Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b250145-dbfb-32c0-94b8-7287d3e1a245.roa
File:                     6b250145-dbfb-32c0-94b8-7287d3e1a245.roa (raw, json)
Hash identifier:          DFtJLhhILo9NW5QeZmdzQcasjDTg16gBs/qNMcSPrWg=
Subject key identifier:   F3:77:C4:1A:32:E9:98:2E:3B:2D:7D:3B:A6:86:0F:20:DA:9E:69:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6AAA9ADD4C2C97E5A574A380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b250145-dbfb-32c0-94b8-7287d3e1a245.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        2600:1004:a123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9a:dd:4c:2c:97:e5:a5:74:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=0ae84d80-e545-4981-a892-1529ee9f738a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7c:57:7d:2b:fe:e4:b5:27:58:18:cb:bd:ca:
                    0a:e4:f4:f2:dd:32:84:4c:3c:0e:a3:f0:42:85:ac:
                    4f:a2:af:43:4e:84:af:ef:67:10:ed:06:35:63:84:
                    19:a4:2e:21:f1:1a:7e:64:37:d5:5c:66:4b:18:0f:
                    dc:6c:0a:5a:6f:03:db:1f:c8:db:0a:31:70:ac:2a:
                    b9:79:bc:f4:97:ff:b2:1e:32:48:29:d5:d2:68:d0:
                    a1:48:1e:8d:88:bd:7a:80:ec:7c:43:17:3d:38:c1:
                    60:95:b0:18:58:7a:fd:9c:d8:a4:6b:f0:d2:37:de:
                    f2:e8:c1:b7:aa:51:b0:b9:d9:3c:f0:fa:09:36:11:
                    bb:ca:b5:4a:c0:3f:12:94:1b:88:92:da:db:1d:3d:
                    a4:d5:e9:ed:26:c1:2d:fc:f3:67:61:15:73:cc:54:
                    35:83:0a:a3:ab:a2:45:9f:53:8a:aa:bf:be:b4:4f:
                    b7:2e:3f:43:a4:b9:1c:78:77:84:10:4c:2a:77:84:
                    fb:d9:af:b9:76:e5:ed:34:47:8c:f3:28:09:4c:05:
                    cd:8b:4b:a6:f8:a5:45:c0:e4:62:81:65:67:6b:cb:
                    83:6b:b0:90:20:3a:80:ee:64:b0:43:24:c0:d3:a8:
                    d3:80:f8:34:18:ff:a4:e2:14:11:22:7c:88:84:96:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:C4:1A:32:E9:98:2E:3B:2D:7D:3B:A6:86:0F:20:DA:9E:69:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6b250145-dbfb-32c0-94b8-7287d3e1a245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f9:f7:4a:e5:97:79:a9:9d:28:66:fd:cb:5a:af:76:70:56:
         d8:a4:aa:91:26:b4:c5:0c:59:b6:fb:61:97:dd:ff:7d:c9:a6:
         29:0d:d1:93:bf:aa:93:85:03:e2:bf:47:97:b6:74:35:37:ad:
         48:8d:e2:44:dc:d5:9f:fd:69:45:60:d4:e1:cd:41:b2:30:46:
         46:75:3a:11:72:65:c1:98:7c:fc:7e:50:3f:db:9b:da:8b:02:
         b9:60:fb:fb:4d:82:d1:47:51:6b:0b:cc:82:96:f0:f6:2b:17:
         ee:61:52:d7:64:00:4f:9c:4d:2a:17:ca:66:88:64:30:ee:89:
         95:0c:bb:ba:09:88:b4:ae:57:53:ef:fd:7b:57:27:88:1d:7a:
         6f:14:00:96:77:2b:2a:5f:1b:dd:4b:be:b3:86:0c:93:55:7a:
         75:3d:da:74:19:85:a9:d0:91:54:66:03:7a:d9:3c:b5:56:e4:
         74:7f:2a:ab:0c:f4:8f:ee:17:65:77:0f:38:ea:f6:08:c5:81:
         f8:0b:40:e3:38:40:0a:bc:43:7b:0a:dd:1c:ba:56:d6:f3:2f:
         d0:07:9a:a9:d0:2d:88:d6:a5:b9:9d:6c:0d:b4:70:ce:bf:b2:
         6f:c1:1b:9c:4c:1d:5c:68:26:7b:ae:76:2c:0e:1b:fc:33:a3:
         23:01:ad:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1qqprdTCyX5aV0o4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
MGFlODRkODAtZTU0NS00OTgxLWE4OTItMTUyOWVlOWY3MzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHxXfSv+5LUnWBjLvcoK5PTy3TKETDwOo/BC
haxPoq9DToSv72cQ7QY1Y4QZpC4h8Rp+ZDfVXGZLGA/cbApabwPbH8jbCjFwrCq5
ebz0l/+yHjJIKdXSaNChSB6NiL16gOx8Qxc9OMFglbAYWHr9nNika/DSN97y6MG3
qlGwudk88PoJNhG7yrVKwD8SlBuIktrbHT2k1entJsEt/PNnYRVzzFQ1gwqjq6JF
n1OKqr++tE+3Lj9DpLkceHeEEEwqd4T72a+5duXtNEeM8ygJTAXNi0um+KVFwORi
gWVna8uDa7CQIDqA7mSwQyTA06jTgPg0GP+k4hQRInyIhJZp4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPN3xBoy6ZguOy19O6aGDyDanmmWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmIyNTAxNDUtZGJmYi0z
MmMwLTk0YjgtNzI4N2QzZTFhMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQBKEj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG/590rll3mpnShm/ctar3ZwVtikqpEmtMUMWbb7YZfd/33JpikN
0ZO/qpOFA+K/R5e2dDU3rUiN4kTc1Z/9aUVg1OHNQbIwRkZ1OhFyZcGYfPx+UD/b
m9qLArlg+/tNgtFHUWsLzIKW8PYrF+5hUtdkAE+cTSoXymaIZDDuiZUMu7oJiLSu
V1Pv/XtXJ4gdem8UAJZ3KypfG91LvrOGDJNVenU92nQZhanQkVRmA3rZPLVW5HR/
KqsM9I/uF2V3Dzjq9gjFgfgLQOM4QAq8Q3sK3Ry6VtbzL9AHmqnQLYjWpbmdbA20
cM6/sm/BG5xMHVxoJnuudiwOG/wzoyMBrUA=
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:17:13 2026 by rpki-client