Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d9b9089-6ecc-348f-818a-d280e2503346.roa
File:                     1d9b9089-6ecc-348f-818a-d280e2503346.roa (raw, json)
Hash identifier:          b40cXTo07+H8Fw1JhT1yFV5k6SDb+c0S/LScdzS6ziA=
Subject key identifier:   31:60:2E:38:9C:89:B5:A2:74:D9:99:F4:44:98:34:34:25:67:42:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6302A415EBF9C5A1717F3C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d9b9089-6ecc-348f-818a-d280e2503346.roa
Signing time:             Fri 03 Apr 2026 19:11:55 +0000
ROA not before:           Fri 03 Apr 2026 19:11:55 +0000
ROA not after:            Thu 02 Jul 2026 19:11:55 +0000
asID:                     6167
IP address blocks:        2600:100d:a12c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:02:a4:15:eb:f9:c5:a1:71:7f:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  3 19:11:55 2026 GMT
            Not After : Jul  2 19:11:55 2026 GMT
        Subject: CN=ca65772b-dfae-4bd3-9c05-17446b2eaa93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:35:b1:86:d8:36:58:65:b5:a6:31:da:b8:
                    0b:a3:7e:10:33:52:9e:34:6e:69:df:f5:59:40:df:
                    22:0c:dc:aa:76:db:0c:2d:71:06:a8:05:06:8f:c9:
                    77:59:f8:cc:e2:f7:ce:23:39:e0:ff:d8:ad:f3:45:
                    43:b3:fd:6c:c5:85:7f:a5:ff:06:4c:e0:99:02:1e:
                    71:76:ab:c0:53:ef:9c:19:d2:1b:8a:6b:9f:c2:96:
                    30:0b:8c:e6:02:3e:b0:0e:5c:33:3a:c6:e4:9d:5a:
                    14:9d:c1:36:af:71:6b:e0:67:e2:d8:8c:eb:5e:85:
                    b8:6f:13:a3:4e:bd:c4:81:8c:78:21:93:7c:94:2b:
                    f9:74:09:fe:59:ac:cb:9b:4a:0d:aa:f9:44:33:d1:
                    ff:2d:6f:e6:53:79:10:9f:5c:0b:0d:5a:41:81:2f:
                    76:36:27:9f:b9:d7:7c:8d:fa:6e:c0:bf:0d:29:15:
                    97:7c:3e:c7:1d:d7:a0:d7:3e:e7:b8:ee:9c:75:f9:
                    fc:ea:65:00:54:48:9b:17:41:e4:a2:b9:c2:e5:d2:
                    66:4c:9c:0d:10:9d:9e:6c:db:cf:a4:a4:40:47:8c:
                    a8:72:57:76:96:d8:a5:87:99:1b:8c:92:b0:57:49:
                    79:86:60:53:28:a0:27:cc:6e:4a:1c:3f:ba:2b:7a:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:60:2E:38:9C:89:B5:A2:74:D9:99:F4:44:98:34:34:25:67:42:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d9b9089-6ecc-348f-818a-d280e2503346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a12c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:28:43:6a:3d:af:b7:c3:b9:29:76:05:28:95:f5:20:0c:
         b9:5f:50:b1:a7:18:bd:39:76:ab:f2:e3:34:f1:f1:9a:95:f5:
         db:c0:93:1f:f5:73:2e:3e:92:e5:68:26:31:6c:fd:e7:4b:1f:
         19:70:4f:37:a1:2e:d4:c0:33:27:ca:bd:42:b2:97:34:24:58:
         d6:1a:10:bf:51:e9:62:61:96:38:32:96:90:2f:54:37:ee:15:
         54:2a:b3:b8:ec:b9:e3:fe:c9:69:09:f0:4a:f6:be:0d:c1:af:
         d5:82:e9:e2:bf:d4:c8:42:a9:16:a8:69:36:d7:be:81:77:12:
         2e:ac:f7:f6:30:88:e4:d1:84:3d:8f:04:36:9b:9a:1f:06:30:
         01:ba:c1:84:5f:8e:01:db:8c:bb:dd:72:b2:fa:b2:0e:cc:61:
         30:41:a1:7d:4c:ec:04:2e:77:25:89:45:cc:2b:74:51:fc:95:
         31:00:2b:9e:7f:80:f1:41:57:bc:04:55:ab:b3:8b:7c:85:d1:
         80:8f:6a:e8:45:13:92:d8:21:fd:d0:10:4f:9f:3b:e9:62:c8:
         48:5a:ac:30:74:80:54:fb:05:4e:76:3e:08:83:8b:e1:4d:f2:
         4e:44:15:ef:98:f0:9f:f3:e8:00:e6:14:83:95:86:d9:97:07:
         c7:93:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:14:05 2026 by rpki-client