Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd1283fb-5f41-3849-8404-b13d1a6dbe34.roa
File:                     dd1283fb-5f41-3849-8404-b13d1a6dbe34.roa (raw, json)
Hash identifier:          2i6VUyL86Q34UDU08462sfsZzsanyaog9SJMJoIo6Gc=
Subject key identifier:   26:F1:11:31:22:D4:35:37:E3:29:C2:82:BD:B8:58:34:6F:3E:05:87
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4974E4DC755E87EC210BF900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd1283fb-5f41-3849-8404-b13d1a6dbe34.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1010:a030::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:e4:dc:75:5e:87:ec:21:0b:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7e6fba0f-ce96-4595-993e-4da3dedc78b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:84:9c:b7:db:8d:f3:56:f2:a7:47:cc:2b:
                    a3:4e:fa:05:f0:b0:69:2d:2d:82:7b:93:20:79:9c:
                    b3:3b:fe:78:fb:d2:54:7d:63:03:77:8e:bb:50:0d:
                    9f:96:6e:6b:91:ae:80:02:a6:19:b9:9f:e9:90:ae:
                    9f:b7:5c:d8:61:fe:34:b3:8e:e0:12:dd:53:ba:e6:
                    2f:9a:ee:84:f5:b1:fe:09:6a:e8:c7:44:d0:b3:16:
                    4a:e2:7f:9e:3b:be:68:40:0b:19:13:3d:2d:9a:e8:
                    1b:5f:73:78:6a:cd:c9:58:09:6b:92:95:14:d4:82:
                    5a:04:ee:c7:e8:3b:58:1f:b2:a2:60:57:27:d6:ea:
                    4f:3d:c9:c0:c1:01:80:a3:9e:ec:cd:88:c2:5b:8b:
                    1e:1e:b7:27:49:17:7b:c2:6e:c7:7b:1e:03:c1:99:
                    74:2c:94:61:80:c0:a9:e5:a1:91:2e:00:3c:45:b2:
                    ee:eb:15:a9:25:f0:cc:32:6a:a6:96:ba:cb:c2:12:
                    aa:00:db:8c:cf:53:3a:68:91:25:51:bb:4f:40:81:
                    4b:eb:66:98:21:76:a4:8b:60:67:36:46:8c:76:b3:
                    ee:11:50:be:51:55:fb:7e:26:ce:aa:e0:d9:90:92:
                    4a:53:b6:58:9d:6b:41:38:1b:f2:ce:fe:20:75:34:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F1:11:31:22:D4:35:37:E3:29:C2:82:BD:B8:58:34:6F:3E:05:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd1283fb-5f41-3849-8404-b13d1a6dbe34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a030::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:05:12:30:3c:a2:fd:bc:ed:bc:2d:e5:fa:db:0d:dd:bc:
         73:6a:c4:60:39:1a:85:91:6f:5f:e5:17:9b:0d:79:10:e9:ca:
         a3:81:9f:c8:57:15:b9:17:e7:a9:ec:a9:37:d2:5a:8d:99:10:
         80:1e:0e:8e:73:33:a0:8f:91:ae:99:a5:3d:ad:78:e9:9b:7c:
         78:8b:88:0b:65:b2:70:f5:d5:71:10:38:09:80:d7:b3:15:1d:
         6f:60:5c:21:db:a2:e9:0a:38:95:58:b9:10:af:dd:cd:45:1e:
         47:39:59:62:4f:da:2e:26:c8:88:f0:91:3e:06:b2:97:44:b6:
         c7:d5:d3:cd:b9:37:a9:2f:4c:53:1c:ec:4f:d4:f2:0d:91:4f:
         f4:06:d9:ea:68:a0:9f:c6:48:38:0e:8d:91:64:88:93:db:c4:
         ab:0e:99:5d:8c:2d:cd:e4:64:30:d8:31:c4:01:76:35:3b:83:
         c4:5f:fc:e8:a5:b8:6d:79:b9:1d:ac:6e:5f:82:8c:05:e4:58:
         36:68:3d:c3:63:bd:94:c2:ee:6f:47:62:2e:7d:b2:2a:98:32:
         e1:67:0c:43:f2:d1:a4:e6:e3:15:4d:af:11:5e:1b:87:75:62:
         40:37:a2:4d:2a:04:52:63:7a:7f:09:89:d4:c7:47:b2:0a:07:
         7f:a9:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:23:11 2026 by rpki-client