Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ea8c637-9ae9-3488-a658-61c2b150afaf.roa
File:                     3ea8c637-9ae9-3488-a658-61c2b150afaf.roa (raw, json)
Hash identifier:          jP6XRpWX6GIEVs46YLu4MsHyZPaYsAigftnF2P4m92A=
Subject key identifier:   FC:68:D0:87:D7:2D:FF:4F:2F:3F:7B:13:67:4A:95:EE:D5:3C:FD:EF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB77D2DBEE89230AA5EDA20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ea8c637-9ae9-3488-a658-61c2b150afaf.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1012:a125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:7d:2d:be:e8:92:30:aa:5e:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=ad22754c-abdc-425c-921d-1ece446566fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:2f:6d:fb:35:63:04:7a:e0:1f:bb:e0:ca:
                    cc:c4:c5:b8:e2:5f:41:0f:d9:9c:16:87:86:35:a0:
                    0c:40:0b:fa:c0:b4:64:a1:67:67:d5:db:bd:27:e1:
                    aa:97:c0:87:ea:9a:9a:23:58:b5:51:bd:1f:86:75:
                    a5:69:be:a4:ec:d2:6f:59:5b:7c:51:6c:71:87:bf:
                    3c:a0:42:ca:c0:68:9a:61:7d:9c:46:36:5d:a7:0f:
                    d6:b7:b1:03:d5:0f:2c:36:44:24:3e:61:fd:db:82:
                    45:26:20:2d:e3:e9:ee:cd:34:ea:dd:c3:54:89:51:
                    95:dc:f7:28:90:1e:81:f1:cc:d8:6d:5c:34:ae:cd:
                    13:c5:37:ff:b6:91:e8:ad:2d:72:5f:23:5f:b9:88:
                    70:9a:02:8d:f1:89:18:a7:8f:bb:02:ab:dc:0f:e5:
                    8c:68:c7:4d:d7:45:1a:88:07:d0:27:76:ec:f9:07:
                    f8:45:5d:2e:30:15:86:4c:fb:94:95:d6:59:7e:5e:
                    f7:bc:7f:db:7d:d6:63:0b:41:40:e6:13:2b:82:dd:
                    dc:95:fe:df:09:ca:37:d9:9e:ef:8d:89:4d:4b:c4:
                    7a:da:58:1a:e0:0f:ff:72:3c:d8:51:fb:4e:0c:1b:
                    1d:96:75:5d:f6:4b:00:ee:95:e6:54:bd:b9:a0:fa:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:68:D0:87:D7:2D:FF:4F:2F:3F:7B:13:67:4A:95:EE:D5:3C:FD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ea8c637-9ae9-3488-a658-61c2b150afaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e2:53:b4:c4:6c:c4:1a:9b:55:73:4d:6b:9c:cd:74:c8:e9:
         e0:32:cd:fa:44:9d:db:3f:be:8d:e9:69:cb:96:a4:4d:ee:9f:
         df:26:57:5c:2f:ce:66:be:5b:f1:a5:9d:1b:b2:04:6d:d5:0e:
         bf:94:61:22:3f:88:d4:49:f7:26:b7:a8:dc:36:1e:28:60:e0:
         32:6e:07:a0:d3:d9:19:e1:25:57:98:68:70:b5:31:45:a2:09:
         32:80:db:1e:fe:b5:18:a2:88:63:35:0a:5f:ae:ea:42:d5:07:
         07:81:ad:48:ab:bc:7e:4b:34:d6:93:ad:65:62:4d:8e:d1:36:
         0c:4a:4a:c2:d6:ee:0e:ce:e2:b1:08:3c:3a:d0:44:96:3d:b9:
         70:4f:b0:0e:6c:47:3c:e8:f7:3c:5e:f8:91:66:2a:fb:7e:76:
         2e:67:7b:83:42:66:f1:48:58:b9:bf:a4:d0:56:cd:db:fb:2c:
         72:aa:96:fb:1a:ee:c2:4f:c0:98:16:40:f5:2e:60:1e:69:85:
         4b:65:01:7f:0f:bc:13:22:99:ef:c7:29:dc:03:70:f3:64:13:
         1d:11:44:98:01:2e:72:25:9a:fc:3b:0d:46:70:39:16:72:f3:
         2c:55:91:bd:53:f6:e1:7b:d2:07:de:7d:8a:36:2f:0b:b0:d0:
         8b:f6:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:54:41 2026 by rpki-client