Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c945c0e9-00b5-3660-b707-9efa25dbe675.roa
File:                     c945c0e9-00b5-3660-b707-9efa25dbe675.roa (raw, json)
Hash identifier:          ZCaV/f2et/g9AtBh7hWSE1dUVHvMhfSJxDp3bDZFzs0=
Subject key identifier:   9B:0B:EF:71:B1:F0:DF:B9:78:27:6B:C4:17:18:65:70:EC:46:62:48
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E577F560EEA87B1D416F007C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c945c0e9-00b5-3660-b707-9efa25dbe675.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        2600:1004:d0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:56:0e:ea:87:b1:d4:16:f0:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=97023c81-7ad2-4d88-b1c4-85707caea82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:e2:9c:98:02:6c:5b:a2:8d:78:47:93:86:
                    83:d8:7d:e9:0a:89:4a:34:b3:e7:19:c7:f3:56:6c:
                    c8:f7:0a:24:3d:65:53:aa:09:10:74:41:fa:cb:48:
                    4b:b5:a2:58:e2:f2:74:50:7f:d2:1f:36:ce:b6:85:
                    bc:d7:6c:dc:b6:0c:b8:d2:91:31:16:b8:3a:d3:ad:
                    b0:9a:bf:42:e9:17:d4:df:ad:98:46:30:50:cb:7e:
                    ee:2c:35:49:22:55:25:e1:b8:d7:52:1d:60:fa:f3:
                    6c:4e:34:ee:9e:8c:45:69:78:f1:d9:2e:17:8f:12:
                    a7:ff:e5:2c:35:30:10:8c:ec:0f:b5:78:22:3f:56:
                    5f:9e:8c:0a:ee:75:b2:ef:cf:51:1f:f2:dd:4b:d4:
                    fa:6b:b8:bd:71:35:e1:73:2f:1d:b0:28:5d:7a:1b:
                    3c:a9:09:68:72:8b:97:b4:15:f1:29:01:8a:96:fe:
                    ee:9a:83:16:ee:61:67:64:69:7b:cf:8f:78:94:36:
                    61:de:29:88:5d:46:a5:04:08:9a:91:99:d6:33:dc:
                    84:51:47:3b:43:a4:4f:78:51:6b:c0:d7:f0:51:c7:
                    41:3a:bc:38:4f:44:3a:0d:e9:a8:d6:74:42:37:8b:
                    ff:a0:2c:50:8c:1b:5a:59:93:bd:7b:86:ae:b4:0a:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0B:EF:71:B1:F0:DF:B9:78:27:6B:C4:17:18:65:70:EC:46:62:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c945c0e9-00b5-3660-b707-9efa25dbe675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:d0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7e:46:7f:dd:7e:ed:85:75:b0:1b:d4:47:48:1a:ed:72:15:
         a8:65:52:6c:e4:09:b0:0b:af:03:39:45:c3:54:f4:5a:c8:ea:
         d8:e9:de:55:41:17:c6:74:61:3a:11:4f:30:e1:50:cb:b6:9d:
         f9:35:21:59:4a:61:f4:03:bc:42:90:c5:e8:77:3d:13:fc:9e:
         e8:1c:0f:f2:db:3e:7e:8c:21:09:67:5e:89:52:96:c2:f2:f0:
         16:45:a0:e0:09:64:58:5a:15:2c:12:23:0b:0a:81:0a:5c:1a:
         a4:39:06:10:39:6c:19:d3:d9:8a:46:e8:52:8c:b0:d1:bb:fd:
         ea:6b:2b:ec:53:3a:37:5a:af:fe:ad:f1:9f:e6:96:06:31:d0:
         44:5c:f4:32:54:23:a8:dd:e3:7c:96:0d:89:fd:98:bc:30:a2:
         d9:2c:c1:f7:cf:66:b3:d9:35:fc:81:46:77:e5:1e:4f:e0:2c:
         33:74:a8:0a:df:c2:1f:43:c5:7b:cd:9f:3e:06:10:05:9e:d0:
         6c:8d:54:da:db:a1:29:06:e0:0a:78:a6:fe:30:d6:74:86:72:
         8f:01:3f:44:2c:ad:bd:82:d4:01:ad:94:fe:f3:00:56:45:a7:
         12:9b:ca:46:cd:66:ff:98:17:f2:f2:b0:61:e8:0f:57:c2:e4:
         19:02:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:39:15 2026 by rpki-client