Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f51120d-9cf9-35cc-bd2d-ad17e2a3a517.roa
File:                     4f51120d-9cf9-35cc-bd2d-ad17e2a3a517.roa (raw, json)
Hash identifier:          4RK1YB9OjYEaT5KyQRyM+ifSLkfwpU5BTX+X/HgZUJg=
Subject key identifier:   CF:0C:57:4D:6C:4C:F2:EC:41:AD:51:59:12:99:56:5F:4A:21:0E:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F17323DE6C37B687441BF4080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f51120d-9cf9-35cc-bd2d-ad17e2a3a517.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     6167
IP address blocks:        2600:1012:a127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:3d:e6:c3:7b:68:74:41:bf:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=d0b2e33a-654f-49ea-9471-45b005143a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:e6:79:e0:99:5e:aa:c0:ba:ce:99:60:4d:
                    c6:d6:55:96:94:2f:fe:28:e1:1d:30:c3:c4:d9:ee:
                    4f:2b:61:81:e2:01:db:3f:b4:49:fb:17:c3:2b:79:
                    43:31:e7:cb:d6:d0:70:a5:d1:18:03:9b:ea:5b:87:
                    8b:df:4d:97:48:1b:18:7d:68:af:d7:57:fd:87:9e:
                    6c:af:99:df:9c:0a:b2:17:c4:76:c0:c7:4a:40:d5:
                    5b:bc:e4:2f:34:e5:24:09:4c:e3:37:4d:e4:a3:08:
                    46:5c:f7:7e:c4:d7:a8:7a:40:e1:ea:99:41:67:53:
                    b5:59:aa:38:dd:a8:e6:8a:41:cf:1b:65:6e:a8:c8:
                    0a:a4:68:29:21:7c:c9:de:31:eb:a7:b0:79:b3:2e:
                    2b:8a:c5:21:2f:68:65:1b:ba:03:10:f0:57:bc:8d:
                    00:ac:76:64:a9:fb:f6:51:c3:0f:cd:54:d0:0a:03:
                    13:91:ba:49:f1:fa:cb:07:26:61:f9:84:c8:aa:55:
                    f1:aa:a9:39:09:65:75:e4:00:54:79:d9:36:8c:a7:
                    3d:ea:27:e9:1e:50:24:50:ed:b8:43:b6:3e:2f:ba:
                    e6:60:22:82:24:ac:80:b2:fb:d0:8c:dd:08:22:9d:
                    e8:3d:b5:e8:c9:31:21:f5:cc:e2:f5:b2:ea:73:fb:
                    2e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0C:57:4D:6C:4C:F2:EC:41:AD:51:59:12:99:56:5F:4A:21:0E:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f51120d-9cf9-35cc-bd2d-ad17e2a3a517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:40:81:14:8a:29:19:5b:8e:94:d2:10:37:27:8b:b8:46:
         af:be:dd:81:09:d1:81:5b:e0:71:b7:f9:ec:be:32:ca:c5:32:
         c3:5e:3c:c5:b6:f5:d2:83:56:3d:d7:7d:e5:3b:b6:f0:98:c4:
         d6:1d:e0:9f:80:00:2c:1e:bb:33:a2:7a:2b:b0:a4:be:0f:90:
         7a:db:ab:99:70:37:9d:c6:3d:85:7d:cc:57:d5:dc:6d:e7:36:
         6a:3e:bb:c5:b8:19:13:5e:6d:6c:3e:7a:33:5d:1d:87:cf:7d:
         1f:83:d7:36:71:c1:01:27:52:52:be:00:c6:17:64:ff:bc:47:
         96:5c:3f:b7:2e:e1:22:63:42:8c:f4:be:dd:1d:ba:61:a5:1d:
         35:58:de:7d:b8:25:83:d0:60:ed:12:71:ce:45:2a:09:ca:25:
         1c:30:25:1f:dc:95:c8:98:93:41:49:e6:64:94:fe:ee:61:9f:
         3f:8d:f4:91:ed:3f:2f:48:51:85:58:70:47:6e:53:d4:88:37:
         48:94:ca:b5:03:bc:fc:e9:e8:09:a4:c3:f1:85:91:30:4f:bb:
         50:a9:19:4d:06:8c:08:48:56:c2:27:9a:a2:3f:84:78:b0:e9:
         aa:72:7b:2d:82:84:8f:77:75:2d:2d:3b:34:96:e8:76:41:06:
         d3:86:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:26:15 2026 by rpki-client