Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71ed75d0-700d-355c-9aef-2b122eeccd23.roa
File:                     71ed75d0-700d-355c-9aef-2b122eeccd23.roa (raw, json)
Hash identifier:          cxMsMuUNzrnxqOYFT09IuGyvuLsYm/D6vDm6KUxi7Pg=
Subject key identifier:   B2:DD:D2:0C:68:01:EB:50:0A:BC:3C:CE:B9:0B:5E:CF:7A:8A:FA:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A8BFD3C40696B5F1FC780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71ed75d0-700d-355c-9aef-2b122eeccd23.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1008:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:8b:fd:3c:40:69:6b:5f:1f:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=a31b7d1d-458f-4736-b5b7-cdf29375c8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:d0:e3:45:4a:fc:13:62:a6:5a:40:6a:f9:
                    01:51:8f:c5:5f:07:be:18:35:d3:9e:37:c1:8f:e6:
                    32:47:85:02:ea:5d:aa:94:09:71:a8:14:24:cd:79:
                    cc:63:94:14:a3:7f:5f:cc:42:4a:93:df:f5:cb:a8:
                    82:08:9b:c6:17:de:1a:c1:6f:9f:a3:f2:12:6a:7a:
                    9c:ec:1e:0b:74:b5:28:05:43:a7:57:fc:9b:b1:28:
                    13:f0:5c:07:44:aa:d7:b1:e1:18:ac:df:0a:6b:70:
                    a0:8c:ad:72:e0:70:c1:b9:90:bc:64:21:73:49:8e:
                    34:77:69:f0:69:84:32:28:46:22:bb:ec:3f:db:8d:
                    49:40:be:32:ea:e6:72:6f:b2:94:27:f3:fd:81:db:
                    ab:56:f4:0c:5f:61:27:67:f1:ff:13:33:a0:88:8c:
                    fa:53:c0:b2:1b:b4:23:c7:cc:51:ad:bb:44:aa:c1:
                    99:84:a3:18:9e:23:ba:09:fb:b2:fb:9c:51:b4:51:
                    97:fa:28:e9:bb:0c:f7:f5:88:2c:00:a7:ff:61:7b:
                    f4:36:16:69:20:78:b4:c6:a5:a9:c3:74:6b:2c:24:
                    86:c6:2b:5c:ed:f5:65:2f:c0:d0:db:4b:08:51:8d:
                    71:59:52:b3:12:98:90:e3:3e:36:e3:e0:ec:3a:9c:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DD:D2:0C:68:01:EB:50:0A:BC:3C:CE:B9:0B:5E:CF:7A:8A:FA:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71ed75d0-700d-355c-9aef-2b122eeccd23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:73:2f:26:36:37:db:4c:6b:55:85:c9:c6:45:33:71:09:
         c0:cf:08:7e:93:e3:a2:ce:65:95:65:0a:6b:b8:4d:f5:da:d4:
         af:c1:92:4c:47:8b:96:d0:74:cd:05:95:c0:0e:0f:66:eb:19:
         12:30:43:5f:ed:19:71:4f:a0:70:80:86:ec:60:07:3d:8e:20:
         81:7b:94:d3:b9:97:4f:8e:67:dc:6f:9c:45:e9:f2:b1:d3:55:
         fb:11:5e:df:9d:06:1c:ce:06:5b:5a:77:cf:df:d2:7c:93:a7:
         3b:93:33:43:b1:97:4c:80:4d:df:f1:ca:23:fd:61:d8:b9:01:
         0e:e0:4e:b1:fe:22:91:87:12:e7:53:e3:fc:7a:b6:5e:1a:71:
         6d:b9:72:11:11:fa:1a:15:72:2a:d5:52:d1:52:f7:46:45:e2:
         92:97:d4:72:db:6e:83:4b:27:8f:23:cb:20:bc:f7:5f:1d:03:
         a5:ed:5a:62:d7:ea:66:09:ff:d1:7a:74:da:87:f0:db:e3:e0:
         f0:b4:c9:e2:08:1f:25:c7:84:e9:db:52:b3:8f:16:e9:92:b4:
         de:68:3d:92:7b:3f:8e:22:c9:2a:43:a7:5a:f9:3f:8f:16:80:
         dc:28:42:59:29:c9:8c:ca:93:11:b0:89:11:5a:4a:ed:1a:2a:
         82:d3:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:20:30 2026 by rpki-client