Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c1d6b5c-8501-39b3-bcc9-0e744b5d25cf.roa
File:                     1c1d6b5c-8501-39b3-bcc9-0e744b5d25cf.roa (raw, json)
Hash identifier:          NIM1Q4kv8tgSIlNQhbVuzJ9tbxun2xZDVYlwC1auoKc=
Subject key identifier:   0F:9F:AD:80:08:92:C9:BF:42:B5:EB:80:17:65:37:24:17:61:A7:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49865BC7D05D62B9E67C1E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c1d6b5c-8501-39b3-bcc9-0e744b5d25cf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:b020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:5b:c7:d0:5d:62:b9:e6:7c:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=75f8a5de-22f6-4910-b71d-99b47ff95712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:38:99:74:d7:c9:e3:2d:74:6c:e2:83:a0:
                    30:5b:e5:d8:5a:e9:e2:5e:19:5e:bf:a2:e8:38:00:
                    2c:d9:d0:6c:31:66:42:31:0b:4c:de:7c:b8:fd:8c:
                    d0:40:95:a1:02:3c:4b:44:29:35:d6:3d:be:e4:00:
                    8d:68:4c:8c:9f:5a:dd:00:10:34:04:89:9e:54:6a:
                    f8:82:80:26:c2:36:eb:02:60:1c:0f:0a:50:34:ff:
                    14:35:bf:1f:79:2b:49:46:8b:09:d6:a6:0d:4e:49:
                    59:65:01:49:b4:ba:14:8a:4a:da:16:57:93:0f:89:
                    49:f6:d3:75:12:87:28:9b:72:5b:f8:b3:bc:ed:fe:
                    f6:0d:fa:53:04:9e:67:bb:cb:72:d6:46:cd:a7:2c:
                    16:cd:72:43:04:a3:c2:99:cf:f4:0a:d8:c6:0f:6d:
                    b3:e8:12:55:dc:b2:7f:dc:4e:97:17:31:a2:ec:c8:
                    2e:06:db:6c:4a:21:da:d8:a7:cd:56:f8:cf:1a:5f:
                    4e:0a:8a:8e:4a:50:86:cf:5b:a6:25:e0:d5:d9:98:
                    33:5b:55:fa:6d:15:60:62:ea:59:6b:c5:ad:e5:f4:
                    8c:da:6a:61:12:d3:32:93:43:41:ce:45:6f:c8:33:
                    58:70:31:b7:c6:de:ac:22:2b:d7:24:58:03:7d:75:
                    c6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:AD:80:08:92:C9:BF:42:B5:EB:80:17:65:37:24:17:61:A7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c1d6b5c-8501-39b3-bcc9-0e744b5d25cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:59:48:4b:fa:df:8d:f4:6c:99:8f:fe:59:c1:6f:3c:21:2c:
         72:b3:78:aa:09:e9:01:18:58:ed:b4:d9:88:ba:bc:db:e2:0f:
         68:b8:1a:07:3d:54:07:7a:e2:68:1a:82:29:8d:ad:36:b5:5e:
         ea:7c:0b:e2:4b:70:a4:a9:ef:65:58:66:ec:af:e1:11:6b:cb:
         4c:fc:d2:09:34:13:5a:2e:12:e0:07:1b:ff:c0:c3:41:ed:34:
         ca:5b:5b:ea:83:7a:7d:dc:ed:a7:57:6a:dc:1d:74:e3:c6:f1:
         d1:b7:a2:8c:e9:5f:e0:ed:2e:dd:b2:d4:d8:d7:1f:f8:88:a8:
         1d:41:a2:3b:09:ad:33:f8:3e:61:28:ec:2f:a1:ad:f3:09:35:
         2a:e7:18:fd:fb:12:e1:db:a8:3d:34:48:0a:f7:31:f2:26:4b:
         7e:8c:f3:5d:2c:0d:6e:01:3b:d9:f9:1f:86:90:27:62:8f:fd:
         4f:d6:84:66:cb:cf:09:e4:69:2e:af:b9:2f:71:85:e9:2a:07:
         07:f0:21:8a:5e:67:4b:ba:8f:fc:0b:73:57:51:08:76:aa:7c:
         80:de:cb:8b:7a:85:29:2b:d2:63:cd:23:9c:f5:a3:98:1c:67:
         84:e2:75:8e:36:01:ad:a0:31:82:1d:ce:13:04:14:3b:1a:76:
         68:a4:e8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:14:59 2026 by rpki-client