Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/186183f5-9b72-3ef2-a77b-36bb41dcb713.roa
File:                     186183f5-9b72-3ef2-a77b-36bb41dcb713.roa (raw, json)
Hash identifier:          6QeIUNHw7e2583gvyxSXehqt1Trh0os+CvpWbDbh/Js=
Subject key identifier:   C8:2A:A1:19:50:F3:88:23:E5:E1:D1:5D:A7:9D:80:EF:D4:38:CB:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D22AC5149B6C634D17EDFED90
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/186183f5-9b72-3ef2-a77b-36bb41dcb713.roa
Signing time:             Wed 11 Mar 2026 18:06:15 +0000
ROA not before:           Wed 11 Mar 2026 18:06:15 +0000
ROA not after:            Tue 09 Jun 2026 18:06:15 +0000
asID:                     6167
IP address blocks:        2600:1010:a12a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:ac:51:49:b6:c6:34:d1:7e:df:ed:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 18:06:15 2026 GMT
            Not After : Jun  9 18:06:15 2026 GMT
        Subject: CN=8d1d2cb9-2e8d-4704-add7-1bdfecdbb97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:ce:8f:d2:2e:63:41:51:a0:d9:b9:ee:19:
                    74:61:ce:f2:fd:47:88:73:e5:10:f6:50:7d:26:67:
                    9e:75:f3:e6:6b:6f:e4:0a:51:ed:d4:33:ae:6c:a3:
                    b2:6b:de:e6:82:95:1a:c2:ed:03:4f:1a:98:21:e6:
                    7c:ff:6f:fb:a5:fd:0b:3d:ad:bc:90:0c:9a:d3:d0:
                    d6:8d:66:dd:e9:6d:da:5d:32:f8:59:c0:f8:36:4e:
                    36:25:32:58:4d:39:f3:67:67:a8:73:6a:bf:92:54:
                    5d:65:ff:88:2d:be:11:1b:9a:b6:56:3c:c6:61:e1:
                    69:45:37:f0:0d:75:b9:2b:e6:51:8c:fc:49:83:04:
                    94:6d:77:15:ee:cd:ce:b7:0e:26:e7:27:ec:e4:7f:
                    c6:50:b5:73:b6:00:54:0f:4c:52:01:f2:df:c0:20:
                    3a:74:94:89:5d:f2:16:e1:86:60:6f:ff:48:8d:ab:
                    1e:f5:92:39:b3:d5:2a:cb:74:6d:8a:fc:ac:cc:69:
                    a4:75:26:d4:2e:df:92:ed:b3:01:07:8a:f2:54:fb:
                    15:61:f9:52:85:dd:41:c4:82:a4:b6:06:fe:f9:8c:
                    95:86:f2:04:21:65:fc:b1:a1:90:db:31:50:2c:d8:
                    00:3e:31:cb:2a:a9:15:2c:0e:b6:a6:5a:12:fe:4b:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2A:A1:19:50:F3:88:23:E5:E1:D1:5D:A7:9D:80:EF:D4:38:CB:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/186183f5-9b72-3ef2-a77b-36bb41dcb713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a12a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:97:70:c7:37:83:97:91:e6:7f:c2:e0:c7:7a:6b:97:53:80:
         4e:b1:81:37:79:1d:ab:8b:3d:28:53:75:e5:a8:73:b5:a4:a0:
         b9:17:89:11:c3:07:d1:eb:22:f2:ef:cd:1a:5b:60:6c:bc:e6:
         f7:c5:fa:e8:41:ef:58:3b:60:07:92:3d:b4:90:e9:99:ee:48:
         09:74:1b:f0:59:cf:ba:cd:62:bd:62:87:f1:1f:1b:2c:01:e3:
         5e:fc:a2:27:69:b6:c3:8d:37:94:ae:c3:f0:c9:3b:1a:9f:d0:
         c7:87:08:98:b3:fc:a9:01:a1:05:b8:d6:97:9e:6d:c8:4b:1e:
         ca:70:74:81:ba:71:5f:df:88:f5:1f:db:52:2f:d7:02:36:71:
         cf:19:29:75:15:c2:cd:29:f6:07:c6:e1:b5:f1:4e:a5:0a:91:
         79:b7:d4:4e:5b:5a:48:7a:79:60:a7:47:2b:b1:6d:7f:09:82:
         76:50:32:58:0e:e5:de:c7:55:f8:2d:ba:24:81:0b:3f:bc:63:
         c3:cc:03:d7:86:f6:99:90:d1:90:29:17:6c:17:80:ba:2d:0e:
         d6:3c:8f:f8:3e:a9:5a:f6:15:bc:3a:4e:dc:cb:16:c3:ab:e4:
         5d:3d:74:29:c6:eb:57:b4:3f:2c:11:52:a6:ad:c4:d1:64:70:
         a2:c1:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:43:16 2026 by rpki-client