4:bf:
         db:28:b8:bb:e7:00:40:47:46:f7:e2:ae:e4:8c:c7:dd:6f:9b:
         a8:19:52:07:03:4b:36:fe:3a:bb:7c:0d:db:b6:d0:fd:dc:c7:
         54:79:c5:59:f5:e2:18:b3:c7:45:36:9a:cf:28:0a:8c:82:6d:
         73:e1:ed:23:45:2c:3b:59:ee:32:8d:37:1b:e6:d7:64:de:9a:
         1f:79:03:bc:27:d1:55:06:c6:b1:c8:44:1c:8d:5f:b1:06:d1:
         82:0f:0b:ae:44:7c:24:09:c6:b4:77:10:0c:4a:77:e3:d9:da:
         ac:c0:fd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:36:54 2026 by rpki-client