Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1c76783-b7f6-3c3f-8fb4-6d001ae31c17.roa
File:                     e1c76783-b7f6-3c3f-8fb4-6d001ae31c17.roa (raw, json)
Hash identifier:          BaRq++m9t/PpVuayyppH16SWvRz6p5nhoA3z4J/w6oE=
Subject key identifier:   49:FA:3E:CC:A4:16:AF:7F:3D:27:CD:C1:DC:28:BD:DB:28:63:38:8A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD7C99E4BD893A0E97F980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1c76783-b7f6-3c3f-8fb4-6d001ae31c17.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1004:b070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:7c:99:e4:bd:89:3a:0e:97:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=c0f1c86f-e7cf-450b-8218-5b44e1dd858e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:0d:00:2a:08:0d:d5:4f:e8:45:69:c7:28:
                    06:bc:22:c0:d8:76:06:47:0b:2d:29:ba:6b:f4:47:
                    53:73:67:87:40:81:79:71:1a:d0:10:aa:f4:3f:16:
                    3c:c2:d2:f8:22:1b:61:1f:64:b0:66:be:c1:1c:ae:
                    c8:a6:a6:01:fe:26:53:39:1e:ac:83:24:17:4f:fc:
                    24:ff:0f:ad:d1:d2:e8:d8:57:70:a3:a4:ed:c3:bd:
                    cb:49:f9:17:8f:b9:3a:6a:10:16:b1:4b:1c:42:a0:
                    3b:5e:e9:9a:2f:1e:ee:07:04:1b:26:54:95:38:14:
                    76:a1:50:c8:e6:78:a5:ff:33:3c:54:bb:39:a5:d1:
                    f5:2f:1f:94:99:f7:5e:d9:c7:16:63:94:bb:f9:75:
                    6a:88:a4:b7:69:8d:e4:b9:d4:56:7c:8b:eb:13:02:
                    98:88:92:e5:bc:b4:24:2b:18:d3:07:3d:41:c2:e4:
                    36:87:d7:8f:2e:6c:76:4e:0c:56:f0:39:fe:46:7b:
                    7b:af:7f:d5:9c:99:7c:2d:02:02:62:b3:63:47:09:
                    d4:e8:bc:be:dd:78:c4:9a:b3:56:79:4d:c3:43:03:
                    e2:5b:5c:9a:e8:81:46:ed:9e:0f:93:35:d0:0e:7c:
                    90:7a:aa:f6:aa:20:e6:af:c2:01:72:ef:fb:cb:70:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FA:3E:CC:A4:16:AF:7F:3D:27:CD:C1:DC:28:BD:DB:28:63:38:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1c76783-b7f6-3c3f-8fb4-6d001ae31c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ef:c1:4f:ca:0e:84:b0:9f:d3:cb:bd:b0:12:3e:b7:e7:23:
         9d:ed:6f:a8:e6:78:a0:c6:e6:86:07:65:ad:7a:01:b9:21:b7:
         94:30:a7:19:e9:18:27:b1:f2:73:4e:ec:af:4f:0a:d4:ad:be:
         4a:db:19:cc:65:05:23:8b:83:09:68:d9:47:2e:34:50:72:61:
         42:98:21:da:9c:7e:18:fa:ef:41:04:7d:1a:e5:9e:2f:30:80:
         ce:05:3c:d1:76:e5:a4:8c:a7:d1:d5:b3:06:96:5a:18:0d:14:
         4e:92:80:81:23:46:99:c3:3e:bd:d2:f7:f2:51:63:0f:df:22:
         35:2f:dc:47:d7:48:04:ba:91:8a:84:f2:85:06:06:e8:c3:d9:
         f0:ce:a8:52:73:0b:e6:b7:da:71:d3:c3:5c:86:7d:47:67:82:
         3f:e1:72:ed:db:6e:50:fb:b6:ac:9c:17:56:0e:c0:9e:56:2f:
         d3:a5:8a:27:3b:7d:ac:ee:77:81:8f:f7:3f:c1:75:00:7e:ca:
         d3:e3:2d:42:00:a7:fc:88:35:ee:61:37:03:bd:b7:e9:06:74:
         e7:e1:2d:9d:bb:18:1a:50:55:ef:88:d8:9b:a0:df:3f:73:47:
         45:ed:a2:7d:6a:ab:19:bd:f4:5d:2c:fa:e1:b8:bd:3f:28:42:
         08:7f:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:41:43 2026 by rpki-client