Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e6a210-6479-3be7-8f3a-08458adf00a6.roa
File:                     87e6a210-6479-3be7-8f3a-08458adf00a6.roa (raw, json)
Hash identifier:          2cMCc80bflgvIf3SMN8pvepQ3H0bhwJxVBZp7iQxVYE=
Subject key identifier:   A6:75:01:3F:D7:C0:06:B3:C8:E5:9F:55:07:5F:2A:2E:34:70:2B:2D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F38948981E02A0AA99380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e6a210-6479-3be7-8f3a-08458adf00a6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100f:f100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:38:94:89:81:e0:2a:0a:a9:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a6f0b663-5135-462d-9048-0285c6fcc573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:bc:32:f5:84:3e:a3:1f:b9:a1:45:03:20:
                    58:64:26:83:3a:f0:2e:6c:89:ae:0b:9b:33:2f:d6:
                    af:99:75:c3:09:bd:0a:2b:48:41:86:16:f7:c6:bf:
                    2f:ad:8f:67:98:11:eb:f3:ba:d8:c8:49:06:be:74:
                    3b:ab:cf:e2:f5:19:a6:7a:b5:ca:0b:9c:ba:05:07:
                    63:6e:0f:45:e4:dc:8c:51:04:4c:e6:b4:70:9f:82:
                    65:e9:3b:be:5a:43:ae:04:78:8c:05:6a:24:94:32:
                    08:8a:c1:7f:1b:c4:fb:90:44:8e:25:79:b0:48:59:
                    c9:97:a6:8c:08:75:5f:4a:dc:e3:08:06:4d:45:6f:
                    e1:04:e7:41:c0:db:f4:7d:90:46:d0:9b:5d:84:4b:
                    e5:11:1b:dc:b3:83:de:f2:94:40:a5:5b:19:6e:13:
                    db:a9:f4:c3:98:8c:82:cf:8c:88:02:7c:13:8f:42:
                    08:f7:73:23:4a:99:f8:0c:9f:cd:03:ab:c3:74:69:
                    d1:80:52:0e:4f:3c:67:a4:85:69:56:7d:05:d9:80:
                    67:df:cd:a4:81:ce:0e:15:5a:02:10:c3:04:59:03:
                    75:73:eb:c3:1c:39:cd:23:c2:68:78:c5:07:dd:03:
                    b9:da:8d:c9:81:ee:cc:c8:df:a3:1c:77:0e:f6:fc:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:75:01:3F:D7:C0:06:B3:C8:E5:9F:55:07:5F:2A:2E:34:70:2B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87e6a210-6479-3be7-8f3a-08458adf00a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:4d:fa:57:51:76:98:96:fd:06:ec:c6:e0:d9:98:69:79:f2:
         c7:76:14:d3:65:7f:cc:d7:a0:a0:11:d0:d6:c6:ac:79:80:bd:
         21:e3:6c:c1:2c:57:cb:dd:36:2f:34:fd:16:8e:82:be:c0:25:
         78:50:37:6a:0b:a3:09:55:3c:62:64:24:06:63:92:bd:3b:8c:
         c6:a4:8a:40:ec:d7:20:0b:d9:4b:a3:5d:1d:38:54:1e:57:c1:
         8c:c0:6f:dd:3a:53:41:3e:05:48:57:6e:9e:0e:3c:73:b3:24:
         5a:01:d7:fc:bb:82:bc:bd:7a:6c:54:4a:be:c4:3b:9a:f5:1e:
         68:10:12:97:49:a6:5f:bf:11:9c:e4:65:aa:89:ea:01:03:1f:
         77:09:55:1c:47:26:93:0a:1b:e4:8c:c0:b0:6c:77:10:40:c0:
         44:38:52:1b:d6:df:df:3a:5a:03:78:7a:3d:fc:2d:80:9f:49:
         24:a8:c1:ab:cf:86:02:4c:89:95:10:67:61:1e:01:67:fd:03:
         7a:8e:cd:f8:dd:c5:ae:1c:97:db:27:47:23:4d:18:d3:1f:c7:
         05:00:44:32:bc:e1:0e:9e:0b:f6:10:80:bd:cb:bb:df:82:de:
         3d:61:fe:9c:4e:2d:b8:a9:de:1a:e5:78:ff:65:88:51:eb:9a:
         57:5f:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:19:34 2026 by rpki-client