Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bb3acad-935b-39da-a283-3df4cf51757a.roa
File:                     8bb3acad-935b-39da-a283-3df4cf51757a.roa (raw, json)
Hash identifier:          +1E4UJo71mxQwCQY4D9xsF29JbhEwZ2/wNBnEURnvGY=
Subject key identifier:   5E:9A:31:95:77:23:80:29:84:BA:6B:C4:B7:65:73:92:5D:43:F9:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E8B2500ABEFB13D060F5CD380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bb3acad-935b-39da-a283-3df4cf51757a.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        2600:1014:b130::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:00:ab:ef:b1:3d:06:0f:5c:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=6e72a287-65b3-4c1d-9ede-550e81b33d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7c:96:ff:7c:75:75:46:b4:1b:63:25:15:c9:
                    ac:6f:49:40:d2:42:07:bd:eb:4d:1b:87:b9:78:34:
                    61:1e:ed:14:05:5a:f7:82:26:45:69:b5:9f:8a:46:
                    47:e4:b9:93:e2:0c:4a:0d:47:ae:8f:c0:fd:cb:d4:
                    09:92:f3:2c:b9:78:10:f8:87:60:a2:93:57:fe:28:
                    c3:a1:34:9a:9f:20:fc:fc:53:3d:cc:e0:24:bc:68:
                    9a:9a:9a:f7:f5:3a:db:10:b5:9f:67:8b:08:3d:df:
                    df:f1:fa:3b:64:3b:de:70:10:70:1a:4d:7f:34:70:
                    f6:d4:64:e8:4a:22:58:08:34:74:44:89:86:18:cd:
                    1e:eb:72:e6:5f:2b:20:cb:26:bc:8f:63:9a:38:e8:
                    37:33:d3:b0:be:b3:06:fc:6e:64:10:1b:ee:85:47:
                    88:ad:79:26:db:a6:c1:21:14:13:ce:05:b9:06:4c:
                    10:ed:a1:91:17:91:a0:91:4e:31:7a:bb:0c:c9:1f:
                    25:93:30:59:e2:0d:ab:37:38:f0:3f:52:34:3b:c1:
                    4e:8a:ad:a2:08:16:e4:ad:22:5b:ee:b6:69:ca:b6:
                    54:f6:2a:9c:3d:dd:ec:1e:11:c5:50:0e:69:66:7b:
                    cc:0e:4c:5d:ad:9a:3b:d6:c9:5d:6c:08:aa:d2:25:
                    9f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9A:31:95:77:23:80:29:84:BA:6B:C4:B7:65:73:92:5D:43:F9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bb3acad-935b-39da-a283-3df4cf51757a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b130::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:af:ef:80:83:26:b8:79:fa:ae:17:af:32:fe:d8:ee:7a:f8:
         26:82:9c:df:f0:40:2d:6c:cf:0d:22:90:6f:2d:2d:29:50:27:
         b7:32:36:5c:32:bc:6a:69:70:69:77:4b:13:b6:39:39:9a:cb:
         ac:ae:45:8c:b7:6b:6e:82:38:9c:5c:41:83:39:d0:d3:70:fa:
         4e:60:7a:1d:5f:69:63:64:0b:05:f9:e7:90:ad:7c:1a:19:72:
         86:f8:6f:3d:fb:dd:29:89:d0:aa:a4:66:ea:df:c8:be:d2:fe:
         b2:55:f9:8e:2b:40:53:de:3a:51:b9:13:2d:0a:ca:05:14:96:
         27:27:8e:ad:13:d4:f7:eb:83:73:87:35:31:09:6c:bf:33:35:
         a2:b9:bd:e8:7b:0a:46:00:c0:ff:25:e4:7e:d6:e3:77:47:f0:
         2f:94:e2:3f:9f:c7:c8:b3:ce:a2:d5:dd:08:91:82:01:51:25:
         43:90:69:be:96:a2:e9:99:d0:bd:41:77:ba:1b:e9:f8:1b:1b:
         b6:4e:2a:8d:d3:fb:10:5a:49:28:e6:49:5c:bd:55:fa:24:bc:
         63:cb:de:2e:b6:3e:49:5a:1e:d1:e3:1c:56:7e:c2:12:de:bc:
         98:36:38:1e:1f:02:89:8a:3b:09:fe:96:c2:bb:ad:d3:2e:72:
         ad:f1:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:08 2026 by rpki-client