Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff9abc59-02fc-3a68-9541-6f93178a6be5.roa
File:                     ff9abc59-02fc-3a68-9541-6f93178a6be5.roa (raw, json)
Hash identifier:          TpWYVeT2JAm6a0e75PUhyBps7mZxa6aZY2gBR1K/UkA=
Subject key identifier:   39:9F:A0:69:6C:F3:08:51:0D:0C:61:34:4B:98:93:46:8B:B5:D4:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790FF4458F054C32B961B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff9abc59-02fc-3a68-9541-6f93178a6be5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:ff:44:58:f0:54:c3:2b:96:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=611f96ea-e9fe-465b-9380-db98740ddc76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:e0:d2:a6:ee:32:72:b2:2c:7f:95:98:57:
                    c4:ad:a4:46:48:0e:2f:b0:00:6e:3c:ac:09:bb:31:
                    c8:f6:1f:1d:b7:a9:dc:5b:a3:6a:d7:99:ad:ed:93:
                    79:b2:0c:44:05:cd:c8:12:fa:50:b6:f5:b9:c0:d7:
                    d3:c2:d7:ab:62:b7:6f:5e:40:eb:9c:04:55:4f:43:
                    bb:61:62:ac:33:13:a7:73:24:be:9c:11:54:d4:98:
                    52:ec:e5:3c:3c:fa:53:e6:ec:b7:e9:67:89:a3:bb:
                    58:3e:71:31:fa:a0:7c:7f:cc:ba:fa:c9:3f:34:a8:
                    e0:8a:1e:5e:9d:e5:35:80:6d:57:8f:28:de:f2:36:
                    42:0b:a3:92:09:18:2b:f1:bd:a0:6f:c4:6f:20:b6:
                    8a:23:d5:8c:00:74:a5:d4:d2:7c:44:f0:20:5e:d2:
                    80:70:a3:bf:49:64:4a:d6:cf:a0:25:71:9e:ee:fa:
                    67:c9:c8:2d:be:9f:b2:4d:be:b9:af:a9:ae:ea:66:
                    17:ac:e2:fc:1b:92:1e:6d:f6:78:27:85:44:cb:12:
                    c9:f2:d2:9f:9d:f4:58:bd:8f:15:24:dd:20:6b:0b:
                    bb:e2:60:cf:a5:8e:a8:68:98:31:e7:7e:11:1d:c8:
                    53:29:96:0a:43:56:81:f6:f8:b5:5b:17:54:ed:0b:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9F:A0:69:6C:F3:08:51:0D:0C:61:34:4B:98:93:46:8B:B5:D4:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff9abc59-02fc-3a68-9541-6f93178a6be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0a:89:4c:40:8c:cb:d9:a9:8e:ae:15:fc:40:c2:ba:56:a7:
         fa:40:7c:67:b2:ba:be:0d:c9:e8:8b:53:e4:56:7f:7d:f4:a1:
         17:89:23:bd:6f:69:92:1f:44:24:34:9d:d3:53:ac:9b:bf:6f:
         d6:60:ea:af:ce:29:60:9d:9e:fd:06:41:f0:de:38:21:fa:2e:
         67:21:25:e9:f4:40:ed:11:aa:47:2f:2b:36:16:d6:4b:fa:fc:
         bd:30:f8:27:0a:0e:fa:d2:fb:b4:bd:3c:35:51:92:bd:95:d1:
         b6:df:9a:79:bd:62:39:70:e4:55:10:3b:9d:ca:49:c2:61:53:
         89:de:05:99:04:af:6d:71:d5:ea:fe:f9:c1:8b:1c:4c:08:cc:
         e4:57:d0:f8:5d:e0:a7:32:15:1e:96:ab:36:a7:18:44:39:6b:
         f8:d1:50:d2:98:c7:12:57:20:3a:68:8e:ec:47:dd:f6:e2:57:
         f5:43:4a:42:0a:9e:f3:54:26:10:d9:86:81:13:7e:76:81:c4:
         f2:55:57:b1:9b:c9:cf:49:38:b2:65:78:a7:73:2c:19:11:29:
         4f:e9:25:c2:91:7c:cf:7f:ad:86:3a:ca:ee:b7:db:d3:b2:33:
         9c:e2:1d:27:9c:ee:4e:0e:33:1c:6d:e5:97:06:ab:2a:5e:e2:
         e2:60:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:19:13 2026 by rpki-client