Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/141a95a5-de2c-3970-8871-879f3b1ff1fe.roa
File:                     141a95a5-de2c-3970-8871-879f3b1ff1fe.roa (raw, json)
Hash identifier:          ix81k8sELyxO7lk4n7x3ghKMnCHGsXdCR5mXVrvoR/Y=
Subject key identifier:   86:2D:D6:F2:FB:F1:C7:37:EC:50:C9:6E:E1:2B:59:BC:2C:98:2D:20
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5D2FA1880033F0AC2306E100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/141a95a5-de2c-3970-8871-879f3b1ff1fe.roa
Signing time:             Wed 01 Apr 2026 17:07:43 +0000
ROA not before:           Wed 01 Apr 2026 17:07:43 +0000
ROA not after:            Tue 30 Jun 2026 17:07:43 +0000
asID:                     6167
IP address blocks:        2600:1015:a123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:2f:a1:88:00:33:f0:ac:23:06:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  1 17:07:43 2026 GMT
            Not After : Jun 30 17:07:43 2026 GMT
        Subject: CN=1152d6dc-7206-4d40-bd87-c549ae3b11d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:7a:84:a5:e5:86:d7:f7:34:cb:d1:70:b0:
                    c6:26:1f:26:a5:0a:86:d9:94:11:a0:08:8a:6d:61:
                    03:79:77:a6:b6:e8:42:bb:3f:45:2b:89:ce:2d:52:
                    c9:76:63:19:ad:bd:a3:f9:72:96:ee:c7:28:e4:69:
                    dd:ed:6c:89:b4:c9:75:59:9c:4f:c2:f1:17:48:d9:
                    30:0c:04:ce:1e:0b:46:4b:e3:49:25:d7:a8:9d:bd:
                    56:c7:8d:d3:11:86:27:bf:0b:39:1b:e6:59:64:9c:
                    c0:b1:eb:51:2f:54:56:69:0e:0e:0d:25:8a:96:8c:
                    f9:0c:d7:55:98:f9:8f:da:b8:e6:86:d9:6c:31:3b:
                    94:04:a1:d7:63:b0:bc:27:5d:21:30:40:77:5c:c2:
                    c7:a5:0a:58:e9:53:5e:c9:9d:fd:a2:5e:7c:32:63:
                    b2:f5:ae:c1:c8:cd:45:4e:a3:13:c0:67:91:23:d1:
                    41:f7:bc:3d:3d:d1:c8:cd:8c:cc:31:59:34:ba:bc:
                    80:46:a6:91:e3:76:38:1f:ce:2a:e3:ad:32:6e:11:
                    d7:4c:61:59:4d:55:72:c8:9a:70:bc:4d:4b:18:0a:
                    e5:88:fa:bc:41:96:05:00:61:12:82:b3:d8:a6:b5:
                    cc:e7:04:db:90:b9:11:b8:f7:77:d2:75:85:9f:6b:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2D:D6:F2:FB:F1:C7:37:EC:50:C9:6E:E1:2B:59:BC:2C:98:2D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/141a95a5-de2c-3970-8871-879f3b1ff1fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:72:cc:ab:a1:0b:bc:72:c5:0c:30:da:5d:c4:95:a6:08:e1:
         2c:20:8e:c6:31:75:d7:ae:4c:b3:6a:2e:c7:67:7c:0b:19:60:
         5f:45:26:27:2c:f2:52:a9:07:18:1d:c2:71:43:ae:93:9e:ac:
         f8:7f:6f:53:23:9d:8a:3c:3c:5d:89:a2:78:3e:8c:72:22:de:
         10:59:4b:3d:07:e1:8f:4c:60:25:6a:80:7d:6a:3e:e5:5c:9d:
         3a:0c:fe:1f:72:b0:a5:55:06:4b:2c:f2:b4:f2:c7:bd:20:60:
         62:56:fa:a3:ac:7d:04:e5:5a:e4:46:ca:bb:a8:0c:61:41:4c:
         80:cd:d5:b5:70:ed:21:e0:d6:ce:fa:6e:34:f5:76:41:9e:74:
         7b:7c:bb:58:7f:2c:45:7f:55:64:bc:80:91:9e:96:ed:f8:d4:
         c8:36:3d:43:72:05:10:2a:47:25:d5:a2:44:ab:2b:ca:3d:29:
         c2:0f:bf:04:e3:c4:79:41:d3:55:b7:3e:b4:c3:30:3a:11:d0:
         86:3a:97:67:9c:41:22:2e:2d:18:ca:ed:c7:4f:9f:2e:60:4f:
         34:4a:c5:bc:be:f4:56:17:df:fd:fb:80:d6:6c:17:e6:67:7c:
         6d:37:8b:d6:26:ef:47:0a:d8:bb:46:57:f5:17:c8:e0:e9:99:
         8e:58:8f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:14:05 2026 by rpki-client