Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3cef2a9e-e4b6-39b0-a13c-f01ac67e64b8.roa
File:                     3cef2a9e-e4b6-39b0-a13c-f01ac67e64b8.roa (raw, json)
Hash identifier:          u1kQQ2njb/ZeXnH3MhQw3egcpzEyGtprc/aVwQKJbpM=
Subject key identifier:   5F:07:1B:D6:0D:4A:6D:66:15:19:D6:E1:56:A4:F8:AA:C5:B2:05:11
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4987A1E7B7C7561A4F410AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3cef2a9e-e4b6-39b0-a13c-f01ac67e64b8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1006:a140::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:a1:e7:b7:c7:56:1a:4f:41:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dde92991-fab4-4d00-81ba-2249ed1214e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:35:c2:e4:64:03:2b:f9:ff:1c:7f:96:a2:
                    62:af:1d:5b:ea:cc:d4:17:6f:2b:c4:9f:f9:de:a1:
                    8f:f3:ba:65:e1:ff:53:11:e3:e9:d7:14:ff:53:4a:
                    64:0a:6d:3c:7e:6b:dd:cb:99:b4:ae:12:db:4d:ab:
                    99:05:96:c6:a8:47:76:81:ab:23:e6:bc:e0:20:0e:
                    27:70:ee:e6:b4:1c:49:88:7c:bf:13:49:28:cb:a6:
                    cb:a5:b6:8a:29:28:50:05:40:01:23:ae:ee:72:57:
                    0a:30:a2:92:fb:1f:57:d9:fb:d3:71:1c:c4:3c:76:
                    a5:a0:6d:53:7c:95:22:cd:3d:59:49:41:1b:df:86:
                    7f:dd:88:86:1a:5f:7f:a5:b2:6c:b4:85:bb:51:30:
                    ba:90:bb:a2:ad:66:a6:57:32:d3:6a:1f:eb:39:cb:
                    89:3b:7e:71:18:2a:5c:c3:84:3a:e8:66:5c:c1:49:
                    9b:db:7c:34:ea:7c:c0:55:a2:4c:11:8e:36:bf:8d:
                    8c:3f:88:a2:3b:eb:a1:7c:03:2d:bd:1d:57:f5:86:
                    ea:e9:f7:ee:12:3d:1a:27:c4:a1:b6:b5:23:c5:64:
                    fb:27:11:e7:23:26:22:88:28:15:50:34:a6:08:99:
                    6c:b9:e6:73:59:a1:8e:a3:6a:6d:d8:e3:cf:d5:60:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:1B:D6:0D:4A:6D:66:15:19:D6:E1:56:A4:F8:AA:C5:B2:05:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3cef2a9e-e4b6-39b0-a13c-f01ac67e64b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a140::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9e:82:c1:f5:29:45:73:8a:95:9a:6e:57:23:47:51:95:5d:
         57:ae:7b:35:64:6c:ba:bd:7b:b3:e7:c4:95:c6:27:c7:15:ca:
         e1:77:64:40:70:83:d0:42:94:ff:42:0f:30:d6:e9:af:98:ca:
         ca:ae:08:95:2d:98:b4:28:28:66:19:7c:70:03:62:ac:7b:95:
         15:c6:13:8e:24:e1:b0:8b:4a:e0:b6:46:e5:9b:91:d4:d5:8f:
         25:e3:0d:01:0f:46:d1:13:ba:46:d6:88:59:ca:e9:7b:59:98:
         41:06:08:c1:70:7b:33:0c:3f:06:69:10:a9:6d:ba:d7:dd:d5:
         5f:7f:a0:51:cd:45:67:b7:03:c7:db:f4:69:88:fc:fc:61:0b:
         04:b5:d5:d3:22:71:c6:de:3b:ed:56:a9:d7:7f:3b:39:8c:dc:
         d9:38:fd:97:f9:10:c3:4c:cb:92:83:c6:5c:cb:fa:5e:60:9d:
         ff:b9:4a:27:fb:34:8b:5e:f6:14:72:3f:35:1c:34:81:b2:9f:
         e4:3f:00:d7:49:75:8d:6c:99:ab:ee:e6:7d:4b:f7:cb:f7:81:
         4d:bc:b8:82:46:73:65:89:fb:55:a4:fe:ae:8e:e8:67:c0:b4:
         1d:5a:11:5a:35:af:58:65:3f:44:fc:51:5a:68:68:1d:c0:c9:
         0a:01:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:51:10 2026 by rpki-client