Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33bfe9cc-6eee-3ed8-9697-31326df791a8.roa
File:                     33bfe9cc-6eee-3ed8-9697-31326df791a8.roa (raw, json)
Hash identifier:          J3eK55DCdikN+E/DhnUKE+cJ7kc2bqu62UPZ+oUQHxM=
Subject key identifier:   E2:71:69:6B:ED:6E:B7:8B:F0:AD:70:B2:8F:8D:96:E5:94:3E:D5:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4986661BA0832E32F8FF46F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33bfe9cc-6eee-3ed8-9697-31326df791a8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:b140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:66:1b:a0:83:2e:32:f8:ff:46:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=37efcf54-58ba-45bf-a6b9-ccab8780e70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:29:8e:f9:b6:41:28:31:db:70:d2:b6:c2:
                    d8:f7:dd:31:c4:c1:2a:a2:59:3b:4a:11:1e:f8:3e:
                    7d:04:3d:83:a5:2a:ff:5f:75:27:1a:da:91:30:df:
                    a4:d1:83:3f:85:55:f5:68:90:cf:ec:6c:a9:d8:57:
                    7e:22:02:91:1e:5e:7d:b4:ce:29:10:35:4c:20:2c:
                    37:2c:fb:66:93:70:17:85:1c:bf:db:13:57:88:30:
                    bb:98:55:79:11:21:d8:3b:d8:d2:a2:d5:c4:d4:68:
                    6f:36:f2:95:48:91:93:91:01:30:c2:7a:05:7f:57:
                    29:46:ea:e6:dd:6e:6a:de:71:f5:0f:a8:b8:1d:2a:
                    27:68:d3:33:01:21:e3:20:13:fe:cf:1b:14:f7:c9:
                    b0:61:6a:cb:5a:67:0b:7d:62:8d:67:3a:f0:cb:7f:
                    f3:cf:7f:31:27:fc:77:4e:d1:0d:c7:5c:70:f6:f0:
                    8d:e2:7e:61:af:71:ab:dd:5b:32:cc:e3:1d:6e:33:
                    a4:df:b4:f1:fe:6a:2b:71:0b:3f:cb:01:5c:43:b0:
                    85:cf:49:1e:a1:7a:0d:95:0c:fb:ea:3b:a5:7f:5e:
                    cb:ca:28:11:5c:74:65:05:21:ff:f1:7f:1f:37:1a:
                    17:9e:12:b2:38:33:52:2f:a2:8c:bc:d0:76:10:0b:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:71:69:6B:ED:6E:B7:8B:F0:AD:70:B2:8F:8D:96:E5:94:3E:D5:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33bfe9cc-6eee-3ed8-9697-31326df791a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:ba:0e:4f:9a:9a:04:48:0b:e2:69:d6:3f:cc:65:0b:7f:
         51:1d:e7:da:e4:9c:90:81:c7:ee:b7:8e:26:c3:e7:37:f0:ce:
         f7:a4:ad:be:45:a0:5c:f0:07:85:1b:3e:2f:4c:23:e4:66:03:
         fd:38:e7:1c:69:0c:f0:1d:10:c5:2a:c4:07:8f:26:a2:d8:b4:
         40:27:fc:91:75:c4:6a:9f:0a:a7:b8:7d:0e:97:7f:21:13:eb:
         22:11:45:16:7a:ab:a6:6b:8b:17:5e:72:20:e4:71:d5:0b:f1:
         b1:55:0a:9c:20:c4:b7:01:85:4d:a4:77:87:8c:40:00:19:a6:
         1c:18:59:38:97:2d:5b:a0:58:d9:9d:37:fb:10:9a:cb:15:84:
         7e:93:0d:df:db:01:36:b9:3a:e6:07:02:30:2d:dc:58:cf:61:
         c4:ad:62:03:28:2d:52:9c:24:4b:70:ed:b5:a8:96:a4:02:19:
         b8:6a:de:6e:15:3c:53:74:6c:42:b5:a5:d8:0c:34:09:f9:18:
         8b:40:29:16:88:51:b1:01:28:9d:0e:7d:20:5c:d3:7e:72:a8:
         73:7a:0c:48:6d:de:ab:0f:f0:a8:e3:0a:b9:9b:e0:d2:9e:09:
         a3:8a:a1:a6:e2:1a:3b:2a:83:04:3a:7c:f2:2e:39:12:7d:1f:
         65:ba:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:20:06 2026 by rpki-client