Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/406b9055-0a78-340d-9ed4-ca51e13b0d98.roa
File:                     406b9055-0a78-340d-9ed4-ca51e13b0d98.roa (raw, json)
Hash identifier:          m3lPADbo1m/UUCb7jCyfu3SL1sD5Pat++PZ0/iQfzN8=
Subject key identifier:   F2:F8:36:3A:8E:C9:2B:BE:E4:95:F0:BB:7A:84:46:1E:04:50:0F:43
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EBC770A419420EAB4CC4EDB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/406b9055-0a78-340d-9ed4-ca51e13b0d98.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:b318::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:0a:41:94:20:ea:b4:cc:4e:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=6a885dde-404f-4243-b392-f18231b59adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:e3:4d:7e:72:e7:38:46:09:94:23:30:36:
                    ce:44:58:d7:71:c7:e7:34:f9:47:f6:64:51:ec:ac:
                    20:3d:a4:dd:51:36:6f:3f:22:bb:bc:95:8f:e6:57:
                    00:a0:bb:98:e2:2c:77:17:a7:51:f4:d4:08:78:a9:
                    07:9f:47:56:70:4d:ea:d4:e4:38:f8:16:10:ae:66:
                    46:ef:92:a4:82:3a:9d:38:81:75:83:45:f5:4b:22:
                    04:41:e3:3e:d9:2f:61:93:fc:c6:87:a1:73:9a:5d:
                    60:b9:c3:90:f3:ed:d8:c7:31:85:82:df:4e:e6:2c:
                    b0:dd:79:44:5d:39:c0:67:49:59:c6:60:f4:21:f6:
                    cc:9f:34:fe:ad:2f:56:42:b5:4f:35:a3:fe:33:8a:
                    d0:08:f0:05:2c:72:42:6a:86:37:e2:89:53:d4:82:
                    e7:a4:0c:c9:95:83:39:6e:48:50:99:a0:17:b0:e2:
                    39:ae:99:95:a9:6d:6a:5c:4b:79:ac:4e:93:4c:04:
                    46:00:c6:90:31:29:8d:bd:d3:37:18:3a:08:0f:fe:
                    f8:19:34:11:58:26:b4:df:e2:62:38:4f:90:42:66:
                    de:61:86:a2:db:fe:ce:c5:37:88:d5:50:67:58:e5:
                    d5:bf:e4:6d:96:8c:8c:d4:c4:4d:ac:a3:2e:64:e8:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F8:36:3A:8E:C9:2B:BE:E4:95:F0:BB:7A:84:46:1E:04:50:0F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/406b9055-0a78-340d-9ed4-ca51e13b0d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b318::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:52:99:ca:50:56:ca:0b:88:1e:60:fb:07:0d:3b:0f:9f:
         a8:5e:4f:29:58:c5:25:8f:59:8a:c9:ce:22:71:a4:57:0b:58:
         8c:8c:9a:ec:48:5b:1e:30:a9:b2:c7:41:12:36:94:60:6b:df:
         ff:14:99:1e:75:6e:3e:77:20:0e:18:d4:46:01:1d:24:d8:5f:
         8b:66:c9:3e:f8:5e:44:d5:61:e8:00:2d:44:ae:22:60:8b:8e:
         8a:42:e3:e5:f7:7c:39:46:bc:45:61:e5:80:49:ea:e9:d8:e8:
         bd:5a:21:de:a5:97:d7:39:29:4c:32:ef:b1:b2:98:59:9f:5a:
         81:81:79:65:0e:49:d8:61:e2:63:cd:87:e8:67:40:21:62:b8:
         5a:d5:5c:2f:05:d1:91:b3:b1:c1:42:7c:3e:77:e3:de:a4:e9:
         d4:31:91:35:d9:73:7b:1a:f3:5c:d0:b9:25:5b:b0:70:65:75:
         27:69:5e:29:38:46:b3:af:8a:83:4d:44:8e:7a:7d:f5:26:28:
         8e:7b:e7:5f:ae:0c:d7:33:4d:20:a8:24:42:77:82:29:82:4c:
         cf:af:a2:8c:c7:9a:3a:8c:bf:89:52:3d:5f:db:61:9a:ca:86:
         96:8d:e1:00:da:07:d9:6f:fb:45:88:dc:0f:8e:74:fb:e2:1d:
         c5:15:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:52:36 2026 by rpki-client