Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6c3fac7-93ae-38ff-936c-df19fff95bdd.roa
File:                     c6c3fac7-93ae-38ff-936c-df19fff95bdd.roa (raw, json)
Hash identifier:          yQFDUauohXej51nFt0P06w0kbGCvtriRQQlZkV+lbj0=
Subject key identifier:   CA:F4:EA:4F:2B:68:13:16:B1:46:39:B9:8E:D9:CA:93:06:39:D1:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D361AFF424039B7AB55EE5300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6c3fac7-93ae-38ff-936c-df19fff95bdd.roa
Signing time:             Wed 18 Mar 2026 17:09:37 +0000
ROA not before:           Wed 18 Mar 2026 17:09:37 +0000
ROA not after:            Tue 16 Jun 2026 17:09:37 +0000
asID:                     6167
IP address blocks:        2600:1009:130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:1a:ff:42:40:39:b7:ab:55:ee:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 18 17:09:37 2026 GMT
            Not After : Jun 16 17:09:37 2026 GMT
        Subject: CN=98bcc487-b2ef-4efe-b0a2-57e62b2ca15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:ee:4a:a0:97:ac:99:24:f4:1b:6e:04:f4:
                    b0:ce:97:37:ac:8b:ef:7e:aa:59:4e:79:38:d2:a1:
                    29:34:34:17:b9:f0:af:8a:ea:2b:25:80:2f:a9:dc:
                    3b:e8:2b:cd:fd:91:db:f5:fe:f4:4e:eb:aa:79:d2:
                    ab:fc:b1:65:a8:e7:48:9a:de:ea:db:15:db:c7:de:
                    82:d9:c6:9d:8d:61:7d:f1:ab:48:53:7e:99:40:11:
                    5d:70:1e:3d:44:dd:dc:0b:ad:6b:56:85:40:f6:d2:
                    6b:3f:8e:5a:4a:19:42:4b:c1:78:85:6f:1c:e6:db:
                    14:60:0e:fe:00:99:35:e2:0b:0c:f2:87:1a:f3:e4:
                    ed:9f:00:ad:ef:d1:ce:5b:0b:d2:46:ea:64:ee:4c:
                    f3:d3:42:84:a3:95:2e:3f:10:7b:67:d4:b3:94:bf:
                    09:ac:2a:85:e0:8b:6c:04:e0:cb:46:fe:2b:d4:d7:
                    a0:48:c8:ea:7e:09:36:c2:ba:26:b7:55:8a:49:c1:
                    0c:74:6d:16:79:34:cd:59:5c:ef:47:b3:28:e1:23:
                    9d:9b:86:f6:fe:d3:46:11:d4:a2:f9:d6:3e:7e:2f:
                    24:0d:9f:b1:06:71:a3:f1:d4:66:dc:bc:d3:85:0b:
                    19:a3:8f:ce:07:71:82:c8:52:81:76:e3:b2:b1:4f:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F4:EA:4F:2B:68:13:16:B1:46:39:B9:8E:D9:CA:93:06:39:D1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6c3fac7-93ae-38ff-936c-df19fff95bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:93:a5:92:38:2a:43:03:4a:6d:16:2b:71:c9:72:83:76:b6:
         84:f4:3a:63:a3:5f:5b:08:e8:5f:b4:98:f1:e9:50:17:c2:40:
         fa:a7:50:aa:f0:6a:43:11:9d:dd:3b:3f:bc:f1:e9:7c:0a:e4:
         64:dd:b5:36:06:01:95:6d:75:ae:11:23:a4:ab:8c:c6:40:db:
         c2:cf:92:2c:dc:81:92:c7:93:55:02:91:78:92:ed:37:1e:b5:
         a9:07:cf:b1:ae:90:ce:cc:79:41:24:55:77:98:3e:fc:3f:f9:
         fd:fe:62:5d:90:44:ab:50:53:fe:2f:a2:da:aa:4c:07:e9:76:
         96:e7:6d:ce:79:27:d6:58:c4:36:b8:2d:d4:49:b2:90:10:57:
         81:1c:c2:29:95:11:6f:4f:40:67:e1:6a:fa:89:17:93:a0:fe:
         c5:60:b9:c8:b3:fb:90:e2:ba:c9:a2:68:c8:3c:5c:75:d6:e2:
         18:f7:60:99:2d:da:1a:71:1e:a6:c3:ea:b4:c4:c7:3d:f5:a0:
         93:d7:ce:54:71:a1:74:c3:11:1e:c4:10:fa:b7:01:e2:7f:d0:
         c1:bb:dc:30:28:1c:5e:d2:10:d9:ec:d6:b1:42:67:0b:6e:cc:
         66:f6:93:32:a2:cf:21:c3:b7:0a:6b:e5:3c:f3:4f:ab:14:3d:
         34:fb:0b:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE02Gv9CQDm3q1XuUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMxODE3MDkzN1oXDTI2MDYxNjE3MDkzN1owLzEtMCsGA1UEAxMk
OThiY2M0ODctYjJlZi00ZWZlLWIwYTItNTdlNjJiMmNhMTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr/uSqCXrJkk9BtuBPSwzpc3rIvvfqpZTnk4
0qEpNDQXufCviuorJYAvqdw76CvN/ZHb9f70TuuqedKr/LFlqOdImt7q2xXbx96C
2cadjWF98atIU36ZQBFdcB49RN3cC61rVoVA9tJrP45aShlCS8F4hW8c5tsUYA7+
AJk14gsM8oca8+TtnwCt79HOWwvSRupk7kzz00KEo5UuPxB7Z9SzlL8JrCqF4Its
BODLRv4r1NegSMjqfgk2wromt1WKScEMdG0WeTTNWVzvR7Mo4SOdm4b2/tNGEdSi
+dY+fi8kDZ+xBnGj8dRm3LzThQsZo4/OB3GCyFKBduOysU/joQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMr06k8raBMWsUY5uY7ZypMGOdGZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzZjM2ZhYzctOTNhZS0z
OGZmLTkzNmMtZGYxOWZmZjk1YmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQCQEw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHeTpZI4KkMDSm0WK3HJcoN2toT0OmOjX1sI6F+0mPHpUBfCQPqn
UKrwakMRnd07P7zx6XwK5GTdtTYGAZVtda4RI6SrjMZA28LPkizcgZLHk1UCkXiS
7TcetakHz7GukM7MeUEkVXeYPvw/+f3+Yl2QRKtQU/4votqqTAfpdpbnbc55J9ZY
xDa4LdRJspAQV4EcwimVEW9PQGfhavqJF5Og/sVguciz+5DiusmiaMg8XHXW4hj3
YJkt2hpxHqbD6rTExz31oJPXzlRxoXTDER7EEPq3AeJ/0MG73DAoHF7SENns1rFC
ZwtuzGb2kzKizyHDtwpr5TzzT6sUPTT7Cxk=
-----END CERTIFICATE-----
Generated at Tue Mar 24 14:42:22 2026 by rpki-client