Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f5c453a-a30b-3c2e-b03c-a4dc2795425a.roa
File:                     8f5c453a-a30b-3c2e-b03c-a4dc2795425a.roa (raw, json)
Hash identifier:          aOtIhe5HKlp47Yvb6u+lj6doJYQuwCNmNCPjDtjBD3g=
Subject key identifier:   D9:CC:32:CD:BF:D9:5C:33:0E:70:52:00:0A:74:3F:CC:67:2F:D5:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79A182CEFBE510A6FC9B680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f5c453a-a30b-3c2e-b03c-a4dc2795425a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100a:a118::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:18:2c:ef:be:51:0a:6f:c9:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b1360284-e73e-46ce-bb81-2bee8a960b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:fe:3a:83:4b:e2:49:33:a6:d9:17:05:a0:
                    34:e5:bc:10:7e:ef:01:e8:6f:b4:ed:28:bf:9e:70:
                    d8:0c:3e:2c:4c:24:27:74:00:17:52:52:24:0c:3c:
                    f4:de:29:93:12:7f:46:97:24:d7:3d:91:8a:68:98:
                    d3:48:ce:7c:31:9a:19:ea:ed:74:f0:0b:33:77:31:
                    b7:68:84:8f:05:aa:fa:5e:d5:70:7d:d8:7f:0e:26:
                    eb:1e:19:d0:b6:7a:60:13:96:4a:d9:83:b0:1b:a7:
                    5a:28:44:74:40:e4:6e:00:ca:db:ac:c0:68:55:1b:
                    03:6a:5f:ec:7c:7f:73:a9:41:75:ed:88:5f:9a:93:
                    ec:8c:7c:d6:ac:ef:28:7d:7c:60:df:29:ed:b6:57:
                    9d:cb:ed:e7:05:30:46:62:30:1f:09:20:2a:34:7b:
                    d3:ca:ac:fc:9f:85:7d:b3:8f:9d:ee:9d:a6:c0:b9:
                    a4:6d:78:e4:82:da:7e:47:d4:f6:64:04:53:11:2a:
                    54:69:f2:c9:0e:fe:78:a1:69:4f:27:b1:b2:51:cc:
                    56:82:6d:e8:14:ed:d4:a7:12:36:b6:03:a6:4d:bf:
                    5a:81:d8:54:d9:87:72:c2:98:84:b1:82:f3:ea:03:
                    31:d3:3c:4c:5a:ad:89:7a:ea:fa:aa:4b:9b:0a:7a:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CC:32:CD:BF:D9:5C:33:0E:70:52:00:0A:74:3F:CC:67:2F:D5:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f5c453a-a30b-3c2e-b03c-a4dc2795425a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:a118::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:10:53:bf:df:a3:c0:5b:a7:5f:0e:92:e1:da:f1:82:cb:
         46:7f:c9:92:f1:ae:3b:85:58:f3:91:75:47:4d:92:5c:5f:8a:
         99:95:72:e0:43:ae:fd:ee:83:c8:11:4b:61:29:ff:b8:de:98:
         cc:b3:49:75:15:6f:fe:ad:72:61:9e:b1:de:3a:dd:c5:5e:81:
         d6:05:bc:44:d1:d0:53:32:6c:bf:2d:3d:d5:5e:c9:9b:86:1c:
         e4:c8:6e:01:84:c7:5a:66:1f:84:ec:02:69:fa:8b:a9:10:98:
         9d:7d:8a:b4:bc:d6:d3:e0:be:b6:5a:ce:b2:85:5b:d0:f7:a4:
         08:ab:31:eb:eb:82:d0:44:52:d0:d7:21:77:11:70:f2:1d:94:
         74:11:c2:87:cb:fc:bc:6c:01:e9:c6:17:ef:1d:13:9c:d1:c9:
         60:30:47:58:a8:7c:9d:22:58:b6:82:81:7e:f7:4e:75:06:d7:
         43:b8:b8:f8:8a:5e:7d:ac:26:e5:fb:57:6f:32:c4:0d:a5:71:
         c5:d1:3f:55:24:34:31:f6:26:3d:4f:8b:04:f7:ea:e9:13:f5:
         f0:f8:ee:aa:a1:2a:76:1b:03:ea:03:56:ed:45:5b:2d:05:99:
         8d:c4:b3:6d:0e:b1:1e:27:f6:07:9c:c7:49:f1:7e:8e:da:9d:
         c3:28:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:34:58 2026 by rpki-client