Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29dbb6e9-994a-3de1-be9d-49e8ce08b697.roa
File:                     29dbb6e9-994a-3de1-be9d-49e8ce08b697.roa (raw, json)
Hash identifier:          s569XAnmCVGoy55z59nK2zcdbcL368jKN+YaT0kT+4E=
Subject key identifier:   F7:A6:9B:A1:C0:AD:84:24:09:5A:6A:FD:4E:35:23:EA:38:15:9E:06
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F498ACD52959FF651985F2E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29dbb6e9-994a-3de1-be9d-49e8ce08b697.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1017:a428::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:cd:52:95:9f:f6:51:98:5f:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=325302c1-11bf-492e-9e81-f615d68a2b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:fe:fd:53:30:fa:a1:7f:18:d7:10:ad:55:
                    6b:5c:20:f9:02:ba:f1:64:22:ad:a0:f9:38:2b:de:
                    17:65:88:40:cf:f8:4e:16:6d:41:33:39:46:01:26:
                    45:28:02:3a:bf:ec:ef:bb:2f:13:b5:ad:2d:f8:86:
                    a2:c5:35:9b:8a:7d:ff:d4:ef:93:2e:1c:f3:a4:cb:
                    52:60:48:ce:bf:bb:0f:52:25:a3:1d:27:b8:f4:e3:
                    a0:01:93:11:66:ba:bf:74:41:ad:0d:91:1e:d9:df:
                    3b:67:5d:54:29:41:0a:3e:f9:b8:7a:ec:81:80:26:
                    01:5b:09:85:af:bc:0e:dc:f2:7e:08:8e:96:97:1b:
                    3d:a3:fd:33:d8:98:17:dd:dc:25:ce:e5:70:89:af:
                    ca:ab:d8:2b:35:fe:4b:cc:95:d7:06:ec:c8:82:42:
                    cb:43:57:e9:d0:18:3a:7b:f5:59:8f:30:81:26:8c:
                    a5:a4:47:70:db:74:0e:dd:c7:52:f2:f3:81:af:9b:
                    27:0a:dc:2e:e9:af:e9:bf:f7:0b:23:ab:57:ad:e7:
                    d2:98:47:23:16:f2:9f:e4:61:df:63:08:65:a8:29:
                    50:19:8a:1a:6e:de:fa:59:62:e8:9d:2c:ae:45:57:
                    a9:1e:ec:5c:4f:ac:34:05:b7:9a:68:7d:b7:ba:14:
                    67:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A6:9B:A1:C0:AD:84:24:09:5A:6A:FD:4E:35:23:EA:38:15:9E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29dbb6e9-994a-3de1-be9d-49e8ce08b697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a428::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:ff:d7:02:7f:01:33:00:76:49:92:68:b3:ab:5a:30:69:
         12:29:c7:bf:a5:ca:f7:73:7e:15:53:1d:b8:91:e5:a9:38:89:
         27:68:02:39:24:8a:6b:1d:87:f2:f7:ec:2e:ca:c9:67:9e:b9:
         16:a7:b6:dd:1d:d3:d3:92:29:6a:80:c5:22:f2:11:fc:68:69:
         da:fb:2f:87:01:96:9a:fe:4b:f8:6b:0d:e2:4d:76:fb:06:01:
         5e:f6:4b:d4:4d:e9:1f:c0:5a:78:6c:fc:61:b4:2a:46:dd:ce:
         3c:c1:06:ca:4d:ca:aa:6c:9a:39:4a:85:53:44:30:33:97:28:
         78:06:72:05:1f:2d:e1:50:c2:28:e7:ae:a5:ea:da:0e:18:56:
         3d:77:79:b9:cd:0c:ff:3c:06:8d:6e:7d:61:ba:6b:e3:37:d8:
         a2:0d:21:b5:c6:d1:de:bb:a5:8b:61:7b:06:c1:03:e1:95:f4:
         37:38:dd:32:83:9f:5a:7f:92:04:ee:7d:26:ea:3c:49:b1:99:
         bf:53:54:3d:2d:77:cf:ba:3c:dc:e9:27:fe:0b:6b:f9:8f:ef:
         3e:58:5b:33:6d:68:92:ad:41:44:30:38:1f:cf:b3:4b:a1:3d:
         31:c0:b2:80:b6:10:05:56:a5:c3:dd:5e:b3:fd:a7:39:d7:4b:
         8c:84:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:03:16 2026 by rpki-client