Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd1283fb-5f41-3849-8404-b13d1a6dbe34.roa
File:                     dd1283fb-5f41-3849-8404-b13d1a6dbe34.roa (raw, json)
Hash identifier:          I2X/+i1nV5EJZqZ4ai8PsQCbJKB2Oy6WvMM+ibpTAoU=
Subject key identifier:   FE:03:22:8F:E6:47:D9:E0:6F:0B:D9:66:54:BC:44:3F:B5:58:CA:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79A46FA7C29B2A6F0608B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd1283fb-5f41-3849-8404-b13d1a6dbe34.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1010:a030::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:46:fa:7c:29:b2:a6:f0:60:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a706780f-d66b-4502-8880-eab96d21c766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:ac:8a:54:d9:92:e7:a6:cd:32:f8:db:8a:
                    6e:1d:5b:06:ac:47:ec:85:dd:bf:18:55:6a:cf:6e:
                    ca:a7:eb:76:d6:fd:0f:a2:88:00:e9:46:7d:34:8a:
                    a2:42:e2:fa:f6:b5:e6:4e:7f:7a:63:c3:75:6d:b8:
                    d3:bf:bb:b7:de:59:b2:a4:dd:0c:8e:f7:3e:1e:a3:
                    e9:ea:c4:fd:9d:55:d7:fc:3d:83:95:96:7e:b2:13:
                    55:ee:96:c2:59:b1:31:82:af:0c:b4:0b:6f:99:11:
                    ed:0a:c3:41:34:8b:37:92:9f:a8:89:05:e3:9a:26:
                    33:75:a9:2e:ff:bc:6d:80:26:3a:de:85:92:73:25:
                    ce:25:e0:97:57:7a:a5:0d:d1:ec:0d:f7:57:30:02:
                    b8:b9:3d:e4:60:57:30:aa:2b:ed:b8:8b:2b:54:d4:
                    ac:fa:94:45:e9:09:da:bd:b0:b2:7d:b5:0f:ea:88:
                    68:e5:ca:7d:ca:ff:1f:7b:9a:35:02:9a:50:7e:a3:
                    94:01:86:51:25:85:ed:51:c3:f3:2e:ad:76:a3:09:
                    72:13:77:90:f0:29:45:5d:73:3b:d7:e9:ff:d3:06:
                    1b:27:a1:97:3e:58:78:37:26:ab:d7:ac:2d:10:9f:
                    52:7a:be:97:2e:28:9e:da:67:b5:b1:0c:91:8c:a0:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:22:8F:E6:47:D9:E0:6F:0B:D9:66:54:BC:44:3F:B5:58:CA:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd1283fb-5f41-3849-8404-b13d1a6dbe34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a030::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:6f:89:57:9f:9d:c4:fb:a5:8c:2f:4e:32:58:0e:fe:10:dc:
         de:b5:d3:bd:53:70:12:45:0c:75:06:dc:5c:66:94:cc:93:6a:
         b3:6b:54:22:e8:58:97:23:b8:01:47:df:a7:75:05:f9:7e:17:
         17:5d:b8:f6:f4:62:a1:19:ef:ab:12:4e:74:c0:99:14:c1:03:
         9a:b4:25:ff:67:c0:b9:05:56:d9:87:ff:59:3d:d7:69:03:b5:
         2a:e4:a2:d2:64:c6:06:c3:dc:dc:fa:d2:6d:e9:d9:1f:9f:cd:
         f7:d4:31:39:cb:3f:cc:6f:f2:05:f2:04:aa:ac:4d:35:c7:36:
         90:bc:68:25:c8:1e:cf:2e:63:81:47:4f:37:13:01:f1:f2:49:
         ad:9b:70:21:09:1b:80:5c:00:4d:e0:d7:ca:94:dc:1d:a6:43:
         21:e8:da:ed:95:04:00:95:03:41:96:cb:f4:1d:90:41:fa:8b:
         19:9b:53:43:ba:61:e0:89:a2:89:95:d1:69:72:74:96:d9:a0:
         c4:4b:6b:13:a9:6d:c2:f0:c7:dd:8a:be:63:70:26:22:16:79:
         53:c7:87:bd:a2:26:49:4a:67:83:49:73:0e:fb:df:b4:5c:7a:
         b0:81:02:48:5f:93:3d:3d:ee:eb:f0:f8:b9:1a:10:0d:d2:0f:
         48:f8:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:04:11 2026 by rpki-client