Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/edfd1d9d-3d7c-37ae-afce-07b5f0fdb324.roa
File:                     edfd1d9d-3d7c-37ae-afce-07b5f0fdb324.roa (raw, json)
Hash identifier:          1/5Q53311873RosAcIJwtnIu10GQgHFjI7yQiFbSYRE=
Subject key identifier:   40:07:8C:66:53:79:14:FF:9E:A2:D5:E8:26:3A:EE:5C:9F:8B:68:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87D5AE5EFB839384D4D600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/edfd1d9d-3d7c-37ae-afce-07b5f0fdb324.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1015:a010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:d5:ae:5e:fb:83:93:84:d4:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=7b681290-dd24-4b7c-967f-610d75b02edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:b8:54:1b:da:c8:00:5a:c2:45:47:6e:50:
                    2e:56:8a:43:9f:55:6f:11:13:83:88:1f:42:6d:6f:
                    d4:9e:76:27:d6:4d:5f:26:37:a4:9e:05:67:ee:77:
                    b1:68:17:45:e2:4b:b3:63:6e:55:f0:bf:b8:24:fd:
                    b8:03:a6:2b:42:93:7d:ac:92:98:a3:95:3b:20:7a:
                    f5:b2:c3:b3:0e:cf:e2:b7:de:44:13:b0:ed:2d:18:
                    f0:5e:b1:0c:f5:f7:08:52:ac:55:65:92:13:af:2b:
                    52:31:ab:44:b4:53:82:57:eb:05:50:13:4d:1a:31:
                    ef:b2:f6:d2:69:30:27:f2:77:85:15:2e:44:a6:ea:
                    58:1d:f9:fa:91:55:05:05:33:2a:8c:78:6b:66:f6:
                    76:1f:90:44:44:6a:cb:ec:2e:53:7b:a3:42:05:22:
                    ba:90:d9:66:b5:0c:79:5a:3f:65:ae:8c:c8:df:cc:
                    71:ba:21:86:56:54:12:49:32:3e:48:4a:2e:d7:0a:
                    db:e2:1f:ab:68:1b:fe:53:ae:b6:ee:e3:b6:4f:cc:
                    2e:f6:cf:c6:c6:80:f9:86:9b:12:3f:0a:c7:23:ec:
                    ab:e6:a0:6a:12:44:27:64:cd:1e:ee:7d:50:51:5d:
                    95:b0:2c:1f:f4:31:6a:9e:e1:46:45:8b:c9:27:4a:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:07:8C:66:53:79:14:FF:9E:A2:D5:E8:26:3A:EE:5C:9F:8B:68:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/edfd1d9d-3d7c-37ae-afce-07b5f0fdb324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:e5:99:ef:1e:13:79:27:c8:2e:04:fc:a7:63:b9:86:7a:98:
         37:97:7c:cf:11:92:26:86:e9:30:95:21:9c:97:a6:92:e1:64:
         4d:97:db:b9:34:ef:c0:d9:23:ac:b1:e3:73:1d:6e:1e:73:7d:
         99:45:0c:d6:60:cd:16:db:40:71:0c:ec:1f:93:cd:3f:54:16:
         b4:af:75:4e:44:26:a8:0e:a4:08:11:4a:96:86:ff:5a:42:16:
         e4:92:65:1a:83:3a:97:f0:70:1a:7e:2a:0f:8f:de:b6:0b:42:
         c5:f9:45:11:03:ab:c6:ef:5d:3a:64:3b:c9:71:d2:a1:69:75:
         da:2d:0c:5c:0c:33:40:f1:93:44:0f:cc:d7:7e:b4:2f:1e:81:
         aa:05:9b:01:7e:60:e9:3b:50:c8:66:98:eb:cb:c3:af:bc:06:
         f9:b9:fe:5a:3d:7b:c5:e4:95:3b:77:27:6e:bf:b9:43:cd:46:
         56:38:4c:83:a3:11:7d:19:3f:fc:f4:9b:1e:9a:1b:95:77:bb:
         ca:14:94:30:88:b0:43:f2:dc:78:16:ec:98:d5:95:5a:1e:7f:
         37:2f:55:c4:68:2e:8d:92:48:1f:7f:b8:41:13:1e:32:78:86:
         d7:48:fa:c2:d5:ce:82:8a:83:b0:3f:8f:e1:07:87:1a:87:7b:
         eb:f3:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:42:15 2026 by rpki-client