Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81825f21-0961-32e8-9b3f-54beccb2f641.roa
File:                     81825f21-0961-32e8-9b3f-54beccb2f641.roa (raw, json)
Hash identifier:          B6Ur2TK5TfzmYggquwqEAxLfr7Nq4dkTFgH2C8RXGCQ=
Subject key identifier:   F5:CC:37:BD:CD:2A:80:C7:69:29:E6:D0:09:FD:AB:9D:2D:1E:8B:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E66DA38DC0B0C50852C0E0F68
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81825f21-0961-32e8-9b3f-54beccb2f641.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        2600:1004:b2b8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:38:dc:0b:0c:50:85:2c:0e:0f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=e97252eb-f354-409a-9c53-bec525018f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:5a:46:c3:86:35:8d:2e:84:a8:95:cd:87:
                    db:7a:48:05:28:17:17:df:bd:8f:e7:5e:3d:57:a5:
                    8a:80:d6:33:6d:01:3c:4b:bd:b1:48:ec:4d:90:97:
                    16:82:c1:0d:a1:a6:95:79:94:cf:ca:7f:12:08:6c:
                    77:95:40:9d:b9:54:54:2a:43:5a:6d:8f:95:c9:38:
                    c6:3b:af:27:48:1f:90:7e:a5:64:6c:21:56:85:2c:
                    df:f0:31:52:5c:c5:b8:2e:7c:87:2d:17:e4:be:1c:
                    8e:79:b1:62:4a:a9:44:3d:a3:a0:e3:05:37:28:70:
                    91:8f:5d:75:16:83:1c:46:e9:82:57:29:23:6a:42:
                    69:0a:22:ab:b0:fc:d7:91:b9:54:e1:a4:cb:16:dc:
                    55:21:f9:36:c5:91:45:55:5a:84:8e:a7:38:4d:73:
                    41:32:09:1a:60:6c:3f:49:1d:66:3b:ad:06:27:c5:
                    66:d3:54:6e:02:64:b5:b7:8a:9c:70:a6:f3:9d:d5:
                    6c:05:1a:94:0b:40:f4:36:6b:64:27:2a:71:6c:e6:
                    c5:03:f3:97:e9:3b:63:24:ab:62:0a:58:33:dd:82:
                    92:66:7b:7e:ed:58:40:e8:20:9e:ce:b8:7d:ff:52:
                    4b:ad:10:ce:4e:9d:71:63:2d:73:53:4d:be:14:d8:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CC:37:BD:CD:2A:80:C7:69:29:E6:D0:09:FD:AB:9D:2D:1E:8B:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81825f21-0961-32e8-9b3f-54beccb2f641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b2b8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:15:42:d7:4e:62:c4:9f:f3:1f:31:c7:ac:0f:b6:19:a6:4e:
         cf:f9:a6:42:d5:c4:31:d5:3b:f9:51:34:10:91:16:ac:70:be:
         7f:70:bb:35:48:df:20:9a:c8:cb:1f:d1:b6:b0:bc:67:eb:41:
         f8:cc:12:e4:98:72:dd:dd:60:bf:a8:da:dd:1c:38:d5:d9:e1:
         63:56:d6:ab:74:92:c8:d0:46:c7:54:2c:5c:2c:54:8a:77:62:
         8d:69:0f:92:46:55:2a:82:75:2c:65:fb:66:28:c5:ad:b2:d5:
         e2:a8:41:58:b7:86:62:ed:1e:2f:74:bd:2f:0b:ac:03:d8:c3:
         6c:6b:cb:9f:90:a2:19:2e:05:e9:29:c3:ba:c9:a2:17:d6:f0:
         c7:6f:04:81:fc:79:30:25:c3:b0:2d:3e:24:28:9c:69:17:67:
         cc:07:21:d0:cf:36:35:73:d2:7a:ae:0c:ae:00:68:49:43:fe:
         b4:ba:65:5b:64:50:4e:4b:83:9f:72:98:dd:be:6c:8f:a4:92:
         3c:36:bc:a8:ae:33:16:d1:ca:f2:81:02:15:02:d3:df:3e:71:
         bf:06:68:2e:8e:fd:48:76:60:da:87:0e:b6:cf:f2:ec:ab:fb:
         52:5c:ec:48:4f:fa:98:84:85:3b:46:e5:53:7f:2c:bc:96:5f:
         e4:93:96:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5m2jjcCwxQhSwOD2gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
ZTk3MjUyZWItZjM1NC00MDlhLTljNTMtYmVjNTI1MDE4ZjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZRaRsOGNY0uhKiVzYfbekgFKBcX372P5149
V6WKgNYzbQE8S72xSOxNkJcWgsENoaaVeZTPyn8SCGx3lUCduVRUKkNabY+VyTjG
O68nSB+QfqVkbCFWhSzf8DFSXMW4LnyHLRfkvhyOebFiSqlEPaOg4wU3KHCRj111
FoMcRumCVykjakJpCiKrsPzXkblU4aTLFtxVIfk2xZFFVVqEjqc4TXNBMgkaYGw/
SR1mO60GJ8Vm01RuAmS1t4qccKbzndVsBRqUC0D0NmtkJypxbObFA/OX6TtjJKti
Clgz3YKSZnt+7VhA6CCezrh9/1JLrRDOTp1xYy1zU02+FNjAXwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPXMN73NKoDHaSnm0An9q50tHotwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODE4MjVmMjEtMDk2MS0z
MmU4LTliM2YtNTRiZWNjYjJmNjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgAQBLK4
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKEVQtdOYsSf8x8xx6wPthmmTs/5pkLVxDHVO/lRNBCRFqxwvn9w
uzVI3yCayMsf0bawvGfrQfjMEuSYct3dYL+o2t0cONXZ4WNW1qt0ksjQRsdULFws
VIp3Yo1pD5JGVSqCdSxl+2Yoxa2y1eKoQVi3hmLtHi90vS8LrAPYw2xry5+Qohku
Bekpw7rJohfW8MdvBIH8eTAlw7AtPiQonGkXZ8wHIdDPNjVz0nquDK4AaElD/rS6
ZVtkUE5Lg59ymN2+bI+kkjw2vKiuMxbRyvKBAhUC098+cb8GaC6O/Uh2YNqHDrbP
8uyr+1Jc7EhP+piEhTtG5VN/LLyWX+STloI=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:06 2026 by rpki-client