Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25675cef-85be-331b-9644-006779579cbd.roa
File:                     25675cef-85be-331b-9644-006779579cbd.roa (raw, json)
Hash identifier:          O/J8MwxRPhJDOXiF7oOunIK/ftk5jw5WXKSYzR/Se+Y=
Subject key identifier:   34:71:51:1B:74:97:68:49:0E:B9:86:E5:14:93:29:CB:8A:C6:13:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D0F3E24C1319858A038324F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25675cef-85be-331b-9644-006779579cbd.roa
Signing time:             Wed 04 Mar 2026 19:03:55 +0000
ROA not before:           Wed 04 Mar 2026 19:03:55 +0000
ROA not after:            Tue 02 Jun 2026 18:03:55 +0000
asID:                     6167
IP address blocks:        2600:1006:a030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0f:3e:24:c1:31:98:58:a0:38:32:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 19:03:55 2026 GMT
            Not After : Jun  2 18:03:55 2026 GMT
        Subject: CN=f709ca62-bcc0-4116-a054-190ce890a89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:ee:a4:ba:4f:65:da:b5:9b:15:44:9c:02:
                    54:52:46:2a:82:c4:38:9f:85:36:a1:e3:c0:2a:e8:
                    dd:f5:c1:1a:ac:6a:bb:da:08:a3:2d:c6:da:70:be:
                    f5:ca:7b:86:eb:1c:45:50:3b:9a:6c:43:31:86:ba:
                    0f:c9:af:07:49:1a:8f:2d:1d:15:fd:d6:58:6c:00:
                    8e:f4:c2:39:70:f1:3e:6f:26:16:16:7c:43:a3:34:
                    51:04:2f:73:f8:e4:06:27:08:b2:59:87:48:5b:65:
                    d4:57:c9:06:71:40:1d:df:18:b2:48:dd:6b:87:8d:
                    b1:2f:d0:79:97:86:10:2e:e8:b1:49:db:18:8a:ef:
                    f9:47:d4:4f:4e:2b:a4:50:ff:0d:10:fa:c7:19:e4:
                    91:e1:56:f8:27:51:eb:0b:1a:88:3d:2c:67:e8:29:
                    07:1f:fb:2c:e2:f6:8b:97:c1:e2:d0:21:e6:20:cf:
                    93:9a:36:ca:2c:1c:83:86:e6:08:b7:12:41:7c:1f:
                    2a:eb:94:f5:d3:cc:d8:dc:8f:94:d5:e8:9a:59:e2:
                    98:21:35:57:ee:5b:c0:27:ab:65:43:36:b0:e6:9b:
                    f5:4d:3d:15:ed:7c:67:74:81:77:cb:75:df:fc:4d:
                    ce:55:32:45:49:3f:9a:80:60:bf:68:19:99:9e:f8:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:71:51:1B:74:97:68:49:0E:B9:86:E5:14:93:29:CB:8A:C6:13:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25675cef-85be-331b-9644-006779579cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:72:b3:07:c1:bb:52:a5:f5:76:2c:72:3f:51:76:b3:b6:8a:
         11:db:8b:df:52:af:cd:f9:ff:7e:c0:fa:e7:84:56:6f:07:86:
         91:a4:ad:05:d2:72:73:ac:85:80:49:be:cb:4f:e1:6e:ff:75:
         db:3c:69:56:aa:cd:5f:1a:32:3b:d4:22:7d:f8:22:91:ec:54:
         87:bc:75:db:fa:cf:fd:e3:13:4a:d0:e7:8d:40:c6:2b:f1:d6:
         db:17:55:b2:0b:c8:b5:59:94:1d:8c:bc:db:d3:5d:c3:2e:93:
         9d:04:75:7c:32:60:76:f3:60:81:8a:32:78:37:56:e2:f2:e7:
         0a:1b:81:7e:3f:8a:10:0f:d1:a8:51:15:c5:80:4f:c0:51:71:
         1d:1b:d1:9f:2f:ad:4f:f8:47:fd:da:87:e7:b9:62:2c:b9:53:
         54:b1:61:d0:02:3c:d9:86:1d:d9:68:75:56:f8:b9:0d:de:82:
         57:88:8f:51:37:78:eb:a7:2c:0a:64:11:da:cb:dd:04:48:fb:
         f1:02:d1:98:6f:a7:9c:b3:1d:8e:e1:df:b6:5f:ff:d3:fc:94:
         c2:61:6b:8c:c7:50:74:75:52:fc:b8:fb:35:00:27:5e:25:f9:
         64:bc:81:42:05:80:ed:9b:4a:b3:0c:f0:a8:cc:58:9a:b1:73:
         88:0f:c5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:48:31 2026 by rpki-client