Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37be6a1-d420-30a5-a401-622e45871b37.roa
File:                     c37be6a1-d420-30a5-a401-622e45871b37.roa (raw, json)
Hash identifier:          3AQHpdHEPeORLNzH8HCWQ8F1qLxBT1YC68P64sDZdd0=
Subject key identifier:   0E:87:CD:1C:7C:78:66:34:0F:2F:C3:E0:65:4E:7B:C3:A8:CD:40:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87DA307EE0EB080FBD0440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37be6a1-d420-30a5-a401-622e45871b37.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1017:b120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:da:30:7e:e0:eb:08:0f:bd:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=3b627ca2-7b6a-4b0d-bbd8-55747da61bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:25:13:d2:a4:7b:f5:d2:ed:09:0d:bd:4d:dd:
                    8e:bf:94:85:e2:42:3c:ed:ea:0e:e3:79:12:8f:5a:
                    5b:fa:26:2d:d5:72:3b:df:d1:c6:b2:b6:96:ba:95:
                    69:5c:1f:70:eb:56:ea:2b:bb:a5:2d:a9:cf:f7:32:
                    92:0a:3e:1c:c1:48:c6:6f:d6:67:b4:6b:c9:21:13:
                    71:e3:70:e3:b5:b3:68:28:f6:1b:81:e6:08:32:5e:
                    28:bd:ab:34:33:fc:02:49:b0:c5:8e:1b:31:e3:64:
                    ad:f6:25:8c:9d:3a:36:c6:f5:ec:a8:c7:43:b7:b8:
                    a8:b7:60:ca:e5:ce:72:8c:1a:4b:a1:2b:8b:02:59:
                    ee:ba:c0:9c:c9:14:c2:20:63:4a:ac:49:66:38:f6:
                    af:aa:00:b4:02:05:df:c6:92:65:50:12:07:69:8e:
                    d9:7d:d3:f2:6b:cc:f8:5d:e3:dd:06:fd:d2:1d:15:
                    b1:49:f4:90:ea:1b:e8:2e:9b:db:a9:48:e4:c6:ec:
                    0c:f7:0f:c8:d7:26:a1:44:fd:84:f8:bb:ce:1a:7c:
                    f0:36:71:fc:ac:2c:e8:2a:13:ce:86:73:80:08:9a:
                    fa:2a:a1:ee:bd:31:4e:15:5b:c1:4d:37:86:8e:ca:
                    7a:bb:60:a4:01:ae:f5:ab:12:0b:21:5e:61:11:31:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:87:CD:1C:7C:78:66:34:0F:2F:C3:E0:65:4E:7B:C3:A8:CD:40:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c37be6a1-d420-30a5-a401-622e45871b37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4f:79:d9:2e:4f:73:ef:e2:1e:77:2d:9c:bc:d5:5e:80:9e:
         0c:a2:5c:16:db:94:05:3a:d5:25:4c:ed:3d:c8:77:4a:bf:8c:
         f6:6d:ca:7f:ea:f7:0c:1e:81:2b:3d:c6:4b:dc:31:2f:06:e2:
         ae:29:ce:e4:19:c4:b3:8c:6b:ac:c0:db:62:ab:0a:75:c0:24:
         ba:4c:86:9f:bd:a5:6c:8f:60:c0:26:cc:2f:9c:4d:c1:e9:ad:
         38:de:77:7a:8d:fd:ed:99:0b:69:4b:a8:39:6d:e5:c2:8d:55:
         c4:95:16:d0:59:32:d8:55:79:b7:99:e9:40:fc:0c:e4:88:55:
         ef:a6:12:52:0b:7d:18:60:6f:76:b2:d2:aa:6a:84:fc:ef:fa:
         62:78:30:c1:ba:d0:a0:5a:c6:67:3e:f6:2b:b1:f8:11:90:a5:
         84:e3:dc:3a:90:af:e2:9b:e4:90:72:68:b0:5c:8f:e2:6b:d4:
         2d:d7:56:c1:0d:b9:63:74:f6:86:c1:5d:a4:54:9c:7e:99:fe:
         97:f0:bd:28:f8:13:89:be:1c:13:6b:44:9e:dd:69:bd:e4:b5:
         39:44:c0:5e:3f:2a:c3:87:74:eb:eb:a8:10:f4:82:07:ea:f8:
         99:7b:45:75:fb:af:74:99:13:6d:1f:8c:ea:aa:a1:bd:03:86:
         88:bc:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:47:33 2026 by rpki-client