Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57f01527-bc52-3bba-9950-5d6f57bfbf49.roa
File:                     57f01527-bc52-3bba-9950-5d6f57bfbf49.roa (raw, json)
Hash identifier:          D9d8eEFehZnA+SQf1UeQd5PnXytWl8Nv5IL5Vf0mpsY=
Subject key identifier:   1A:87:52:3D:C3:DE:8A:7B:54:A8:AB:94:4A:52:34:AE:8F:9B:AB:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4986511F67C000BB56DEAA58
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57f01527-bc52-3bba-9950-5d6f57bfbf49.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1009:b0c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:51:1f:67:c0:00:bb:56:de:aa:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2cf8aec5-9015-40d3-8169-f04cf59d432d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:00:57:12:74:c7:3d:63:fb:70:39:df:8c:
                    5a:ec:41:d5:e9:f1:dc:81:5c:87:f9:96:6a:38:ad:
                    d3:2b:0a:50:b5:81:f5:a4:0d:3a:c2:7d:64:4d:9a:
                    f4:3a:b5:63:95:9a:df:07:da:7d:98:71:91:97:93:
                    08:ec:87:7b:35:1c:ce:47:82:3c:00:8a:28:bf:1f:
                    90:5a:13:26:83:de:a2:ac:dd:e1:d2:bf:c4:45:cc:
                    10:bc:2a:ae:c2:8c:ed:e7:26:22:cc:9d:08:8b:f0:
                    31:21:28:70:1e:21:ce:94:be:0f:09:c5:c8:85:01:
                    56:7b:83:91:5c:72:e7:98:db:1e:e8:ed:cc:2c:29:
                    63:a1:67:b8:81:be:8d:2d:9e:67:1b:3f:f2:f1:31:
                    f1:e1:61:e7:ff:12:d4:01:2e:b3:e3:d3:96:5d:dd:
                    01:04:63:f8:51:d3:74:24:65:d5:5d:78:96:bf:14:
                    3b:69:04:a9:68:78:e8:34:8b:66:0f:0b:96:08:c7:
                    32:02:4b:df:ec:8d:7e:85:46:39:d3:85:90:4b:93:
                    44:48:7c:42:bb:af:93:bc:d1:b5:dc:7f:7c:90:08:
                    96:d8:65:b0:3f:dc:f4:36:69:f4:08:80:1d:be:81:
                    e7:1c:41:de:01:82:aa:04:ce:24:90:5d:40:86:f9:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:87:52:3D:C3:DE:8A:7B:54:A8:AB:94:4A:52:34:AE:8F:9B:AB:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57f01527-bc52-3bba-9950-5d6f57bfbf49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b0c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:6a:82:e9:03:73:fd:ab:7e:7b:0f:5a:0f:f1:7b:1d:18:b1:
         cb:98:b3:22:df:23:bd:44:28:1f:d4:02:1f:9a:3f:4c:88:03:
         41:75:be:fa:c4:d1:ac:5c:6a:47:74:a0:95:98:97:c0:93:ff:
         69:76:22:e4:2b:65:6b:69:51:56:56:dd:63:b5:e9:1b:5d:74:
         fc:8e:c9:ab:fb:75:f3:7a:c9:93:99:1d:14:cf:5f:d0:1e:16:
         11:1c:f7:60:04:7e:4b:d4:bf:b8:2f:d1:d6:4a:c4:40:98:e6:
         28:62:9f:d0:a4:7e:e6:4a:8a:49:84:43:5c:11:66:be:cf:0b:
         e7:d6:15:03:25:b6:e0:38:74:a5:05:42:f2:07:c9:99:29:7c:
         4e:1d:f1:f9:15:c9:41:2a:8f:8a:c9:f9:61:a4:62:e2:a7:05:
         25:f9:15:94:3a:19:d3:d1:61:6e:94:b0:12:7a:72:be:23:d0:
         c8:df:7b:cd:cf:e4:9e:08:8c:79:d8:bb:b8:fc:c8:cd:e8:d8:
         3b:0b:d4:8b:55:39:61:fe:a9:03:6f:49:b6:b5:29:ad:ec:06:
         a4:6a:5d:67:fa:d5:48:50:a2:e0:31:f2:33:ca:fa:de:06:cf:
         4b:9d:2d:75:96:7b:98:9d:1a:f6:11:dc:8a:19:3e:2e:b5:77:
         a7:bd:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:22:59 2026 by rpki-client