Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa
File:                     ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa (raw, json)
Hash identifier:          R2V6+VhcD0lQ89TD6lW7lp24xc13hSVDvM5waOHOy4A=
Subject key identifier:   0C:C7:67:45:52:BA:0A:F5:BA:C0:85:4C:5E:16:81:59:3F:59:FD:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD7D5E2A98AC6B3D9EC600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1004:b190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:7d:5e:2a:98:ac:6b:3d:9e:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=8064f103-d289-4dc3-aab0-d1180f7f9ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:5f:b2:30:2e:b7:1c:eb:65:bb:a0:82:0b:
                    f4:21:89:5b:da:8e:a7:73:c9:df:5d:b5:2b:bd:6f:
                    da:08:26:3f:2a:62:47:b0:82:2a:de:03:2d:12:43:
                    8d:e9:03:c5:7a:91:62:0b:68:1e:1d:01:b5:92:22:
                    93:00:d8:35:58:06:5d:5b:d6:4b:6f:e4:1d:cd:60:
                    36:c2:4a:c2:f0:63:6d:b5:71:b8:1b:c3:60:f5:b3:
                    14:64:29:81:9f:6f:a7:55:82:75:8d:72:10:45:cb:
                    07:bd:3e:c3:6e:7c:91:21:b5:6f:77:bc:c5:ec:74:
                    ba:08:bf:f8:de:5a:85:62:4e:3c:4d:ac:6d:4e:3e:
                    cf:d5:22:a3:64:a8:6c:34:5d:45:6c:19:24:36:78:
                    46:dc:53:86:53:05:9d:f5:a6:07:32:37:0a:79:9d:
                    59:84:6f:f5:c9:c8:4a:c9:d1:c4:fc:d0:03:21:14:
                    01:6b:22:a9:c6:4e:42:4d:ac:df:06:d4:d2:7b:17:
                    0d:25:33:5b:82:4d:d6:67:43:a6:35:5a:5f:1e:a5:
                    d7:e4:29:b9:60:0a:e8:8f:1d:fc:11:a4:a1:12:87:
                    12:5a:4f:01:69:54:1b:35:9e:5a:6f:83:0d:6c:85:
                    55:9f:3e:eb:47:f2:2d:9d:d2:4c:a6:ab:4a:2b:4e:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C7:67:45:52:BA:0A:F5:BA:C0:85:4C:5E:16:81:59:3F:59:FD:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee2d8a92-14a5-3b88-944d-12e6cf6a6991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:94:c3:9a:38:91:29:36:77:2f:fc:5a:73:1a:a8:ed:6a:03:
         d8:9c:91:20:5f:6e:e8:0f:f4:f5:22:ee:2a:3f:20:60:b4:9e:
         5f:b7:ad:bd:fb:45:98:22:ee:4b:5b:a2:58:3b:08:5b:2d:55:
         90:91:95:bf:05:c4:8c:a1:7f:3a:a8:22:72:50:76:87:86:c3:
         56:65:88:03:ee:59:d6:a8:35:5f:18:07:dc:98:a0:27:54:03:
         93:93:77:df:ba:13:20:81:a6:20:3e:6d:44:2b:f1:99:a2:6f:
         b2:7f:bc:d0:8a:41:1b:f4:64:4a:c8:d1:e2:d7:5f:ec:9c:07:
         00:3e:fe:75:84:e5:75:b6:b7:4c:5b:c3:ad:07:e9:49:e8:6d:
         61:26:5a:29:9b:9f:d9:b5:9c:f5:db:09:3b:91:7a:13:32:06:
         d5:9d:5e:2f:28:7e:7a:d6:a1:dc:fe:a3:f0:e8:c0:75:89:52:
         25:c1:fc:a7:69:ac:5a:35:af:07:55:f2:08:98:b3:e3:71:f3:
         e4:45:f0:dd:32:7b:28:3b:e3:2f:0c:19:0f:ff:51:24:f5:9e:
         32:a5:18:0c:61:2b:1a:ec:b0:49:34:d4:ed:7f:54:16:d7:f3:
         23:4b:88:34:8a:e5:b3:41:08:9d:30:d8:8c:f9:ad:5b:66:e9:
         62:73:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:25:18 2026 by rpki-client