Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3030f96e-d731-3c43-a2be-d341ea154131.roa
File:                     3030f96e-d731-3c43-a2be-d341ea154131.roa (raw, json)
Hash identifier:          5Q0vXqoxzFxaKwqyoSvatufcXdKI+5LbhQdKTnOH0ig=
Subject key identifier:   47:83:37:C5:D6:CB:EF:F5:20:E5:9E:14:C5:8C:07:E0:35:AE:FF:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B3D145CDD50480930FD90
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3030f96e-d731-3c43-a2be-d341ea154131.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100e:b0c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:3d:14:5c:dd:50:48:09:30:fd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=64a4c3de-fa79-46c7-8f91-c596efbb1d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:d3:a4:1e:3c:ca:cd:b5:7e:52:88:98:4b:
                    d0:d4:c9:a6:9e:ad:34:ad:e7:b6:78:b8:42:ec:1d:
                    fb:13:6c:05:d1:06:51:72:bf:a1:df:f5:43:24:af:
                    18:3f:99:fb:f9:9c:77:03:c6:67:71:7d:69:31:a2:
                    c9:35:4b:e2:4f:ff:cb:77:64:94:8a:22:80:e0:05:
                    0b:ff:a8:10:36:c9:a5:b4:9f:d3:61:b1:60:8e:fe:
                    9a:8b:d6:dc:d7:0a:b2:f5:ae:c6:92:97:d3:44:a9:
                    ac:94:e8:44:bb:2d:10:e6:7b:ba:07:5a:b8:25:1e:
                    d7:de:ea:59:3d:bb:e0:e6:da:01:f8:55:c5:e5:52:
                    56:74:88:08:2e:25:7d:90:6a:8d:eb:e4:79:75:02:
                    43:f2:3a:b0:49:c9:ad:d4:ab:4e:e0:3c:a5:16:bd:
                    d6:ee:b1:87:33:94:3b:9b:65:4b:d2:81:3d:18:55:
                    0f:0c:d0:e0:cc:d8:a9:8d:8e:0a:84:d4:05:33:ce:
                    2f:52:ad:c7:78:cf:ed:70:7b:e9:a3:6b:0f:10:e1:
                    eb:8a:9f:2d:dd:0f:f2:5b:8e:d2:b8:14:4f:93:85:
                    6d:8f:23:0e:57:9f:ae:98:93:31:07:fe:56:99:29:
                    c3:d4:c7:cb:44:6e:1c:56:a1:24:54:16:14:36:99:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:83:37:C5:D6:CB:EF:F5:20:E5:9E:14:C5:8C:07:E0:35:AE:FF:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3030f96e-d731-3c43-a2be-d341ea154131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b0c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:69:74:0b:ae:96:83:73:f1:e8:36:7d:fd:ef:a8:a6:61:d1:
         4c:8a:c4:8f:ae:c3:36:dd:d1:9b:96:e3:60:49:96:d1:6c:32:
         a9:b8:cf:c9:df:7e:72:b3:92:1e:fc:3c:ff:99:98:97:27:23:
         df:e1:ad:29:e5:2a:f0:e3:96:27:9d:e0:ea:08:60:58:aa:b1:
         fd:95:81:68:ea:96:f7:94:fc:2e:1c:ba:3e:49:a2:87:8a:a6:
         da:41:12:dd:32:51:b3:1d:c5:18:bc:d7:96:77:d6:8b:ba:50:
         8b:9d:81:7b:4b:e6:90:eb:7a:df:79:08:0b:68:cd:ab:f4:e1:
         da:32:15:67:42:8e:e1:f3:87:72:e9:4f:85:3d:b3:4f:bf:de:
         1f:98:84:31:a3:45:76:1c:3b:37:ac:00:d5:fe:69:53:a6:82:
         35:4c:0d:c1:8c:ec:fb:ec:d2:89:80:57:09:4f:61:a3:1e:44:
         6b:d9:36:3e:85:a5:39:9c:f0:05:04:24:44:b4:96:f8:fd:06:
         07:dd:2f:74:29:3d:42:6b:9e:f0:c1:24:78:f4:ee:a5:9e:97:
         28:75:43:cc:a4:52:c2:4a:cb:67:c0:df:89:9a:08:a2:32:cb:
         75:dd:1f:79:7c:e6:9e:7f:ec:76:bb:b6:8e:a5:9b:6b:3c:eb:
         bb:fc:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 21:00:27 2026 by rpki-client