Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4638fd8a-b075-31b1-bce5-c405dffbe919.roa
File:                     4638fd8a-b075-31b1-bce5-c405dffbe919.roa (raw, json)
Hash identifier:          gz6CEy8r+EfZYtoJOUTvwBgLCuPUKGOyEFvdK6unwNI=
Subject key identifier:   9F:97:98:FF:1B:DC:59:C2:E8:85:10:A9:C3:CC:39:AC:16:F3:8F:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E428F30C767A7EF34149912C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4638fd8a-b075-31b1-bce5-c405dffbe919.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        2600:1011:a182::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:30:c7:67:a7:ef:34:14:99:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=bfb5a2ae-ebd2-49ab-81fc-139ce0da4c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:02:e4:74:71:c1:30:c3:41:be:45:a7:56:75:
                    5a:64:25:17:a6:e8:ac:cb:e3:20:a8:be:e4:1e:7a:
                    cd:a8:0b:a9:5b:f1:8e:10:c5:eb:01:21:94:aa:0f:
                    a1:3c:e5:c7:8b:66:bb:06:d1:85:86:63:69:66:ca:
                    a8:65:b4:6e:63:c9:40:7a:56:7b:93:f2:16:b1:5e:
                    31:c2:22:95:d1:4c:64:3d:0e:66:78:ac:07:75:eb:
                    66:eb:5e:46:b6:6a:40:9e:70:0d:2e:49:87:b8:12:
                    f5:f4:23:65:c0:6a:40:6d:52:33:5a:0a:6e:9c:18:
                    74:d2:2c:7f:70:cd:1a:a9:b2:83:dc:60:86:d9:ab:
                    c1:9f:9e:29:78:77:13:00:21:56:18:fb:fa:15:07:
                    cd:ae:c4:51:b4:2c:9e:f7:09:e1:0b:10:31:e5:43:
                    44:e2:a7:95:d3:29:4e:fe:81:85:98:dd:fe:99:e0:
                    fb:94:3e:18:b3:00:1a:d4:d4:89:79:bc:77:18:a2:
                    f2:96:cf:34:98:0f:83:c8:91:c5:3b:d6:8c:63:21:
                    64:7d:61:2f:7c:65:57:c1:1c:fe:63:c1:3d:6a:4f:
                    fa:3b:c0:0d:79:15:61:1a:5f:c8:29:94:3c:3b:a9:
                    0a:ac:5a:f9:7b:89:cc:f0:03:84:76:7b:8d:01:ea:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:98:FF:1B:DC:59:C2:E8:85:10:A9:C3:CC:39:AC:16:F3:8F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4638fd8a-b075-31b1-bce5-c405dffbe919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a182::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5b:5d:a7:e4:1b:19:eb:51:1a:f1:0b:f7:68:b4:4d:8e:df:
         6f:0e:20:97:5f:4a:d5:42:94:3f:3e:05:c0:13:fa:d3:f9:17:
         f5:cd:99:2e:8b:e7:8a:80:a7:3a:e8:ce:5c:e1:5c:80:c9:68:
         3b:a9:4b:6f:a7:14:74:87:d2:78:4f:ac:bf:6f:ba:c0:04:20:
         a7:98:8f:54:56:85:e0:e9:52:4e:a4:12:b3:f6:91:d7:b5:69:
         94:fd:c4:c4:58:72:b5:9d:06:d1:60:ac:71:eb:11:62:6d:15:
         28:bd:6e:e1:d9:d0:60:ed:ba:cb:27:58:12:79:04:7f:e5:99:
         f8:cb:a2:8a:d9:2f:16:bb:8b:2f:67:e0:e7:82:fc:37:0c:b8:
         14:4b:09:24:a0:d6:84:f1:8d:fa:7d:f5:0e:c6:d6:d8:09:6e:
         2f:f5:3d:90:77:ae:b3:9b:9f:74:ad:61:01:ff:fe:97:f2:9d:
         f3:e5:e0:b9:a0:e6:ad:c1:85:22:96:7f:d3:92:f6:7c:b9:eb:
         6d:41:98:fb:90:9e:a1:b0:c7:63:17:a5:21:73:d1:63:06:70:
         10:2a:20:4a:db:a6:5e:65:e6:07:af:91:61:70:b9:f0:c3:67:
         f8:f0:09:a0:2b:c6:c8:06:29:cd:10:d5:95:a6:9b:fb:25:76:
         55:f3:3e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:36:41 2026 by rpki-client