Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d10c72-3f45-3c09-8dd6-219363c2a40b.roa
File:                     d3d10c72-3f45-3c09-8dd6-219363c2a40b.roa (raw, json)
Hash identifier:          XIDvK14KoYrwT0jjjG3/LwjWWgtCNnyIyIJhL6j1FoU=
Subject key identifier:   82:D2:DC:E0:1D:80:9D:4D:AF:5B:98:79:5F:AD:C9:A2:43:DE:69:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87CC2F929E8A3495D1F060
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d10c72-3f45-3c09-8dd6-219363c2a40b.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1010:b1ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:cc:2f:92:9e:8a:34:95:d1:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=3469d379-f547-4e43-88c5-b51381887bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:95:21:5b:f5:7c:d8:95:08:75:3c:80:bc:
                    c5:24:c1:4d:7b:18:7c:41:0e:4c:10:6d:bc:1a:04:
                    c7:a3:82:f0:be:27:31:0a:ff:ab:ab:e7:db:92:a3:
                    8e:43:95:a2:56:c3:93:66:93:be:11:5c:9d:1c:00:
                    67:3c:50:d8:28:f4:a6:30:d3:34:cf:94:29:78:3f:
                    8b:7f:46:44:8b:55:f3:f2:63:26:26:8a:c3:47:52:
                    12:8d:07:81:e3:82:09:d7:3e:31:42:ac:c8:a7:67:
                    01:3e:29:01:f7:39:67:e0:59:7b:ed:7c:6e:66:22:
                    39:c2:ad:80:b0:80:7b:9c:36:66:a3:f1:51:18:3b:
                    7d:a8:b4:4a:1d:33:e3:56:44:e0:f7:7e:11:9b:9d:
                    d4:5a:6b:31:22:45:33:7c:c5:22:19:ef:be:7d:5d:
                    61:78:3c:54:3d:7c:6a:68:00:d1:44:42:94:72:f0:
                    e4:55:56:0d:45:de:ef:92:f8:f1:96:69:56:9e:53:
                    42:80:b3:32:c6:87:16:fb:b1:d9:d9:8c:ab:12:a2:
                    34:b9:ce:ae:33:10:b3:66:60:45:1b:40:29:ab:96:
                    57:92:cf:c7:61:a7:a1:fa:90:6c:50:c8:35:b0:5f:
                    37:25:e3:bf:6b:e1:ce:f3:44:b7:63:b6:9e:43:7a:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D2:DC:E0:1D:80:9D:4D:AF:5B:98:79:5F:AD:C9:A2:43:DE:69:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3d10c72-3f45-3c09-8dd6-219363c2a40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b1ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:37:09:9d:f6:6a:de:cb:43:92:11:28:6d:0a:c4:99:b7:b2:
         48:3c:f0:c6:4a:27:43:e6:8d:f8:7c:7b:fb:b3:03:58:1a:33:
         5b:73:c5:d5:c0:df:a0:02:55:76:fc:23:57:04:31:95:ef:bd:
         cb:10:10:7c:34:3b:22:9e:7c:46:ef:da:c6:09:c9:13:21:08:
         89:40:ca:2a:5e:5c:44:fc:0e:02:77:1e:03:2f:29:4c:56:cf:
         9c:fa:8d:1f:d0:45:8e:83:30:ce:17:67:38:45:28:21:c3:d7:
         57:97:47:e1:96:cd:65:40:9a:07:ac:f5:cd:d5:57:76:ab:74:
         8f:d7:ab:95:a3:f4:65:d9:30:f6:7b:ba:ed:82:6c:27:64:9f:
         2d:65:12:1e:b2:cc:32:90:ed:b5:8a:30:c3:1d:c7:31:cb:09:
         49:82:9d:e8:b1:ca:e2:dd:1b:7d:37:a3:51:66:65:d9:17:5f:
         c7:4f:4d:c5:43:6b:96:62:45:1b:95:df:7c:5e:8e:dd:fb:bc:
         ec:93:b2:de:37:ce:32:eb:1e:92:9e:aa:50:74:c7:cd:5a:1e:
         3f:04:d3:c3:2c:21:2b:8b:24:0a:2e:64:97:79:8d:6d:3c:33:
         89:85:bb:6b:99:fd:8b:4f:84:ef:2e:cc:5b:1e:2a:a5:9b:65:
         03:7b:53:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:57 2026 by rpki-client