Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2650e404-c694-39ab-b9b2-28198fd950b0.roa
File:                     2650e404-c694-39ab-b9b2-28198fd950b0.roa (raw, json)
Hash identifier:          WOAW925iE0GsZbmFIdUNGTSrjnnga5rUCVyCZEpB0jU=
Subject key identifier:   41:A6:D6:5A:54:CC:4A:E2:8D:F0:9A:79:A4:8A:A0:4D:2B:FC:45:2C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F2F38F88C524CC68CDD40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2650e404-c694-39ab-b9b2-28198fd950b0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100e:bf10::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:2f:38:f8:8c:52:4c:c6:8c:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8bafcc39-c890-44c9-abd7-746f2f294185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:0e:0a:91:3d:e3:94:22:78:c9:82:93:3d:
                    7a:eb:10:1b:1e:70:3d:67:ac:aa:04:c1:dd:6b:96:
                    bc:00:7a:dc:0d:bb:17:f7:c4:88:a5:ef:95:98:ea:
                    43:17:9c:ac:0c:c4:9f:82:78:01:27:fc:86:7f:db:
                    53:03:e7:d4:89:e7:3e:24:68:5a:06:e2:a8:65:ee:
                    a0:f7:99:a9:db:73:45:de:72:70:db:20:62:2a:ae:
                    7f:b6:02:c6:91:03:17:1b:bc:3f:bf:23:de:92:d5:
                    a9:16:16:04:84:98:df:5e:40:33:2d:0d:66:f7:64:
                    69:96:d0:00:00:23:ee:3d:ba:cd:cd:19:fa:5d:24:
                    de:dc:86:ec:81:7f:0a:36:58:7e:a0:91:8f:ec:2f:
                    bb:0d:99:cc:25:bc:c5:63:dc:1a:2b:11:ab:8c:8a:
                    a2:f6:f8:77:7e:fb:56:bc:f7:e1:f4:b5:12:f1:7a:
                    32:80:ed:f7:cd:25:28:18:db:a6:70:9a:80:fc:a6:
                    d0:cd:26:02:81:d8:3f:91:84:38:d9:f6:1c:11:3c:
                    5f:41:eb:a5:3a:c9:bb:76:43:9d:b3:be:ae:9c:16:
                    ec:19:88:fd:94:26:db:38:82:d2:29:37:48:39:5b:
                    4d:0c:7c:51:8c:76:80:7e:e7:d8:a0:27:1f:e3:5b:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:D6:5A:54:CC:4A:E2:8D:F0:9A:79:A4:8A:A0:4D:2B:FC:45:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2650e404-c694-39ab-b9b2-28198fd950b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:bf10::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:cb:ec:f4:51:ef:3e:46:bf:83:93:de:1d:38:57:64:0e:da:
         4c:b9:4c:50:40:3b:53:40:e2:59:a6:fb:cb:a2:57:22:62:55:
         7f:04:8f:f8:00:03:6b:86:72:42:d4:10:da:de:67:f8:3c:b8:
         3e:b9:5f:9c:55:ed:e4:e6:06:1d:6d:67:76:f0:15:ab:69:28:
         2a:dd:0a:1f:76:98:d4:ae:f2:29:3f:10:4d:c5:34:35:2a:ea:
         d7:ca:f3:b4:b6:67:69:44:22:81:0e:7f:70:9c:bd:42:6d:13:
         40:d0:7f:6e:88:88:2a:95:e4:1c:ce:40:ef:e7:4e:e7:98:9a:
         1c:f9:0d:de:8f:77:bb:85:97:b0:5e:41:6d:df:87:1d:13:b4:
         7a:6e:b9:45:92:30:20:1f:e4:d0:26:af:33:9a:57:a7:23:88:
         12:c3:06:41:c2:03:f4:04:a2:61:ca:ee:50:1f:85:2b:a7:78:
         5a:21:76:5c:ef:65:35:ec:3d:1b:0d:5f:d5:08:1e:1d:de:c5:
         66:e5:58:64:8d:f9:24:ab:ff:8c:ef:0f:b6:df:28:c2:a5:7e:
         f7:78:fd:30:08:cb:25:b2:56:15:6b:cf:3e:0f:78:b9:7f:5a:
         37:01:33:3d:cc:c3:a6:5c:a6:90:66:22:22:74:53:1f:f1:93:
         ca:0a:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:17:17 2026 by rpki-client