Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7970e78d-739e-3e33-96be-ce0bf01cf600.roa
File:                     7970e78d-739e-3e33-96be-ce0bf01cf600.roa (raw, json)
Hash identifier:          kYSyULDTobprzfeeiYxz11roCsBQovfo1boBN6Y/8eU=
Subject key identifier:   E8:0F:EC:0F:6A:ED:A8:66:84:BD:F0:C3:89:8B:5C:73:F1:9F:2C:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7910D5DAE1813A9729C2D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7970e78d-739e-3e33-96be-ce0bf01cf600.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:b150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:0d:5d:ae:18:13:a9:72:9c:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9c4d3dc1-dc8a-49ec-9922-953a19486f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:02:1a:c8:6b:89:25:0a:b3:30:25:b9:a4:
                    60:42:69:b1:51:54:ad:67:eb:41:d9:63:3b:f1:e4:
                    b9:8a:eb:ca:c4:c9:35:51:55:57:c9:b6:bb:25:a9:
                    a8:d0:aa:dc:8c:21:c4:f8:df:b2:40:85:5d:f1:d4:
                    4d:ea:d3:27:a2:86:28:39:d9:9c:b9:6d:70:83:25:
                    32:d6:45:d5:09:24:36:35:39:43:61:11:c3:9d:b0:
                    2a:e2:9b:38:dd:df:bb:a3:0a:9a:e9:df:19:07:1c:
                    79:f4:32:ce:0c:54:59:6d:8c:c1:56:52:c0:dd:0f:
                    41:27:16:7b:41:0a:63:55:e2:2c:42:e4:fc:ee:64:
                    93:12:b5:f9:cb:f0:5f:b9:b2:a8:b0:96:8d:c9:40:
                    74:30:de:12:b1:e7:c4:7b:d4:ac:0d:d9:8f:8d:16:
                    fc:19:6f:9c:9a:08:38:50:d2:c4:83:d1:54:50:4a:
                    72:da:b2:97:5c:45:12:28:d5:13:77:bd:7c:d5:25:
                    3b:cc:8b:50:e4:c4:08:88:ae:84:ff:ec:2f:2a:ac:
                    be:d5:ad:5a:55:d8:63:ee:8d:11:04:3c:64:e7:58:
                    1d:f0:58:79:67:26:c9:01:e9:09:26:c8:bd:78:83:
                    fc:07:c4:ab:73:ea:48:15:bc:7e:47:8b:37:6e:29:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0F:EC:0F:6A:ED:A8:66:84:BD:F0:C3:89:8B:5C:73:F1:9F:2C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7970e78d-739e-3e33-96be-ce0bf01cf600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:8f:b9:f2:ec:8f:7a:2b:f2:12:bd:e9:0c:eb:56:79:c7:b4:
         a0:77:cd:35:f1:fd:d1:94:6a:e8:06:3e:02:29:ae:8d:d5:18:
         0a:12:39:ee:64:af:0b:7b:80:cf:54:97:51:12:06:7a:9a:31:
         d4:c0:cd:e0:91:f9:ff:03:64:fa:05:68:47:05:ef:aa:74:db:
         ca:b2:ae:7b:bf:0f:d2:a4:87:21:00:09:76:01:56:f4:04:4b:
         bc:54:71:82:c4:c6:82:eb:72:64:3c:3b:ee:8c:a6:b1:1f:21:
         80:52:f8:a8:4a:a8:ad:ae:4d:ca:c9:20:01:c1:bd:56:6a:7d:
         b0:91:c4:29:2a:d3:e7:96:fe:a4:0d:eb:58:a4:39:aa:53:8d:
         70:8d:5b:4f:d1:17:8b:1c:85:3d:bd:ad:a5:af:47:82:c3:c4:
         0b:8a:47:a2:7b:49:22:fb:7b:56:e6:0a:be:bf:98:fe:3a:b1:
         ad:07:14:da:72:09:c4:9d:7b:3c:bd:56:41:ee:14:8f:28:db:
         a8:c8:92:d2:a8:62:42:b9:de:b9:24:c9:f1:cf:9a:44:66:0d:
         5f:79:de:35:27:57:1e:92:56:d2:46:88:ff:d1:6e:bb:8a:a1:
         ac:18:50:d7:09:a7:14:0c:b3:81:76:cc:dd:75:af:88:f3:a6:
         1b:50:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:35:26 2026 by rpki-client