Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa
File:                     fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa (raw, json)
Hash identifier:          hgXLnxoPnsiKtD7KgMaFYItJ4EGVdPvDKUNdZ7qS9C8=
Subject key identifier:   8C:DC:ED:27:0F:20:C1:B4:44:A5:0A:0E:A2:94:87:A6:10:94:6F:85
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD503CE8CD4D53B3935C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1003:a400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:50:3c:e8:cd:4d:53:b3:93:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=543bdace-1cc8-4650-a81f-acf282482089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:55:e5:ef:24:24:bd:62:64:08:0a:ed:6d:5b:
                    af:b9:ec:3e:d8:c1:1b:53:7f:a6:4f:c1:a6:6b:c8:
                    b3:ce:e6:cb:0d:cb:f4:0e:b4:21:fa:2b:e1:79:90:
                    39:63:f5:a7:2b:2a:6a:4f:46:d6:39:74:8d:a5:f9:
                    04:4c:24:a9:24:77:ad:f1:e3:21:25:9b:72:ee:e4:
                    d2:38:72:81:12:8a:d0:c6:d2:6a:0c:27:db:67:12:
                    59:4b:76:14:ed:ab:59:fd:4b:cb:9d:da:57:3a:44:
                    e6:e4:27:a6:0e:53:d4:50:41:fa:71:9b:5d:d6:81:
                    fd:5d:e3:d0:ba:d6:ff:39:05:8d:0b:fd:1e:80:e1:
                    25:05:6e:3e:7b:5b:11:56:07:91:6a:20:cb:e5:0a:
                    d6:99:1b:19:d5:ca:ce:a6:00:d8:73:72:9d:2c:43:
                    a7:b5:17:04:a0:68:f9:a1:a8:c7:3f:8a:75:ec:09:
                    92:0b:6d:0a:20:7e:af:dc:fc:71:ac:65:98:d3:f9:
                    15:af:77:7f:3a:f2:5b:37:42:5d:be:96:bf:1e:48:
                    6d:4b:53:ab:e4:38:c1:51:b6:40:7c:3a:26:a0:ed:
                    6a:d1:24:fb:fa:4c:f3:97:03:e8:59:d9:93:84:2c:
                    98:1f:75:45:9f:b2:14:79:c8:8b:1d:3a:ca:6c:7f:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DC:ED:27:0F:20:C1:B4:44:A5:0A:0E:A2:94:87:A6:10:94:6F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:72:9d:1c:4d:62:36:86:2a:d9:1d:44:07:73:2b:6f:45:45:
         67:05:3e:95:5a:81:75:e6:1b:5f:a6:1f:4c:d3:1d:de:51:c5:
         2a:54:6a:59:a5:54:ab:29:f1:d1:71:36:32:30:e6:6c:4d:1e:
         32:f2:c4:ba:06:95:dd:ed:dd:57:3d:15:83:fd:c2:0e:5c:c4:
         1c:0f:b3:e1:31:49:b0:6e:0e:f2:01:03:44:0a:a1:ac:eb:96:
         b5:09:b5:c5:f1:8b:bc:07:17:f4:d6:28:5e:94:4c:40:3c:aa:
         2b:99:de:be:4f:e3:3d:28:0d:38:59:06:c8:cc:bd:d0:13:6a:
         27:e6:a5:f7:04:72:6f:8b:db:17:42:8e:26:9d:5b:f4:9e:88:
         52:bc:68:90:6a:e2:25:ed:e3:d3:10:f6:78:a4:39:bb:dd:43:
         e6:be:5d:99:76:86:d1:ca:56:9b:2a:8c:19:7f:a2:1b:f9:3c:
         36:cf:b9:24:28:10:3e:61:85:cd:6c:74:c4:2c:26:86:a8:55:
         8f:d6:93:01:ce:77:d7:48:82:f9:91:d2:76:e7:38:16:50:df:
         bd:d2:3f:47:43:4a:48:93:86:11:3b:e0:83:1b:ad:47:90:80:
         dd:3f:30:1a:68:91:7b:b7:3e:cb:37:a9:2e:dd:93:12:87:54:
         a1:1b:0e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:46:47 2026 by rpki-client