Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9b94d22-2982-328d-a094-edd6422959b3.roa
File:                     d9b94d22-2982-328d-a094-edd6422959b3.roa (raw, json)
Hash identifier:          5xNiEiGL7satbS74pP6IfekINPQf8exCm5y07kkdfTM=
Subject key identifier:   8B:31:F2:B5:77:41:80:F1:DF:46:9D:38:30:A5:C6:28:CD:42:5F:BB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F374D2394EEFF1F9C43890180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9b94d22-2982-328d-a094-edd6422959b3.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1010:b378::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:23:94:ee:ff:1f:9c:43:89:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=e3a240af-28df-4b10-a054-38d06b14c850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:95:62:f4:26:58:9e:55:a7:40:da:06:69:
                    61:6c:ec:b8:bb:72:99:b4:43:94:cd:b2:8d:17:19:
                    63:02:60:37:fd:f1:9b:36:74:42:2c:bf:5d:ff:8e:
                    86:ce:5b:27:51:a7:ba:1b:4f:02:95:2f:73:09:f7:
                    e3:d6:15:14:29:eb:c3:f2:c7:b0:f0:c4:13:3f:45:
                    dd:7c:d9:f7:0f:3f:2e:99:12:e3:4d:5a:39:2d:cf:
                    24:5c:de:44:01:88:5c:86:17:95:72:59:b0:1b:26:
                    a5:9e:2f:2a:7e:88:56:74:0e:59:d3:92:bb:59:4c:
                    f6:1d:97:df:66:11:12:88:09:30:f9:7a:15:fe:3d:
                    66:c9:67:bf:40:0c:92:a9:87:28:0d:d1:4e:32:bb:
                    d5:97:8c:f4:86:82:b6:dc:21:32:e5:40:eb:74:f5:
                    f1:63:30:df:9a:bc:33:e4:9d:f6:79:5d:7a:29:98:
                    59:0a:56:10:86:02:27:75:45:28:cc:70:d9:d3:9f:
                    32:44:7a:26:10:4b:06:af:06:f8:48:af:73:01:f9:
                    dc:0b:66:67:fc:8e:9f:af:25:96:77:fd:57:4d:79:
                    54:39:5d:55:fb:3c:eb:9c:88:3c:ac:a5:6c:ff:c0:
                    1a:4d:fe:e9:2e:1c:78:61:0a:ef:8e:86:d5:ed:a1:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:F2:B5:77:41:80:F1:DF:46:9D:38:30:A5:C6:28:CD:42:5F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9b94d22-2982-328d-a094-edd6422959b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b378::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:80:2c:93:95:40:a7:96:23:ab:97:a0:8d:e0:f9:5d:a5:
         d6:d5:c2:01:e6:bc:c0:bb:1b:29:73:6a:07:06:2d:bb:24:ce:
         37:0d:7b:db:c0:8b:91:91:7d:8a:9d:dd:c5:01:dd:d8:c5:a8:
         a2:49:75:25:9a:8a:92:5e:7a:57:b7:8e:fc:43:43:62:91:e5:
         a7:31:9e:55:44:df:bb:36:67:39:24:a1:11:b3:8b:e6:8b:22:
         d4:c3:3a:0d:ca:17:6f:78:a3:ee:11:b3:6f:18:c3:da:97:02:
         bf:5d:4b:23:7d:36:3b:bc:c4:bd:89:cd:25:ac:fd:75:3b:51:
         f0:66:aa:bb:e1:ec:09:91:8e:85:b3:66:5a:de:5f:d6:10:5f:
         7d:ed:8f:03:36:b4:e2:50:b6:97:37:dd:8d:e3:b7:3b:32:f2:
         d9:cf:52:ec:bd:6a:10:5c:f2:9b:9a:b6:39:e1:11:0f:6e:fa:
         10:7a:dc:8f:c8:40:06:32:85:32:3b:2a:fe:8f:85:eb:f7:f2:
         e1:0d:d7:95:6f:b9:22:d5:f3:c3:cb:68:d6:80:b6:4d:44:b2:
         77:87:65:a5:ad:0b:b2:39:c0:34:19:fc:44:79:b5:1b:a9:cd:
         57:e7:ab:c2:be:d6:c9:bd:ec:47:6a:e6:d0:d9:ac:75:86:26:
         8c:36:80:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:48:20 2026 by rpki-client