Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/534c8d81-1809-3e14-a333-d838d0af04cb.roa
File:                     534c8d81-1809-3e14-a333-d838d0af04cb.roa (raw, json)
Hash identifier:          ikS+pVFIZHzQp3zdQmaODlHftN1C+bk9zO61s33T9TU=
Subject key identifier:   7E:16:66:C8:23:7D:39:FA:31:A6:5D:12:5A:45:55:7A:44:91:7D:47
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B3E5DF53F3FF57D85B4A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/534c8d81-1809-3e14-a333-d838d0af04cb.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100e:b1e8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:3e:5d:f5:3f:3f:f5:7d:85:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=cb94d8ea-3f61-4026-9b0d-fafde9a9cc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:98:f9:03:7c:ad:69:d0:8e:46:58:af:86:16:
                    25:33:13:f0:9d:08:84:f8:2a:af:07:a9:24:c4:c8:
                    0a:13:9c:4e:d5:56:9d:16:e7:92:f7:26:a0:74:c9:
                    a9:95:49:7c:b1:ef:82:b6:4d:2e:3a:51:22:24:12:
                    3c:6a:53:73:35:28:21:26:07:d3:48:d5:af:1f:10:
                    8f:c9:06:60:d5:30:e7:92:f6:f5:f6:c3:07:bc:9b:
                    90:37:b5:b7:63:51:58:3d:bb:ab:c4:57:78:1c:f3:
                    18:fc:0f:21:9c:aa:25:48:ba:8f:25:7e:9e:67:84:
                    81:2c:bb:be:b1:e6:0c:f4:c7:09:d1:9e:40:d3:8c:
                    2d:a3:e2:66:23:d6:1a:55:cc:29:a6:41:33:15:1e:
                    83:2c:dc:9b:7c:f3:60:3a:12:87:18:6d:09:16:84:
                    9d:d5:33:57:32:32:4b:28:00:f5:65:2b:71:65:0c:
                    f3:80:c5:bf:92:4e:a3:94:fb:44:3c:5f:82:01:40:
                    59:6c:6e:b3:a8:08:5b:39:60:f8:b2:f8:45:d4:32:
                    5c:69:73:a2:a7:54:e1:78:b6:a6:6d:8e:48:7b:68:
                    d4:6f:3b:21:9f:19:75:f7:fd:4d:97:48:ad:05:32:
                    26:47:b7:a0:6a:f4:10:2a:96:48:56:8b:16:bf:9c:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:66:C8:23:7D:39:FA:31:A6:5D:12:5A:45:55:7A:44:91:7D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/534c8d81-1809-3e14-a333-d838d0af04cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b1e8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:41:59:01:c8:21:55:a6:b8:a2:94:89:e2:3e:2e:e3:06:3f:
         39:e1:44:99:b0:b0:20:bf:9d:b9:12:eb:2e:54:95:0c:c6:ca:
         42:d1:9c:c3:10:d0:09:b4:b2:2e:3b:72:53:3f:97:f4:27:37:
         16:4b:e9:d4:d2:9a:d5:fd:78:35:ab:b5:e0:c5:eb:53:21:92:
         e4:46:a3:cb:db:a4:73:7e:1a:19:17:0f:32:cf:77:79:ee:ad:
         e0:94:b7:45:95:50:65:c2:ec:ec:eb:6e:d7:ef:9a:71:27:dd:
         43:ae:31:1c:ee:eb:eb:5f:ca:59:3f:36:21:84:3f:25:97:4a:
         d7:59:0f:24:b4:b5:d0:81:b1:70:15:ae:f5:30:fc:63:77:bd:
         2f:73:17:3f:3d:f6:95:c0:fe:d9:40:e7:6e:bb:09:ce:e7:37:
         58:df:a1:1c:b1:98:38:5b:ee:08:43:78:e9:35:51:a0:1e:46:
         95:79:76:b1:12:b4:03:ff:0d:c5:b2:b5:55:5d:76:73:a2:9b:
         fd:a4:a7:2b:8e:a2:8c:f0:df:9a:ce:00:9d:15:f9:91:2a:b0:
         b8:ad:8b:e3:8a:a4:cf:81:ae:c6:d8:ab:b3:8b:74:55:4c:dd:
         45:8c:7f:77:7b:b8:e3:15:ee:72:6b:bd:37:40:e3:21:c1:26:
         93:30:77:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3kGz5d9T8/9X2FtKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
Y2I5NGQ4ZWEtM2Y2MS00MDI2LTliMGQtZmFmZGU5YTljYzBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJj5A3ytadCORlivhhYlMxPwnQiE+CqvB6kk
xMgKE5xO1VadFueS9yagdMmplUl8se+Ctk0uOlEiJBI8alNzNSghJgfTSNWvHxCP
yQZg1TDnkvb19sMHvJuQN7W3Y1FYPburxFd4HPMY/A8hnKolSLqPJX6eZ4SBLLu+
seYM9McJ0Z5A04wto+JmI9YaVcwppkEzFR6DLNybfPNgOhKHGG0JFoSd1TNXMjJL
KAD1ZStxZQzzgMW/kk6jlPtEPF+CAUBZbG6zqAhbOWD4svhF1DJcaXOip1TheLam
bY5Ie2jUbzshnxl19/1Nl0itBTImR7egavQQKpZIVosWv5y4JQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH4WZsgjfTn6MaZdElpFVXpEkX1HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTM0YzhkODEtMTgwOS0z
ZTE0LWEzMzMtZDgzOGQwYWYwNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDrHo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFpBWQHIIVWmuKKUieI+LuMGPznhRJmwsCC/nbkS6y5UlQzGykLR
nMMQ0Am0si47clM/l/QnNxZL6dTSmtX9eDWrteDF61MhkuRGo8vbpHN+GhkXDzLP
d3nureCUt0WVUGXC7OzrbtfvmnEn3UOuMRzu6+tfylk/NiGEPyWXStdZDyS0tdCB
sXAVrvUw/GN3vS9zFz899pXA/tlA5267Cc7nN1jfoRyxmDhb7ghDeOk1UaAeRpV5
drEStAP/DcWytVVddnOim/2kpyuOoozw35rOAJ0V+ZEqsLiti+OKpM+BrsbYq7OL
dFVM3UWMf3d7uOMV7nJrvTdA4yHBJpMwdzU=
-----END CERTIFICATE-----
Generated at Thu May 28 21:01:28 2026 by rpki-client