Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/918f70f6-0d0d-3f3e-ad36-a24ead4fdde0.roa
File:                     918f70f6-0d0d-3f3e-ad36-a24ead4fdde0.roa (raw, json)
Hash identifier:          reCwzk3FLiLrU8ey6XsNnX872gEuL2vW4VMsuXVAl6I=
Subject key identifier:   9E:AA:06:50:22:D2:98:D5:4E:A6:23:2D:BC:52:CF:B0:C4:24:65:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B3FB1E774EDA56C955980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/918f70f6-0d0d-3f3e-ad36-a24ead4fdde0.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100e:d030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:3f:b1:e7:74:ed:a5:6c:95:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=af0ef59f-4132-48c7-b753-87d31bcae444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:44:9d:e2:ee:24:03:8a:44:d6:4e:fd:a3:
                    22:28:c0:dc:2a:c2:bc:d8:e0:66:25:c8:db:0f:60:
                    14:ae:14:25:ac:1d:31:aa:d4:51:69:37:35:aa:dc:
                    a1:97:9f:10:23:bc:f8:93:01:d3:99:97:4e:0f:9a:
                    7e:5f:79:56:88:b8:72:5d:a3:3e:fc:6c:61:07:5c:
                    48:08:be:36:ca:46:9e:74:c0:ee:76:c9:ae:cd:87:
                    62:8e:86:0f:14:43:8d:7a:d6:67:31:50:ce:c8:f0:
                    30:4d:5a:27:b6:6e:43:ce:ba:29:33:c4:c7:12:51:
                    a9:d6:fd:45:6f:a5:a4:8b:85:0d:46:92:9a:99:cb:
                    30:52:e5:cf:eb:cd:6e:b5:11:aa:77:f3:9a:bc:25:
                    00:a8:b9:95:ed:59:0b:85:25:ba:57:0d:36:29:e3:
                    87:41:3b:1e:b8:02:49:d7:78:3f:9e:2e:21:76:a8:
                    1b:33:d1:3c:32:68:7f:48:7f:a8:66:91:b1:fe:a3:
                    43:72:32:4c:43:1d:78:98:c5:27:70:96:0f:e1:ad:
                    c9:da:55:9c:ee:25:9b:af:27:f9:76:1d:63:23:8d:
                    70:8b:45:9e:bc:31:d6:82:d0:95:c9:d8:b5:7a:06:
                    8b:20:f2:7d:2f:7e:5a:31:ec:bb:54:94:15:83:18:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AA:06:50:22:D2:98:D5:4E:A6:23:2D:BC:52:CF:B0:C4:24:65:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/918f70f6-0d0d-3f3e-ad36-a24ead4fdde0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:d030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0e:25:15:81:17:40:f1:dc:a0:4d:c1:73:4d:39:c7:5f:8c:
         80:8e:48:f1:a7:f2:65:fe:db:38:f1:b0:bd:f1:f8:54:cc:6c:
         67:f9:97:7f:05:a5:0d:cb:bc:c2:55:a3:66:ed:a5:24:d0:77:
         35:8e:9e:84:d7:06:68:46:14:d4:15:90:fc:d9:7e:cc:ae:71:
         b2:39:30:1f:69:78:53:82:16:c2:b2:c5:6e:86:80:2e:8f:87:
         5a:af:ea:8b:9a:a0:b3:52:62:35:36:7b:ee:49:b5:e0:4b:95:
         d6:22:cc:31:ad:d8:20:2b:eb:b7:71:0c:b5:62:ef:d3:61:2e:
         67:05:f9:82:d3:08:3f:90:bc:86:a7:c3:e3:f5:47:23:61:e0:
         d7:b0:af:7e:8c:99:70:cd:96:5e:d1:b9:3e:ee:e5:36:5d:53:
         cb:60:95:65:a6:aa:eb:18:3c:83:53:84:da:aa:d7:23:04:9e:
         e8:a8:f8:46:e3:a2:aa:15:f8:a8:a6:45:dc:42:88:57:e8:a8:
         d7:30:70:13:e2:de:4c:fa:65:38:44:ef:59:f8:46:e7:07:3a:
         b5:34:2e:c2:05:46:8c:ce:fd:34:cb:9c:1a:9d:16:ea:77:07:
         a9:9c:23:8d:30:8d:99:c6:be:e8:20:64:25:9e:ea:9c:cb:f3:
         19:c0:41:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:05:39 2026 by rpki-client