Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ea32f2-c8aa-3868-a14a-f42485205f25.roa
File:                     66ea32f2-c8aa-3868-a14a-f42485205f25.roa (raw, json)
Hash identifier:          kz55EmfyV3Xyazbxe4ZntTqpGQz39lABiPRL3uP3ctA=
Subject key identifier:   48:C1:47:EE:4E:2D:5B:CA:69:B8:56:7F:B8:E0:E7:D7:4F:30:4A:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD792C43550D6B166C8680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ea32f2-c8aa-3868-a14a-f42485205f25.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1001:d030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:79:2c:43:55:0d:6b:16:6c:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=1bc36cab-6caf-454b-991e-9ad40c7d151f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3c:3e:e5:53:d5:3d:76:d9:20:e2:26:15:bd:
                    87:7a:30:25:e1:02:9f:f6:be:ba:71:2b:de:4e:0b:
                    14:c7:a2:94:47:05:c7:d0:c6:a9:ad:bf:20:18:09:
                    56:11:ec:5f:37:e6:72:27:f6:93:4e:e5:f8:84:08:
                    ba:a2:fd:84:00:d8:d8:c0:e3:b8:67:f1:34:df:a1:
                    ab:63:5e:42:01:c0:17:67:f0:18:b1:20:d0:80:6f:
                    8a:8d:09:03:7f:f2:29:83:0b:f4:03:a8:8c:5c:7d:
                    54:86:5e:d4:ea:cf:eb:3d:47:52:0c:c2:f8:a8:49:
                    7d:2e:8f:bf:75:2c:cf:29:3a:2d:0f:77:8d:11:33:
                    2c:0e:4a:6e:f1:d3:50:2d:6a:c3:fe:16:57:27:37:
                    1e:2d:b9:d3:cf:52:bb:96:0b:47:21:4f:3d:69:e9:
                    d7:6f:17:a6:f1:4c:19:3b:2c:d8:98:7c:de:36:de:
                    22:54:be:bb:48:6c:c0:df:57:fc:e0:25:43:0e:1f:
                    26:ee:87:b4:e6:67:be:95:cf:b2:a4:e4:cb:58:1a:
                    d4:e4:51:bf:24:cf:d6:6a:8e:0b:75:37:bf:ca:95:
                    2d:ab:a2:85:62:7b:3b:eb:95:a8:d5:6d:74:bb:6f:
                    ef:58:83:51:d8:3d:3f:07:0c:bf:6f:57:38:66:cd:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C1:47:EE:4E:2D:5B:CA:69:B8:56:7F:B8:E0:E7:D7:4F:30:4A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ea32f2-c8aa-3868-a14a-f42485205f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:d030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:28:0c:d6:27:7c:3f:c9:c8:64:f9:a2:a3:85:58:12:21:6e:
         00:fe:a6:0b:4e:34:2f:e2:1f:00:d2:db:5b:43:88:d1:90:29:
         22:47:bb:87:0f:4e:10:f1:8a:69:5d:be:9c:c7:fe:e6:96:ca:
         aa:2d:d1:d5:75:8f:95:b6:1d:b0:e5:f7:8f:5c:66:a3:0a:08:
         1c:e1:2a:18:a6:46:1a:da:f9:f1:b6:75:e6:02:65:7b:c0:f7:
         ef:d0:95:71:50:52:da:dc:21:53:70:fe:1c:86:47:aa:08:f5:
         58:41:68:7f:38:a9:4d:60:47:d2:36:88:f6:ca:6d:d3:85:69:
         f9:01:03:4b:d4:7a:61:ee:a9:2e:7c:59:58:2a:38:8d:d5:3c:
         0a:22:f3:f5:2a:c3:bb:7e:8c:ff:44:dd:46:8e:d4:e3:b5:73:
         56:69:d6:73:52:dd:00:d1:cd:2f:bb:fe:1c:7c:94:05:0d:b0:
         4a:dc:ca:ae:56:c6:f3:ea:15:91:86:67:21:f6:ec:45:cc:8d:
         09:af:e1:33:51:75:7e:41:81:ad:12:2f:cd:c9:82:dd:8f:8b:
         a7:5c:97:d4:36:a3:8e:fa:1b:4a:9a:88:41:85:c5:4f:0e:a1:
         db:70:ae:cb:79:58:83:f7:b9:0a:ff:3d:a8:75:49:34:44:67:
         76:06:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:14:16 2026 by rpki-client