Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11bdbca6-79ec-33c3-9b19-d69125e26a7c.roa
File:                     11bdbca6-79ec-33c3-9b19-d69125e26a7c.roa (raw, json)
Hash identifier:          /cgxuDF9LfpEDV5NcBIjNlvddSZyxqVDKkgOuyDHc1w=
Subject key identifier:   CB:53:D6:B3:D6:74:6B:01:A4:B1:0C:57:27:49:1E:45:85:F0:98:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A8668C0BCD011943289D8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11bdbca6-79ec-33c3-9b19-d69125e26a7c.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1005:d160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:86:68:c0:bc:d0:11:94:32:89:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=136dc056-c3ea-4577-b3f7-70cf041d24bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:da:1f:5e:3b:1e:b9:fd:6a:e6:97:ed:08:16:
                    ee:d2:41:cb:07:15:cf:91:96:8e:c3:cd:f6:e7:83:
                    f4:da:d4:ff:40:13:83:b7:67:56:be:c9:c1:f0:f6:
                    1d:47:c6:d0:4e:2b:ad:13:c5:62:8f:5c:47:b6:8a:
                    5e:19:ef:31:5d:38:c8:13:7c:cc:dd:6a:02:a0:3d:
                    b6:16:a7:09:f0:0c:16:3b:d0:36:01:66:82:86:e6:
                    ed:d9:7a:86:8d:39:9d:b2:2f:f5:7e:34:ee:61:b2:
                    83:ec:d0:82:37:b4:f7:26:8a:fe:6b:73:99:82:a0:
                    36:06:fb:8d:73:33:98:62:c5:cd:3f:bc:c0:7a:2c:
                    c0:3d:99:e1:b9:d8:79:05:f8:74:dc:cb:bf:8a:a3:
                    32:84:db:ad:7c:59:dc:9c:32:1e:a5:b8:8a:f1:64:
                    12:80:f0:82:a0:d8:ba:94:80:a5:04:48:f7:9d:80:
                    c3:be:20:ad:bf:d1:c2:02:41:00:b6:5a:43:8a:f2:
                    dd:77:12:c9:94:f4:3c:e3:eb:84:1c:cf:52:90:4b:
                    89:06:cd:1f:62:9b:08:7d:b2:12:70:90:ce:62:6f:
                    b9:b3:cc:40:95:c2:87:5d:75:b3:12:0d:7f:e8:af:
                    2e:b3:83:e6:ce:fa:15:cd:a0:03:11:72:1e:86:d8:
                    a6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:53:D6:B3:D6:74:6B:01:A4:B1:0C:57:27:49:1E:45:85:F0:98:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11bdbca6-79ec-33c3-9b19-d69125e26a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:d160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ee:4b:0e:04:2e:f9:89:ab:a4:27:66:5b:d5:51:d0:35:8a:
         42:f7:e4:3b:a1:8a:d4:7e:8f:5f:fc:1f:30:fe:8f:5f:0a:c7:
         75:ee:7c:d3:6d:bb:e7:30:1e:c1:a7:f2:ed:ac:4e:96:53:54:
         03:7a:9e:d4:0a:cd:eb:30:7a:da:ed:a3:d3:a3:ba:03:6d:1c:
         8c:0d:bc:5e:9b:5a:3a:91:0a:ec:6a:1f:5e:70:f5:7a:91:32:
         a0:15:81:d5:36:65:c2:66:23:fa:bd:e9:cb:82:1e:76:04:92:
         70:bc:ff:21:06:36:69:24:41:9b:4f:3a:18:37:1f:38:8e:79:
         b6:a9:be:29:da:95:18:6b:d6:4e:f5:10:54:43:d5:0e:2f:75:
         fb:61:c1:f5:78:72:48:f3:a1:f2:7a:02:61:e0:d1:24:a8:dc:
         0a:f4:7d:3e:af:f3:71:24:fb:9a:78:0f:fa:7c:75:f2:54:d4:
         da:67:89:3a:d2:56:d1:2f:b6:b0:3b:33:5e:f9:61:03:5d:e4:
         53:aa:22:d6:c0:7e:ae:f9:1c:35:bd:28:08:cb:ac:78:04:57:
         8f:51:09:07:b8:a5:c8:72:3a:f9:54:cf:67:c5:b1:67:ab:7d:
         0e:22:b6:15:75:3d:32:f4:0a:11:a2:da:bf:09:a9:43:dd:a7:
         a8:5c:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:33:13 2026 by rpki-client