Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/208c6357-7bcd-3e02-b451-7a75f449c5be.roa
File:                     208c6357-7bcd-3e02-b451-7a75f449c5be.roa (raw, json)
Hash identifier:          FuSSoT7ZYrXvAgLGFTdkYVYuBkHp487A+5wjpspZ/Ms=
Subject key identifier:   7E:F7:6C:08:2F:9D:8F:4D:97:9B:4F:46:7E:81:63:3F:0F:AD:99:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AA50EA1C08D53CA3FEB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/208c6357-7bcd-3e02-b451-7a75f449c5be.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1000:b180::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:a5:0e:a1:c0:8d:53:ca:3f:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=25e9188d-d0ff-44cc-aa83-f55c18be72c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:a3:e9:ee:83:1f:cb:3a:2a:91:31:17:4e:
                    54:fa:67:14:c9:f5:6f:11:2b:28:29:d5:4c:89:00:
                    b3:39:a5:71:b7:58:d5:22:dc:34:9d:41:ab:21:ce:
                    f4:f5:cb:93:bf:1d:15:85:5f:96:60:2e:46:1f:5e:
                    36:a8:43:f0:bf:64:4c:43:ef:11:7f:f0:24:6b:f3:
                    82:c2:aa:1a:e2:0a:a1:b9:83:d6:83:36:77:cd:df:
                    53:94:be:64:80:c6:84:6d:18:97:42:70:df:db:4c:
                    7a:1c:4e:6f:5a:46:d1:80:2f:a7:01:85:f5:6d:cf:
                    85:bd:f8:76:5f:60:52:a4:ba:16:5f:be:2e:9d:72:
                    fb:68:e2:8c:1b:71:95:49:bb:75:9b:f8:19:32:df:
                    39:3b:8e:1f:96:94:c6:b8:e1:fd:22:9c:9a:70:77:
                    4d:6e:c9:99:39:79:1c:2d:85:ae:8b:03:56:25:cd:
                    49:6b:45:ba:63:f1:92:09:1a:a3:cb:bc:14:bd:da:
                    09:de:f1:01:cf:ff:da:eb:c3:ce:bb:91:c0:bd:da:
                    08:dd:18:21:8d:6e:bf:f0:d6:c9:2d:ed:d1:26:b1:
                    44:f1:f3:ee:80:c3:cc:5b:f9:16:b5:08:75:cb:cf:
                    09:28:c1:f3:b3:f8:24:b2:c5:6d:1f:45:36:1a:e7:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F7:6C:08:2F:9D:8F:4D:97:9B:4F:46:7E:81:63:3F:0F:AD:99:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/208c6357-7bcd-3e02-b451-7a75f449c5be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b180::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ee:7b:46:7e:9b:bf:c7:6e:4b:d8:84:75:68:61:13:59:cd:
         0e:d1:a1:1b:02:e5:b6:ed:ed:a1:a9:f0:fd:1c:3a:19:1b:11:
         b4:d0:de:ad:92:97:b1:e5:73:91:fc:32:c4:bf:25:ad:6a:21:
         a4:8a:bf:e6:58:29:36:7c:83:02:4e:75:25:9f:8e:5d:13:72:
         1c:70:d1:4e:10:c1:3b:cc:0a:6e:3d:7d:49:20:5a:06:84:44:
         42:7b:a4:ce:78:db:0f:d2:f1:44:53:7d:b0:0e:cd:c6:60:01:
         cc:6d:9e:69:ff:e4:c8:0a:17:c8:bb:73:2c:6f:45:91:23:44:
         8d:d2:04:06:c8:e2:29:40:b4:da:4f:ff:77:ee:79:fd:aa:6e:
         a8:ff:df:e8:4d:f8:ae:85:46:09:a4:f6:5a:e2:42:0a:6c:80:
         e3:06:21:5b:1f:d8:ef:7d:7f:9c:37:fc:f2:3e:dc:5c:af:ee:
         1d:4b:af:b6:84:1c:ef:83:47:96:a2:72:8e:e8:f2:91:0e:50:
         c8:76:69:3d:b0:41:2f:a4:db:39:49:48:02:e7:53:c0:4f:14:
         68:2c:ca:8c:40:15:1e:87:aa:64:4c:c9:60:dd:66:40:50:1b:
         6e:76:e5:49:16:b7:71:6d:ef:29:4e:63:f9:c5:d3:bb:45:b6:
         d8:6c:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:51:59 2026 by rpki-client