Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa
File:                     7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa (raw, json)
Hash identifier:          NHFq8AZ+jXf4KRueLRBJ8evkb/RdGvNHEtwYxhol/E0=
Subject key identifier:   1B:D3:D9:AF:2D:5E:5C:F8:E5:22:B9:CF:E3:A9:6B:C8:4E:38:23:D2
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584F49758C84C9A41B74D8CF8280
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2734
IP address blocks:        2605:6c00:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:8c:84:c9:a4:1b:74:d8:cf:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f04be190-c02d-4aad-8573-0bc515cf0456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:97:82:b8:77:d0:8a:2c:48:d2:b0:48:9d:
                    1f:e7:7d:df:33:e1:1f:dc:87:82:40:f3:9c:f3:30:
                    28:5b:d0:4b:ac:d3:9b:51:e4:b7:75:d1:37:2d:c0:
                    71:92:07:6d:46:ef:e9:cd:fb:e5:a5:80:ea:02:f1:
                    6c:cd:c9:86:7c:43:54:55:e4:f1:66:77:76:57:1c:
                    79:5f:be:2c:e4:a3:be:3e:2f:88:d2:19:5b:f7:aa:
                    d5:51:6a:7e:29:2d:5c:97:4e:27:c5:7d:ed:1d:92:
                    19:28:9a:99:24:9c:b3:7e:8a:6e:78:ac:08:ac:ad:
                    19:d9:a9:91:38:1c:a1:83:de:75:41:10:56:66:c2:
                    25:85:a3:1c:fd:d4:67:0c:76:5c:6e:84:10:70:0c:
                    8b:57:f0:a4:3d:11:7c:cc:7a:c3:3b:9d:2b:4d:56:
                    75:9f:88:7a:35:68:f8:9c:01:3a:d1:a1:be:0b:58:
                    ae:8a:64:9f:f1:f3:26:08:63:a0:de:c9:33:52:f9:
                    24:d6:76:c8:51:94:a7:a0:39:62:a8:28:56:7e:4b:
                    a0:7f:96:f3:f3:6e:9b:ff:a0:4d:ef:c5:a4:1b:6a:
                    95:b6:06:d7:27:73:4d:af:50:e5:4b:cc:fc:68:5d:
                    9d:7a:de:8f:38:80:ad:12:b7:81:f1:75:38:d7:41:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D3:D9:AF:2D:5E:5C:F8:E5:22:B9:CF:E3:A9:6B:C8:4E:38:23:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7f1fa8d4-f417-30da-8705-0d5a8f99f752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:b1:59:b7:46:b3:46:f0:ab:d7:37:d1:16:36:ef:da:9d:06:
         37:0b:2b:7b:9d:f2:87:ec:73:27:d7:84:4d:ac:b6:27:8e:10:
         b5:c1:1d:c6:55:8e:bc:10:1c:41:3d:2d:80:a8:fa:54:89:e5:
         a4:eb:db:c0:4d:10:7d:37:e9:cb:8c:9d:67:86:d4:22:07:03:
         0e:ba:18:16:4f:2e:f8:e5:2f:55:e9:02:ed:b8:c6:de:e6:03:
         a9:0f:82:53:61:9d:a7:5c:91:f6:2c:13:95:97:90:f8:26:c9:
         2e:43:93:30:8b:ab:ae:75:77:17:25:de:31:32:bc:58:a1:3d:
         a2:d9:10:62:22:99:24:35:b1:6a:9f:e6:42:23:fa:59:61:d4:
         cd:11:4c:f6:16:a7:d9:84:bd:4d:45:a6:92:dc:fc:24:35:17:
         94:19:7f:70:03:39:b8:e7:d0:ab:93:af:c3:69:eb:93:53:55:
         ab:74:68:e9:49:30:e6:da:c4:b8:85:64:26:88:7b:67:3d:85:
         5b:2e:ac:04:3f:a2:e5:90:34:42:7f:d9:d2:a2:bf:cc:1b:d8:
         91:cf:15:61:f3:a8:b7:69:26:6e:cf:22:6e:92:3a:9b:90:4d:
         ce:50:d6:45:3d:f3:a3:72:14:ec:fe:7c:21:86:2c:75:9e:29:
         2d:09:80:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:05:29 2026 by rpki-client