Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/abba81e5-c08f-3b4d-a65d-51cb17b00256.roa
File:                     abba81e5-c08f-3b4d-a65d-51cb17b00256.roa (raw, json)
Hash identifier:          r4QwwTZ+CiV6I/KDO+ff5mRueebrbQsuqXGfeue0qps=
Subject key identifier:   C9:57:BE:4F:DF:88:A4:10:E0:2C:36:1D:0B:41:3B:86:48:FD:B0:C7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E54B4B7B70D850ADAFF1B3380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/abba81e5-c08f-3b4d-a65d-51cb17b00256.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     701
IP address blocks:        100.10.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:b7:b7:0d:85:0a:da:ff:1b:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=7070b551-1b4b-48b2-a915-078ab7fd6c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:0f:a3:fb:ea:1d:28:a6:8c:5e:aa:19:00:
                    7f:74:c4:34:67:66:20:35:4c:84:e6:de:55:07:03:
                    0c:c5:dd:29:c5:f5:18:d7:15:92:04:8d:42:99:dc:
                    51:33:2e:71:d1:37:ef:0e:0d:fc:0b:4d:c8:e5:0b:
                    e2:f9:1b:27:b1:89:ae:0c:aa:8a:24:be:d7:7a:45:
                    cc:b3:3e:04:78:4c:b2:98:8e:c7:e9:8b:88:f1:3a:
                    c8:34:c9:56:b2:45:31:2c:45:47:d4:26:ac:7d:ff:
                    5f:f7:43:ce:75:12:cf:1d:75:ef:86:14:e2:ce:39:
                    45:7f:4c:3c:c1:8b:d1:7e:e1:4f:8e:a5:d7:ce:70:
                    e8:a2:4f:ea:29:0e:f9:d2:b1:c5:71:4e:b6:64:7a:
                    47:46:90:0e:3e:f7:40:31:f2:e0:e4:1e:c1:16:2d:
                    4e:8a:e5:bc:b9:ea:ac:e0:95:02:0a:52:77:89:e2:
                    0b:b9:ec:1c:4b:35:c0:71:35:a7:ac:21:31:27:2d:
                    83:5a:e3:04:b3:da:74:a0:10:2d:60:93:42:18:ce:
                    19:d3:e1:3a:49:ef:9a:80:45:e3:7c:fd:15:af:c3:
                    3c:41:b0:aa:0d:71:f5:dd:ee:ff:fa:a8:82:58:24:
                    3a:24:36:ab:a9:33:b9:ca:06:74:aa:5b:42:78:fd:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:57:BE:4F:DF:88:A4:10:E0:2C:36:1D:0B:41:3B:86:48:FD:B0:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/abba81e5-c08f-3b4d-a65d-51cb17b00256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.10.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:20:9c:ef:a9:62:00:e6:2c:71:e7:98:2e:7c:fe:37:e8:4b:
         75:f7:8b:6a:c2:d7:de:71:66:cf:dd:d1:c4:5f:05:50:b8:66:
         50:6d:e6:fa:50:e1:a7:cb:f7:7e:9f:87:a1:5a:26:59:b4:ea:
         90:51:b0:38:01:5a:58:1e:b1:21:fd:11:43:3a:82:eb:9b:ff:
         ef:ab:5c:fa:00:fb:d9:d9:4e:5e:ef:b2:23:9c:49:ab:01:3d:
         16:38:7d:c6:d3:2e:41:bd:e4:31:0e:4a:2b:45:21:ce:9d:67:
         5b:59:09:25:9d:c8:25:4a:94:d0:a9:93:95:17:32:b5:f1:0b:
         e7:1f:2b:13:28:31:f4:7c:d4:c2:f4:3f:83:4e:94:95:9b:45:
         f6:f9:26:83:1b:cf:01:cf:05:4c:7a:1e:38:f1:90:3b:b9:a0:
         54:fd:dc:63:f9:d1:8a:50:55:ae:da:0f:2d:1b:47:1d:46:cb:
         63:1c:00:f9:09:91:24:ba:8e:01:f2:62:5e:dd:55:2f:11:f7:
         20:ad:09:f3:25:ca:0b:03:a5:47:b0:6c:eb:13:32:b5:bd:fd:
         16:12:f9:93:ff:b7:0e:a7:25:fd:50:32:15:27:36:d5:3b:a4:
         60:9d:87:a9:6f:d9:d3:12:67:e8:0b:63:d3:05:7d:66:7b:fe:
         c5:c5:d3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:58:45 2026 by rpki-client