Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8437b5dc-0b94-38f0-a0e4-334b77d3512f.roa
File:                     8437b5dc-0b94-38f0-a0e4-334b77d3512f.roa (raw, json)
Hash identifier:          lXZ5b9DjruE8jM4RIWqoXqZdzQdn3Hj1zcGPPtG9+MI=
Subject key identifier:   A3:22:99:5C:5E:D4:F8:A9:F5:97:88:75:A4:50:0C:3A:33:17:2C:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D22AC4F53BCABB411EF7A0E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8437b5dc-0b94-38f0-a0e4-334b77d3512f.roa
Signing time:             Wed 11 Mar 2026 18:06:15 +0000
ROA not before:           Wed 11 Mar 2026 18:06:15 +0000
ROA not after:            Tue 09 Jun 2026 18:06:15 +0000
asID:                     6167
IP address blocks:        2600:1005:a02a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:ac:4f:53:bc:ab:b4:11:ef:7a:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 18:06:15 2026 GMT
            Not After : Jun  9 18:06:15 2026 GMT
        Subject: CN=78c8c538-a3da-4a40-8d69-1d9b5179463c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:64:62:63:29:a0:02:67:8f:e8:14:f9:a9:
                    0d:ce:0a:ca:ac:79:b6:2b:5b:14:f3:6a:eb:3c:a9:
                    ba:ef:6f:68:a1:5a:67:c2:a3:a2:a7:0e:03:01:77:
                    55:ce:e1:d8:f7:c3:fc:7f:12:c3:86:d4:51:70:dc:
                    2f:ca:81:c6:16:45:dd:30:a4:f2:24:88:7b:7f:fe:
                    45:c6:6c:26:3a:5b:de:4c:ff:91:0f:88:c6:57:22:
                    f0:05:5b:6c:f9:94:06:ea:f3:2e:e6:50:bb:56:90:
                    04:c1:91:67:4b:55:6b:8c:9a:ee:dc:f1:59:2c:86:
                    95:26:01:c1:b1:f4:58:e0:b7:b0:7d:27:96:b0:e4:
                    65:99:16:2b:3b:58:b0:d3:bd:ed:d9:db:c5:18:df:
                    ba:fa:49:e4:5e:c6:8d:2a:04:21:83:46:db:84:60:
                    99:5b:10:32:08:53:56:0d:5b:7c:23:d6:aa:ea:65:
                    3f:3f:1a:28:10:a1:44:60:9d:77:c2:fb:66:93:1a:
                    fb:1f:31:dc:71:8e:1a:b3:63:a1:db:23:47:f4:3d:
                    ad:27:b4:e0:35:55:f9:5b:50:11:c3:64:a1:13:6a:
                    0e:32:13:d1:68:c1:ce:59:d4:a5:b0:98:df:d4:57:
                    4b:52:8f:97:a4:aa:bb:95:06:ce:b4:80:0d:47:e2:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:22:99:5C:5E:D4:F8:A9:F5:97:88:75:A4:50:0C:3A:33:17:2C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8437b5dc-0b94-38f0-a0e4-334b77d3512f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a02a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:50:ef:07:0a:a0:ce:6f:b4:2c:a1:3c:64:e9:bf:36:13:b9:
         f2:70:d3:33:c1:ca:6f:d8:5e:5f:97:c6:5f:a2:ef:7e:b1:dc:
         c6:97:ab:80:17:fb:72:67:54:3c:c4:54:56:71:29:99:2c:17:
         1c:bc:d1:b1:07:c6:29:02:9e:64:dd:58:36:40:82:8e:ff:03:
         81:d6:90:b2:29:d3:b8:a6:71:0e:b2:cd:08:06:b7:97:97:fa:
         20:2b:08:e2:14:f1:b0:99:23:96:34:ad:04:eb:61:1b:6c:80:
         9d:e5:b3:1c:bf:dc:8c:75:51:5c:be:d2:7e:da:d2:58:9f:bf:
         80:78:0d:11:95:27:65:af:d4:cb:8a:a1:e6:f3:f4:bb:8e:d6:
         e4:95:f5:33:d8:10:67:e0:b0:cb:e3:0e:d5:9e:08:d7:f2:8b:
         ba:26:b9:55:93:59:a6:fd:7a:2f:c8:d3:60:cf:10:bb:25:6b:
         a0:f0:e7:88:de:07:55:81:92:be:53:73:45:44:78:8f:a1:ea:
         31:2b:94:24:0c:f5:ab:28:2e:2a:c6:48:ee:b9:d7:2a:ae:65:
         fd:fa:fb:97:72:e7:f1:ba:f8:7b:76:9a:31:30:c5:19:59:1f:
         c5:92:ae:dc:d6:14:d4:09:84:fb:7a:d6:b0:7e:56:07:53:5c:
         96:93:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:43:51 2026 by rpki-client