Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/191b0486-4982-3082-ba0d-f032fecfd65d.roa
File:                     191b0486-4982-3082-ba0d-f032fecfd65d.roa (raw, json)
Hash identifier:          iGBlXlAGaC6ymUeVUgh+ebWr2DDIxoIx4cPnXj6nChk=
Subject key identifier:   86:81:9E:14:10:CD:20:D7:F6:B4:A9:EE:70:90:7C:A3:5C:85:A8:78
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD7D1E2C3377C7502503C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/191b0486-4982-3082-ba0d-f032fecfd65d.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1004:b140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:7d:1e:2c:33:77:c7:50:25:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=58e507de-4ad5-442b-b5e1-2fe6dc781ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:7b:67:40:a4:b7:83:0c:7c:bf:36:e2:e2:
                    6a:a5:af:7a:79:8c:67:8c:b9:3d:3d:75:fc:57:16:
                    ac:1e:f0:f4:33:f7:09:1c:f2:e4:9d:b2:e8:bb:6d:
                    14:c3:b1:2e:67:ac:f6:1f:0d:3f:c7:1d:c3:b6:ba:
                    e6:61:04:0b:83:45:e3:3a:f5:80:7e:c3:82:44:cd:
                    da:e2:85:73:bd:0e:a9:a8:4a:f0:c9:32:b3:6a:ed:
                    53:32:1c:65:2c:c8:46:5b:b2:23:07:fa:31:47:c7:
                    ba:90:5d:f2:6b:8e:3e:ea:b0:5d:e8:d7:dd:87:4f:
                    b7:aa:a8:82:8e:e6:ea:da:89:ce:d2:fb:af:47:96:
                    29:76:02:76:c8:a0:31:fb:2d:b9:c8:71:2c:4d:be:
                    d3:53:a7:ef:ad:41:b1:02:92:5d:2e:02:b1:10:7a:
                    d8:dc:ef:e7:7d:2d:0b:33:3a:e9:b5:67:90:5e:6c:
                    54:05:27:b8:02:45:08:92:99:89:d4:f3:35:e0:a9:
                    58:30:2c:99:d0:f0:78:fb:9a:e8:db:cd:2c:3a:21:
                    19:42:77:72:f1:43:80:83:96:5e:e0:56:75:e3:5f:
                    76:2e:1a:c1:be:56:aa:01:1c:4b:a3:c2:94:0a:db:
                    ba:b7:ca:10:c9:5b:01:e1:fe:62:52:a4:c7:ba:b2:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:81:9E:14:10:CD:20:D7:F6:B4:A9:EE:70:90:7C:A3:5C:85:A8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/191b0486-4982-3082-ba0d-f032fecfd65d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:41:9b:fc:8e:66:41:6d:a1:27:91:81:e8:f9:23:3c:b3:
         61:d3:0d:5c:2b:1c:04:66:4c:ec:96:fb:4a:d9:ab:5a:29:91:
         3e:c3:0c:ba:83:a6:14:60:a4:b5:c6:f2:33:0b:06:93:ba:84:
         92:88:7b:7a:89:b1:0f:ef:ab:48:a7:09:c6:14:21:13:8d:5c:
         92:04:3b:91:b6:73:85:7f:78:5d:81:8b:04:03:03:21:4c:db:
         b6:f8:37:dc:ed:07:09:a5:ee:9c:51:95:a2:2a:0e:4c:fc:61:
         52:ac:30:d9:a7:5c:99:28:71:50:9c:19:de:fc:51:85:c6:8e:
         30:95:07:f3:f1:f2:97:74:65:0e:1e:bf:e7:03:de:43:7f:c6:
         60:16:c0:f9:87:7b:23:d2:ab:ff:5c:48:be:e7:cf:7e:97:af:
         aa:e2:0b:fa:5e:e2:0e:98:fd:71:96:47:f1:a8:fb:2c:c1:5b:
         a1:62:a9:a2:61:bb:8e:56:3c:8a:59:69:ab:f6:ce:0b:a3:02:
         74:7b:b4:b3:0c:de:4a:f5:7c:07:6f:31:c8:d6:db:05:b9:e6:
         f3:61:0c:eb:10:94:5f:4c:44:44:d1:5e:fb:4d:18:96:c3:44:
         3b:fa:44:38:00:65:d2:bf:6f:c1:04:b4:53:e0:d3:2c:61:56:
         ea:8b:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:41:10 2026 by rpki-client