Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81c9a157-a77d-3f2a-a90d-43afe0c176b6.roa
File:                     81c9a157-a77d-3f2a-a90d-43afe0c176b6.roa (raw, json)
Hash identifier:          xUjqcxcdfE/pAHnLEKOlZE+T0DCVLuh8/IhIwRNgflE=
Subject key identifier:   FF:01:5D:19:9E:8C:93:31:92:85:03:49:77:A2:3D:7A:12:8D:6A:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B3C23B636206EDAF97C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81c9a157-a77d-3f2a-a90d-43afe0c176b6.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100e:9f10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:3c:23:b6:36:20:6e:da:f9:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=4337a533-6d2d-482b-931a-83a1200ea998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:fb:f2:f6:68:e2:e4:ea:a6:5b:14:24:30:
                    32:f5:c0:c7:8a:10:43:31:ce:b4:0a:5a:f8:12:27:
                    84:8f:37:1f:58:75:da:42:de:0a:5d:6e:f7:f6:4f:
                    11:03:33:33:37:07:e8:c9:0f:81:b2:ac:14:92:46:
                    90:5b:6a:29:2d:2a:a5:c2:78:0a:84:8a:0b:68:8f:
                    1c:c8:60:17:77:aa:79:14:70:c9:2c:39:e7:30:14:
                    92:f5:20:85:58:c7:37:4e:dc:ab:94:cd:81:04:7e:
                    0b:aa:91:52:9b:fe:f9:8e:cd:6a:00:6a:40:ad:1e:
                    d9:a6:31:02:37:85:a7:0f:e3:fc:51:8f:b9:e6:73:
                    9c:5d:3a:d8:9e:c2:e4:da:33:7b:e7:1c:02:a6:26:
                    1c:f5:a8:c1:6b:69:8f:7b:1d:f0:d8:ac:fe:6b:50:
                    b1:32:96:87:26:3d:19:ad:96:7d:cd:f9:85:67:c5:
                    14:7b:30:ab:4f:f5:ca:d9:f9:4d:27:47:e2:32:1b:
                    0e:e9:1b:ad:2c:b3:95:ca:96:b7:e1:e3:c5:51:17:
                    e5:9a:f7:79:25:37:e1:61:a1:85:30:37:00:62:42:
                    be:38:9a:10:65:dc:d7:a5:0d:cf:34:5b:1c:4f:d2:
                    0f:27:73:23:56:99:71:cf:14:13:23:fc:05:cd:64:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:01:5D:19:9E:8C:93:31:92:85:03:49:77:A2:3D:7A:12:8D:6A:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81c9a157-a77d-3f2a-a90d-43afe0c176b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:9f10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6e:cb:d4:73:4d:a5:00:0a:8b:b1:73:82:b7:a2:47:f3:a8:
         43:4c:bf:cc:1f:9e:4f:2c:b4:85:48:08:24:79:5e:16:ec:4e:
         73:11:13:b6:50:2b:f0:07:86:fc:dc:ed:e5:e2:ab:4f:fb:55:
         cd:2e:37:56:53:db:10:8e:79:cc:64:63:76:4e:5f:39:aa:39:
         1a:e8:8b:17:3a:3a:09:1e:b9:f9:10:58:2c:42:1a:0b:24:7a:
         8b:86:16:79:63:9b:38:b4:f8:a3:65:a7:b3:0c:de:a7:b6:de:
         a1:a8:df:0f:67:83:78:2d:ec:de:26:ff:51:2f:c8:4a:2b:f8:
         ae:b7:01:1f:c5:ea:0d:ae:14:ac:55:0b:4e:71:d3:01:97:e7:
         27:6b:af:a2:59:0b:bc:7d:d2:c8:41:8e:d6:fc:5c:25:94:9b:
         b3:d5:b2:3e:6b:56:64:74:97:47:0f:82:93:c7:04:7c:1d:e4:
         97:61:8c:f1:1e:cb:08:25:f8:de:75:e1:11:c2:cd:b1:0e:c3:
         ff:42:9a:57:fb:10:a0:2e:a7:7e:c7:50:28:31:1f:f5:db:39:
         69:e5:aa:64:38:7b:c6:2e:58:29:bf:2c:a3:1b:2f:62:7e:27:
         6b:74:ae:a3:6a:8f:78:b0:d6:c0:7f:86:94:74:06:5c:84:9b:
         df:28:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:06:43 2026 by rpki-client