Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/408adc0c-3d88-3656-adc9-c98625dc7ae9.roa
File:                     408adc0c-3d88-3656-adc9-c98625dc7ae9.roa (raw, json)
Hash identifier:          8vZO2sqHbggz2zmCQkEzWdcGP6lXTAAUMMbuvvmDUvE=
Subject key identifier:   0C:57:CC:B7:F9:72:01:4A:AD:65:14:66:9C:BB:8B:A6:7C:84:C1:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79106BCE68D4102912B9680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/408adc0c-3d88-3656-adc9-c98625dc7ae9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:f200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:06:bc:e6:8d:41:02:91:2b:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b96d2d0f-b895-4e9d-bc9e-e2bdb3702501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:32:e8:9e:a0:f6:f1:37:8e:8f:40:bb:b8:
                    05:66:1c:5e:52:60:dd:55:8c:a1:fe:80:3c:f0:11:
                    17:92:bc:38:f7:9a:97:d3:d2:70:17:15:13:63:ab:
                    a7:8c:3f:72:ad:88:2c:2e:6b:43:c1:57:d9:7b:c3:
                    d0:76:2c:40:4e:ff:39:82:d6:3d:a3:79:92:5d:48:
                    73:01:ad:cd:57:55:45:08:88:9d:ef:3c:6c:ff:96:
                    24:76:3b:d3:3d:df:ff:9a:36:7b:6b:d9:86:bd:24:
                    af:03:6f:76:4f:61:b0:30:8f:11:19:7d:89:0d:47:
                    15:5a:ed:c4:97:93:aa:1f:08:99:ab:e4:3a:e5:88:
                    98:fd:34:a7:e7:7f:26:e4:1b:d5:aa:3f:4d:40:43:
                    f2:fd:51:51:ab:83:3c:58:e0:78:97:10:84:a1:77:
                    fb:6e:38:4b:65:fa:f3:ba:f7:d1:61:66:eb:55:79:
                    52:ef:33:de:7e:f9:c1:0a:e9:6e:2c:b3:81:b4:20:
                    b6:bf:ca:f1:07:99:5d:65:f7:58:be:74:34:e0:bb:
                    6b:aa:fb:77:c6:32:76:6a:df:44:cf:94:d3:4a:e6:
                    c9:fc:89:e7:3d:69:47:b4:c0:33:4d:db:ca:06:4f:
                    b0:f4:56:72:05:65:95:c0:52:95:c4:2e:5a:f5:79:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:CC:B7:F9:72:01:4A:AD:65:14:66:9C:BB:8B:A6:7C:84:C1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/408adc0c-3d88-3656-adc9-c98625dc7ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:f200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:77:61:bc:82:4f:4a:92:57:66:38:3e:9f:81:85:dd:b2:
         ef:1b:3e:96:6a:0a:ba:9e:51:9e:26:14:e3:41:da:4e:97:b7:
         d6:35:d7:77:fe:9e:6d:f1:de:42:53:4f:1d:f2:b2:6e:37:90:
         32:76:23:07:37:ff:8e:df:c3:27:9b:41:69:b6:8a:3a:c5:fc:
         09:48:fc:37:7b:2f:19:8b:40:cb:62:dd:e9:72:ef:04:4b:ca:
         33:77:e1:a9:34:8e:96:a0:db:e3:97:86:5f:c3:30:21:17:e8:
         20:82:06:89:a0:35:ff:84:c3:9e:ad:ca:ef:c6:18:fd:17:77:
         41:47:cd:f4:14:d3:9a:c4:5f:82:56:1e:07:23:66:5a:7c:f1:
         15:e1:7c:83:62:b4:72:a5:fa:9c:53:8b:7a:9b:26:11:52:6b:
         1b:84:9c:09:48:72:62:30:09:71:39:21:07:64:d2:87:5a:38:
         f3:cf:09:e4:1e:99:65:0f:09:c7:83:83:d3:c5:23:df:14:75:
         04:b8:ee:25:5a:ab:c6:7f:d2:51:e7:79:10:02:d8:2f:b9:34:
         66:40:12:f6:f4:5a:d4:50:c3:33:c7:d8:d1:58:db:f3:c5:b5:
         3f:0e:37:fc:ae:84:81:91:a1:b3:39:65:d0:f0:13:2b:f7:dc:
         12:03:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:53:44 2026 by rpki-client