Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac6bbc59-27d6-3d81-829d-97232c4db6c1.roa
File:                     ac6bbc59-27d6-3d81-829d-97232c4db6c1.roa (raw, json)
Hash identifier:          EwL50TR/h5neRmjupXAfK+sYyLRMncrmHNXDfB2VN2I=
Subject key identifier:   EF:A2:97:C6:59:44:49:AB:43:56:56:FF:01:4C:DE:B7:60:96:13:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D6AAA9B4AC7C8D021B2C1D7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac6bbc59-27d6-3d81-829d-97232c4db6c1.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        2600:100f:a023::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9b:4a:c7:c8:d0:21:b2:c1:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=a973e47a-20ef-41c5-9dfc-421efb823712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:d3:89:c7:1d:f3:9c:70:4a:f2:07:04:70:
                    c4:b7:5c:62:00:47:b0:4e:88:fd:12:d7:1c:76:42:
                    e6:fa:43:3b:18:6a:f9:9d:f3:25:a2:f9:a5:92:be:
                    28:db:36:94:f0:a3:e1:c0:db:36:92:29:65:b6:fc:
                    44:5e:83:75:99:1c:c9:f8:26:b4:53:23:a0:e5:27:
                    ac:8b:17:01:fb:a8:6c:dc:d4:56:5e:40:0b:c7:7b:
                    93:18:4e:56:9d:67:10:21:39:e3:e7:2a:2c:d5:2e:
                    34:a4:6f:ff:b8:a9:6d:62:76:1c:39:13:b2:d8:a4:
                    83:c9:4f:62:06:02:39:a4:a5:36:bf:38:fa:2f:8a:
                    3c:9e:55:df:ae:00:46:9a:d5:3f:5b:ec:54:a1:15:
                    87:56:74:ae:16:2a:3c:eb:6d:11:36:f4:b5:7c:29:
                    49:5a:46:1a:a6:d9:77:f9:fd:1a:6d:aa:11:c3:08:
                    2a:95:4d:ec:95:0c:23:16:3b:d3:79:be:7b:29:ef:
                    9b:8e:6d:fc:b9:d1:7c:bf:29:be:62:cd:c1:7f:b5:
                    f6:5f:05:bb:1c:0c:23:8a:00:79:ee:d8:0d:9a:ca:
                    e9:2a:31:ce:40:65:99:ad:a8:1a:e4:e9:37:e4:75:
                    35:64:30:cb:7a:11:bd:ca:41:dc:14:91:11:3c:8d:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A2:97:C6:59:44:49:AB:43:56:56:FF:01:4C:DE:B7:60:96:13:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac6bbc59-27d6-3d81-829d-97232c4db6c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a023::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:87:be:df:2e:22:7b:9d:03:0d:a8:b0:27:16:22:8b:01:5e:
         84:e1:42:33:73:6a:fc:df:0c:b8:d6:c5:16:92:1c:ca:15:1e:
         f4:3d:b9:b0:a9:1a:d3:bc:ca:65:b5:2c:08:d5:4d:d7:fa:0e:
         0a:67:4b:2e:fb:21:bb:05:c4:f7:a9:b8:c9:7c:14:02:af:60:
         91:f1:10:1d:f0:9a:19:dc:ac:d1:9a:52:0e:86:11:25:ce:d1:
         45:32:d2:76:db:e4:5b:49:1d:54:30:d8:81:ae:8e:be:b5:c1:
         b1:e0:f4:f0:3d:b3:14:7b:9e:90:2e:81:d3:5a:57:74:71:65:
         f4:a6:bd:99:d1:bf:d0:21:bb:f0:98:34:6e:c5:c5:18:f1:29:
         c6:b1:ae:93:bf:89:19:1e:cc:41:67:3b:01:da:41:de:0a:9e:
         2a:d7:a3:61:66:42:67:08:2c:07:02:80:14:ab:a4:4e:74:ce:
         35:a3:d5:f0:e2:46:b0:87:8a:9a:16:1d:3e:92:95:c6:b8:41:
         b6:71:3b:2b:3c:fb:04:ea:84:d9:39:9d:14:ad:46:51:f3:f1:
         95:e1:4d:c2:5f:fb:8d:14:9f:f8:0b:ae:66:10:8f:78:25:a6:
         7a:13:36:4e:c5:56:6e:73:1c:72:cb:25:f5:d1:52:f8:9d:06:
         98:b6:9f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:19:00 2026 by rpki-client