Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ac32aa2-176c-3b57-97a7-31a316429982.roa
File:                     5ac32aa2-176c-3b57-97a7-31a316429982.roa (raw, json)
Hash identifier:          kz9JIhmZ1c3pUR1QRL86mp0Rymc5V+rCwom7N0ekL0w=
Subject key identifier:   90:ED:0B:E8:6E:9A:A8:88:56:9C:60:8E:D5:99:BF:AB:AA:D7:CB:43
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A836CF15C2974617A7D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ac32aa2-176c-3b57-97a7-31a316429982.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1003:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:83:6c:f1:5c:29:74:61:7a:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=3ab67f59-f965-40c4-ac9f-eceac6d08c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:56:34:2c:5c:fc:07:df:91:e2:8a:e3:39:c0:
                    72:83:ff:02:9f:ea:5e:34:b4:30:33:63:98:49:d9:
                    76:2f:76:8b:f6:4a:51:af:74:2f:28:c5:c8:0c:69:
                    c3:ff:1b:fa:85:62:40:48:f3:ed:12:75:cf:a4:4b:
                    02:a8:37:f9:4d:67:b4:63:e1:90:75:14:fb:b9:d7:
                    86:c8:43:35:f5:14:d1:c9:9b:8b:41:47:d4:65:4d:
                    85:f3:0f:6c:a9:e8:02:da:8a:c3:5f:60:f2:19:be:
                    6f:01:ed:c0:e8:d8:96:72:c5:7d:fd:25:39:21:b9:
                    a3:da:c5:21:76:3f:fb:ce:dc:f4:ce:1b:77:a6:07:
                    1d:b4:eb:30:ba:7e:93:8a:2c:0f:ea:f2:b9:f5:87:
                    e8:c8:77:32:39:f2:d9:11:30:5a:7b:4b:c9:68:c6:
                    3d:d2:c5:da:a0:4e:dd:99:88:a6:82:e1:2e:13:74:
                    9a:ea:2d:3b:86:c9:3d:39:78:ca:89:29:f4:cf:b5:
                    44:2a:e3:30:b6:40:19:55:64:20:f5:57:d5:78:a3:
                    24:14:8d:f6:5f:01:d7:7b:e9:85:2c:33:03:a4:14:
                    86:ab:e1:9a:b1:65:f8:a2:3d:8b:e1:fa:dc:ec:bb:
                    b8:ce:55:80:ca:0c:20:06:ee:17:77:5d:c5:ac:e4:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:ED:0B:E8:6E:9A:A8:88:56:9C:60:8E:D5:99:BF:AB:AA:D7:CB:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ac32aa2-176c-3b57-97a7-31a316429982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ff:ca:14:45:2b:0c:f8:4a:34:1f:84:38:63:49:0b:b3:0f:
         3f:fc:17:58:f9:32:cc:d8:c2:61:e2:a7:00:88:36:c1:ad:67:
         6b:1e:7c:8a:9e:3f:70:f5:36:45:3e:4a:cb:56:e5:dc:93:79:
         9b:37:38:71:8d:b8:9d:64:e8:cb:39:c8:69:47:db:44:ab:94:
         70:10:5b:22:ff:ca:d5:c3:26:cf:b6:e1:89:bd:cb:bc:3a:2d:
         96:a3:28:2e:28:8e:b2:e9:5b:ad:97:f2:52:45:fc:8e:29:20:
         c0:00:c6:cd:60:c9:76:0c:66:15:51:16:5a:60:a0:75:ca:18:
         2c:7e:51:2e:e2:95:c8:3d:f1:07:f3:8d:22:12:da:24:37:d7:
         b1:28:e1:72:d1:c6:b6:13:c7:a4:76:1d:8b:05:91:bc:e3:16:
         d7:d7:57:cd:33:53:d9:14:35:20:41:e0:39:b5:3d:8c:0a:5c:
         2f:1f:2f:dc:74:22:78:eb:70:7b:88:31:11:af:4e:76:25:fc:
         06:ee:62:c0:41:f9:59:38:28:d8:ac:e0:2e:f4:a2:9a:33:1d:
         f3:36:78:df:9b:c5:19:b2:13:b5:5c:c6:35:db:89:e9:d4:9d:
         e6:fb:b3:8a:59:1f:b8:39:99:5e:c2:ff:29:ae:61:eb:5f:dc:
         e3:60:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:53:37 2026 by rpki-client