Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0efb1f5-1ec0-38e2-84d1-db1315c7a33e.roa
File:                     d0efb1f5-1ec0-38e2-84d1-db1315c7a33e.roa (raw, json)
Hash identifier:          S7KuquNgNhlM4x1vSINeu/3wLdL9n+2CZcEQzZttUdw=
Subject key identifier:   5C:D2:2B:C0:34:06:0A:78:A8:54:4D:55:39:FD:BF:5A:0A:B7:0E:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD56F8C22B549AC1127D10
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0efb1f5-1ec0-38e2-84d1-db1315c7a33e.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1007:b070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:56:f8:c2:2b:54:9a:c1:12:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=7b6167c0-3f5c-4b7c-835e-ce32c9ba36fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:3c:76:58:a5:0e:37:67:5b:04:ba:b1:da:
                    94:ce:d8:a7:6a:a5:d8:73:87:36:06:c6:7b:a6:67:
                    2b:0c:10:4c:94:03:36:27:e4:5e:5a:ac:f1:d1:74:
                    0f:a8:fa:13:21:8a:8c:a3:ce:43:7b:38:d9:6b:01:
                    e0:d1:f3:dc:02:d5:1f:f0:5e:d4:7e:fd:60:c0:32:
                    14:5b:40:f0:9e:8d:61:e2:ee:cf:dd:2d:51:a3:34:
                    73:7b:79:97:98:b4:8c:dd:ec:7a:06:eb:89:46:50:
                    8b:1d:e0:f3:d2:6d:f4:98:b8:7e:d2:a4:77:e6:32:
                    dd:f5:95:c6:22:57:d1:2c:76:5e:74:b0:b8:c6:74:
                    d9:a9:1d:37:e5:c5:62:93:d5:27:10:bd:17:da:da:
                    53:17:1f:13:3a:a7:2d:66:cc:0c:db:b7:09:c6:35:
                    b6:f5:d1:ff:04:5f:cc:1b:7d:39:a7:35:57:bd:5d:
                    8a:af:88:7e:21:34:c1:2f:90:00:d6:dd:d0:14:45:
                    6a:37:ff:bd:bb:cb:72:ff:78:48:b6:90:43:be:59:
                    f8:f1:25:82:96:56:bf:21:6a:67:9e:eb:98:3d:9b:
                    29:58:bb:b1:d7:e0:82:e3:05:b0:df:63:fe:fd:92:
                    d6:b3:2e:d3:4a:80:76:bd:5f:79:87:23:0b:64:d6:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D2:2B:C0:34:06:0A:78:A8:54:4D:55:39:FD:BF:5A:0A:B7:0E:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0efb1f5-1ec0-38e2-84d1-db1315c7a33e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8c:d6:aa:47:dd:41:64:2d:0a:65:6b:cf:6b:2e:65:1c:c8:
         a0:c1:fb:d8:8e:97:a2:6d:a8:4d:79:ac:80:2f:68:7b:32:23:
         2d:8d:b1:53:e6:7c:e1:2b:df:8f:aa:6c:04:94:e0:40:4e:61:
         ea:db:49:1f:f6:e9:d7:6a:92:9a:2e:fc:a1:83:54:c9:4e:ad:
         8c:bb:ab:b6:d7:14:eb:9a:65:d7:44:07:1b:ab:5d:f0:d6:6b:
         8d:8a:b8:f2:2c:fe:ed:40:f5:53:16:19:0c:ca:de:57:d7:22:
         62:4e:7e:84:60:bc:81:86:ac:8c:bf:2e:9d:d3:81:a3:16:15:
         32:c6:e8:96:2c:41:20:85:8f:bf:6f:55:76:82:1a:49:34:e7:
         57:bd:3e:8c:17:a6:ef:64:4e:de:09:5b:df:ea:f6:e9:fb:f4:
         1d:16:77:b8:c8:44:d1:53:81:51:df:84:3f:00:db:7c:59:28:
         f0:87:59:cf:63:84:53:7e:c5:66:4c:31:dc:99:e5:e0:ea:8a:
         51:ec:32:39:b6:b5:41:7c:15:64:9b:51:66:79:fb:b3:64:ba:
         39:02:24:22:ae:7d:40:ca:9d:c9:83:4a:9d:73:31:a3:06:37:
         4c:ac:3c:2a:ca:9c:79:56:68:8a:23:62:da:e7:54:05:fd:30:
         71:79:2e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:20:29 2026 by rpki-client