Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcb1715e-4160-33b3-9acd-5037d569e3e6.roa
File:                     dcb1715e-4160-33b3-9acd-5037d569e3e6.roa (raw, json)
Hash identifier:          iGf3Vsauurb8b3YCvZnGodJ15vXfbb0zaQdOlkn7AnU=
Subject key identifier:   EB:68:D8:BE:89:59:47:53:73:C6:79:EE:56:1F:31:86:ED:DD:0B:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790F4031BF0C119C55DD180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcb1715e-4160-33b3-9acd-5037d569e3e6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1009:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:f4:03:1b:f0:c1:19:c5:5d:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d0eebcef-591e-4f08-b717-bce9ff2b3c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:88:0f:66:ec:90:a8:3e:52:48:a1:fe:c4:
                    fb:80:f6:43:89:38:81:69:bc:02:8a:8b:52:fa:1d:
                    96:7f:87:43:b8:1e:55:85:2d:cd:bd:16:c3:44:4f:
                    55:6c:72:46:5f:de:1d:ba:bf:78:0d:72:27:47:15:
                    5b:01:79:90:a4:97:5d:e9:76:fe:27:9b:a9:5b:ba:
                    a0:f2:e4:9a:02:65:6f:e1:6b:84:7e:a4:ff:2a:24:
                    2f:bb:de:b3:e9:26:b4:dc:c3:9c:37:3f:34:11:b8:
                    e7:4a:a0:f8:da:b2:47:2c:64:46:b9:f0:3b:98:e2:
                    b4:2d:3a:4a:61:fc:ad:0e:46:90:8a:d2:d3:3d:8c:
                    10:be:2f:a2:bc:1e:9a:34:d2:4e:c7:41:7b:b3:3a:
                    83:54:af:c4:cc:8c:83:cb:65:3f:8b:9f:d3:47:90:
                    be:f5:23:16:51:fc:75:db:56:5b:be:60:ec:7f:b7:
                    d2:f4:91:35:40:0b:96:de:7b:b6:ab:75:d0:33:3f:
                    e6:f1:2f:d8:eb:dc:ab:49:56:a7:84:cc:34:d3:d3:
                    ae:0d:4d:5d:68:2a:41:18:68:dd:38:0f:70:cd:1f:
                    bb:d8:c3:10:37:80:f7:4b:d5:4e:01:13:b9:93:ee:
                    0b:cc:8a:fc:36:d8:8b:70:95:8d:d2:ff:72:49:75:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:68:D8:BE:89:59:47:53:73:C6:79:EE:56:1F:31:86:ED:DD:0B:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcb1715e-4160-33b3-9acd-5037d569e3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:90:c1:7e:40:20:d3:6c:76:63:15:da:72:73:27:4b:aa:9d:
         36:4f:0a:9f:9c:94:64:d3:3b:02:2e:8e:7a:13:d5:d5:05:b3:
         1d:bd:c7:09:c7:e4:71:a5:bf:a9:36:6a:b7:72:90:7a:8b:53:
         f3:05:25:68:14:c3:0b:8b:d4:df:f1:01:28:dc:e8:aa:16:3d:
         bf:7c:0c:9e:1b:11:a0:5c:06:2a:f7:8f:1d:33:c2:4a:de:39:
         f0:63:de:58:b9:8c:d1:64:33:58:93:c3:29:0b:5b:bf:32:41:
         58:c9:c6:b0:5f:bf:f3:81:73:7c:df:25:9e:56:af:a4:60:f3:
         3a:0e:d4:29:ac:6d:bf:e7:02:9f:53:6d:3a:aa:06:21:15:48:
         2c:66:b0:ad:76:fc:f2:e1:6c:24:ee:d9:6c:4e:fb:d0:fc:c1:
         73:71:bd:66:a7:1f:c0:9f:8e:3b:74:76:d6:84:00:1e:92:a2:
         d8:2d:70:ae:4e:ac:a2:f2:25:61:17:f7:8b:24:a8:53:91:e2:
         f2:0e:8e:2f:47:c8:b2:84:27:15:1a:e2:ae:b1:30:17:2a:6a:
         88:b2:7b:18:e0:53:7d:e3:81:38:96:80:89:2c:a6:ed:3b:33:
         cc:72:13:46:08:5a:8d:8e:02:8c:5e:1c:e6:61:5e:b4:c3:85:
         a6:9e:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:21:37 2026 by rpki-client