Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7fdc65f-7e12-31c3-a31e-a9b1c81a4f04.roa
File:                     f7fdc65f-7e12-31c3-a31e-a9b1c81a4f04.roa (raw, json)
Hash identifier:          5o8F1bV1KwLF7Ft6q8qU0BbC61RDgUaToR5I3zRZ5LM=
Subject key identifier:   1A:74:4A:6C:01:3B:CF:A8:BA:74:A8:F8:62:B8:95:49:59:4A:21:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD4F6EE0B9DA4FCC3FD440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7fdc65f-7e12-31c3-a31e-a9b1c81a4f04.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1002:b160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:4f:6e:e0:b9:da:4f:cc:3f:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=2a3999b5-6583-419b-b8aa-b69cf1a3c60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c0:f9:f0:7e:ab:0e:2e:32:c9:d9:fb:a1:77:
                    e2:da:4b:32:85:a7:b4:b7:47:9f:b8:2e:c9:22:c6:
                    69:ec:b9:78:b1:63:ee:7e:d9:9e:08:fd:78:17:4a:
                    86:a5:e3:6d:23:79:31:7a:59:fa:cd:dc:c5:ae:e4:
                    d9:27:b8:dd:09:3d:f2:79:32:4d:5e:e1:e6:39:f0:
                    8b:a1:28:7b:6d:5a:6f:34:3d:90:b6:f0:f1:96:c0:
                    19:de:86:28:8b:f7:0f:33:96:37:bc:88:cc:ee:13:
                    b5:8b:49:2e:69:69:51:d5:2a:9f:8d:f4:fc:2f:2f:
                    72:7f:53:eb:7a:38:c2:1e:2c:c8:d1:a7:ec:fe:a8:
                    56:d1:00:0f:ac:71:08:ef:dd:d9:1b:92:c6:bd:7d:
                    b0:13:5e:e1:65:fe:26:35:5f:ba:77:2a:62:71:51:
                    eb:31:36:57:7f:0c:05:33:8f:ac:bc:07:a3:ad:35:
                    b1:d2:01:84:68:55:d2:22:c8:30:e4:37:19:20:18:
                    be:71:c3:be:0a:bd:ce:ec:2f:7f:79:c9:51:b1:9e:
                    42:7c:10:c0:aa:0a:82:87:a8:d4:66:72:05:5f:d7:
                    bd:5e:22:1d:09:4c:35:11:10:49:1b:3a:82:f0:fa:
                    56:95:39:63:a0:7a:10:50:d2:30:1e:47:e8:e9:9a:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:74:4A:6C:01:3B:CF:A8:BA:74:A8:F8:62:B8:95:49:59:4A:21:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7fdc65f-7e12-31c3-a31e-a9b1c81a4f04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4c:fb:d7:b7:9e:2d:58:f9:50:47:00:3a:0d:ca:4d:5d:6a:
         33:94:12:fe:43:0c:c2:c7:c5:ca:b3:d4:1b:33:70:74:9b:7c:
         79:5b:ed:ca:4d:10:95:22:5a:a8:ec:cb:4f:55:3d:11:94:b5:
         62:18:51:2a:a8:e1:21:38:40:7f:af:17:da:4f:da:a5:f3:d4:
         11:0a:2b:4e:b8:4f:dd:3c:f2:1e:85:a9:1e:ee:05:65:c1:5d:
         d2:63:3a:89:db:d7:80:dc:c4:87:71:04:8b:a2:7d:0e:cd:53:
         24:47:73:5b:09:44:17:66:a8:3f:8f:bd:7a:91:03:39:85:fc:
         90:c3:58:10:36:0f:2f:3d:80:cf:b1:72:98:05:28:4e:34:63:
         81:0b:d8:d3:51:10:b7:7c:a2:a4:cc:a8:3c:fb:03:5e:f5:1c:
         55:c4:21:44:61:dc:75:c8:d5:b3:7a:f9:f3:b6:8c:7a:0a:b3:
         4d:85:ee:0b:ff:ee:45:11:dd:6a:ca:ee:c1:93:c3:0d:db:fa:
         3c:79:02:0b:bd:49:9d:5e:47:74:99:fb:2a:e4:02:9b:6a:84:
         c2:54:dd:3c:63:f9:69:48:03:16:40:97:6a:7b:8f:ba:73:31:
         b1:2f:33:44:c6:92:7f:ab:4e:b0:b5:f3:d0:bf:4c:5a:6e:c3:
         b7:06:ab:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:47:33 2026 by rpki-client