Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3addb856-b500-3b34-8f9e-75e396b902b2.roa
File:                     3addb856-b500-3b34-8f9e-75e396b902b2.roa (raw, json)
Hash identifier:          wCc1x3tCzKl1j+Xc3WFB0ds0bNESf6RcJ8PJH0qSiIs=
Subject key identifier:   C6:12:8B:A6:A0:A4:5A:DA:A4:35:6D:BE:5B:12:AE:0B:2F:60:B4:39
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790C71E0551C4FDA8E0FE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3addb856-b500-3b34-8f9e-75e396b902b2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:bf08::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:c7:1e:05:51:c4:fd:a8:e0:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2c48549e-9fba-4cc0-ad9c-29f599f2e6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:03:38:e8:d8:7b:b7:47:c0:c5:4a:33:98:
                    fb:8c:23:18:e1:93:f5:bd:8a:55:c6:24:5d:70:eb:
                    c8:cd:db:77:96:3e:f6:53:f4:a3:f9:62:54:de:cd:
                    c3:cb:8b:75:22:f5:d0:f5:56:95:0c:db:3c:28:24:
                    0b:a6:25:b3:d5:4f:23:10:3e:59:fb:89:dc:a1:c7:
                    fb:36:65:3d:b1:fe:3a:a4:0b:e4:f2:d0:66:ab:b8:
                    67:a2:b3:d0:49:91:e5:fd:a9:39:03:68:88:ca:23:
                    6b:31:c8:2d:ef:04:8d:d4:23:17:28:e7:16:e1:35:
                    41:93:ec:99:9c:ef:87:08:c8:53:c0:91:d9:cd:19:
                    8b:47:63:ea:7f:ee:7a:e5:28:62:85:b0:82:26:0e:
                    56:3e:7e:03:b5:a5:8d:99:a8:c6:00:2e:d1:71:65:
                    40:0d:8a:cb:63:25:e4:aa:59:f5:f5:5c:4f:d1:de:
                    64:40:1d:ad:14:18:59:7c:aa:9d:29:a1:2d:f1:03:
                    7d:ed:5d:9f:de:b2:5e:1e:ec:4e:e7:ad:8b:1b:8c:
                    79:4b:a8:82:85:bd:c1:5e:5f:b4:5a:13:d2:f1:d6:
                    14:fe:b6:47:0a:35:3d:21:1c:c3:56:f1:60:3c:e7:
                    6a:0e:a5:97:b0:c6:88:a8:d2:5e:04:b4:7a:72:f6:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:8B:A6:A0:A4:5A:DA:A4:35:6D:BE:5B:12:AE:0B:2F:60:B4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3addb856-b500-3b34-8f9e-75e396b902b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:bf08::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:62:df:9d:a6:e1:3c:29:aa:7d:38:3c:90:a0:ac:60:0c:
         bb:eb:11:a0:84:bc:3a:1d:83:4d:33:67:90:ca:f9:31:e9:1e:
         54:0d:11:38:b7:05:3a:ea:24:77:5e:66:2e:8b:51:97:2c:09:
         95:9a:27:41:14:35:bd:27:20:39:5b:25:46:36:2d:69:4a:13:
         56:ee:23:67:54:00:08:d4:51:e1:6e:56:65:cb:6b:ba:be:24:
         cf:ce:c0:4a:58:b7:02:9c:a8:53:a5:57:d4:94:63:fd:2e:12:
         b2:e9:c9:0e:50:63:39:5e:70:36:fc:9f:bf:e6:2d:c4:b9:c8:
         cd:ca:04:6b:15:00:c4:b8:8a:af:4d:d7:f5:4e:df:f7:50:95:
         89:e1:39:35:39:cf:a4:9c:29:8b:b4:88:ec:23:79:94:a7:43:
         99:fe:3d:cc:89:e6:a3:b5:99:56:b2:53:e9:00:a9:d7:73:96:
         0a:f7:07:1e:2c:a8:2d:b5:d5:35:0d:bf:b7:57:b7:aa:46:34:
         2d:43:f5:20:ac:12:61:4c:e4:ad:e7:3a:57:b7:06:58:2c:61:
         02:4d:95:c2:c5:3f:ee:0e:b0:33:33:9e:91:cb:5f:11:36:99:
         7c:4f:fd:77:bd:c6:3c:71:60:21:a3:57:82:54:64:ea:ce:71:
         d6:86:90:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:22 2026 by rpki-client