Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b9f67df-e240-3753-ac4f-add44890105f.roa
File:                     5b9f67df-e240-3753-ac4f-add44890105f.roa (raw, json)
Hash identifier:          BmyYfe8miTuJuUVdrgBizhF9VGllmPxCQ5k3V9G++zI=
Subject key identifier:   B0:A7:8E:D6:00:AB:B9:1B:0D:69:F3:6E:8F:CF:78:4E:FF:D0:06:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AAAC0D99C06411584CF00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b9f67df-e240-3753-ac4f-add44890105f.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1004:b0b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:aa:c0:d9:9c:06:41:15:84:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=765a94eb-2556-4b55-a0da-f45297f700a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:3a:a4:ba:fa:53:54:fb:15:74:d6:63:ed:
                    12:7e:59:dc:b3:0c:34:62:4f:92:d2:50:e0:6c:a5:
                    68:e8:ff:29:d7:e3:9a:e5:8e:70:2d:72:ca:e6:7e:
                    14:a2:d0:ba:59:80:bb:c7:76:37:de:89:b9:d2:3f:
                    bb:77:ec:15:9e:41:6b:e6:7b:0e:02:52:bc:cf:21:
                    5a:fe:9f:ea:50:9f:f1:f3:d2:26:b3:69:a4:d2:18:
                    d3:77:44:51:e2:b9:5f:87:22:f0:ef:26:b9:e0:d2:
                    04:63:74:86:67:4d:f2:cb:6f:f6:c9:62:31:66:70:
                    81:6f:d7:ef:68:55:6e:ea:89:ce:c5:d8:9d:30:a8:
                    86:7b:62:31:4a:d1:7f:55:13:c3:6f:dc:46:b6:19:
                    ae:83:fd:1d:09:73:07:d9:bb:52:82:f9:ca:60:a8:
                    a0:d8:48:64:67:c3:a0:de:e0:08:b7:cb:1d:80:10:
                    21:6d:52:92:3d:c2:ff:b0:a5:1e:65:eb:28:87:33:
                    18:05:ae:f8:90:33:fd:2c:0c:fd:ba:79:38:6a:1b:
                    5f:e0:26:1f:d6:fb:42:84:33:94:2c:68:98:38:b2:
                    5c:51:dd:e3:58:3b:47:7d:36:5f:46:99:f1:f5:77:
                    69:7b:46:d5:3a:38:58:0f:43:fc:ee:7b:2d:86:92:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:8E:D6:00:AB:B9:1B:0D:69:F3:6E:8F:CF:78:4E:FF:D0:06:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b9f67df-e240-3753-ac4f-add44890105f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b0b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:00:1d:83:99:ff:ac:0c:d4:23:45:12:1d:0b:19:ec:3e:6d:
         a1:71:ac:d5:a2:a1:64:6f:05:96:1c:e1:a8:da:81:45:d8:90:
         94:13:a7:2f:24:63:6a:e0:81:b6:15:47:b5:53:8e:bd:49:4a:
         f5:08:e7:ae:b6:dd:5e:77:51:35:e4:c5:93:18:e8:36:66:93:
         b4:13:09:b0:38:0a:70:39:19:ea:aa:8a:53:fe:e4:cc:d3:05:
         db:26:5c:59:33:13:4f:07:1b:1f:84:d8:d9:01:a3:49:27:70:
         e6:9d:be:90:6b:a6:8b:02:16:08:b1:67:ee:1f:84:89:3a:e1:
         c3:4c:1a:ac:5c:61:a0:45:fb:12:60:1e:30:da:67:0e:db:44:
         44:67:44:da:e0:52:d8:84:c2:be:09:7d:e1:32:d0:66:06:0d:
         e4:df:74:c5:61:1d:99:e6:24:6d:0b:9d:65:5f:5a:61:38:3a:
         24:9a:50:be:ae:49:b4:99:d3:2b:ff:d6:b2:6f:02:28:aa:4f:
         ea:ee:ed:0b:01:f8:a4:1f:f8:84:d9:63:f9:fa:d3:c9:4f:ea:
         53:1f:8a:71:02:2c:00:f7:19:2b:2d:d6:b7:40:67:df:a7:47:
         91:c8:50:55:db:89:32:d7:93:70:3d:8f:0c:77:8c:f4:23:fd:
         27:bf:b1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:42:16 2026 by rpki-client