Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8282425-e9bc-3aaa-a0f2-e4f04f4781c9.roa
File:                     d8282425-e9bc-3aaa-a0f2-e4f04f4781c9.roa (raw, json)
Hash identifier:          wEAHxPWXYoWe2c6LU6bpuF7FpHiVGimHQVRdchN0oNY=
Subject key identifier:   7A:E1:E1:9F:11:14:3B:BC:99:80:D4:E9:8F:16:99:54:29:BC:14:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DF9C37B7B5BF9D9BA14771680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8282425-e9bc-3aaa-a0f2-e4f04f4781c9.roa
Signing time:             Wed 27 May 2026 19:11:44 +0000
ROA not before:           Wed 27 May 2026 19:11:44 +0000
ROA not after:            Tue 25 Aug 2026 19:11:44 +0000
asID:                     6167
IP address blocks:        2600:1005:9018::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:c3:7b:7b:5b:f9:d9:ba:14:77:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 27 19:11:44 2026 GMT
            Not After : Aug 25 19:11:44 2026 GMT
        Subject: CN=5c169e97-e1a6-4c1f-b159-7e892b03df89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:b2:67:d3:0b:1b:43:3e:40:f3:e6:c6:91:
                    88:75:0c:32:a9:8d:07:1a:d2:b8:fd:90:6d:9f:da:
                    2b:7a:21:71:83:1f:da:74:ce:db:db:ef:0b:06:4f:
                    0b:cf:97:b6:2e:3b:b6:2a:5e:ce:c2:d1:3b:0f:3e:
                    23:df:28:d9:e7:c8:79:6c:17:1f:08:8e:f7:dc:df:
                    e6:fb:b0:54:1d:ed:32:d9:b9:cc:19:29:ef:e6:04:
                    50:ba:50:1f:9a:5f:62:61:79:5e:89:1d:64:67:72:
                    93:9e:28:75:6c:2a:88:b9:36:5e:55:02:92:3c:07:
                    47:15:a2:02:c3:81:d9:7e:22:55:44:b5:c3:0e:5b:
                    2b:2e:32:2c:78:17:85:29:bc:bd:0f:46:3e:be:1b:
                    1d:fc:05:2f:cd:83:96:20:a8:ee:ad:c6:ac:7f:fc:
                    03:52:4c:b1:6d:da:d7:b1:a8:08:91:64:8e:b0:74:
                    a6:8b:a5:b9:51:86:a5:a1:aa:39:c7:81:d6:40:0f:
                    3f:c8:72:cc:38:f1:a1:c6:a4:eb:75:8a:fa:5e:fd:
                    c5:ab:cb:f1:ba:57:e1:ab:83:62:4a:ac:c4:6c:39:
                    3e:1d:4b:3c:66:fb:70:e4:bd:02:c6:8d:56:a2:c1:
                    29:91:fb:c8:45:97:30:43:cd:ae:de:8c:19:92:cc:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E1:E1:9F:11:14:3B:BC:99:80:D4:E9:8F:16:99:54:29:BC:14:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8282425-e9bc-3aaa-a0f2-e4f04f4781c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:9018::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5c:50:3e:c0:46:5e:df:6e:7e:85:67:5c:fe:03:cd:33:25:
         18:09:4f:45:bc:52:0f:d6:1c:7e:77:b0:2a:bc:e9:80:10:b1:
         d9:08:df:81:77:b8:ef:7e:d3:c7:f0:61:a2:37:58:bd:76:1d:
         89:6d:96:46:96:80:5b:7b:22:7c:75:14:ff:1d:a8:46:3c:61:
         18:81:60:5b:f7:f3:79:cd:dd:1e:fb:f3:8b:8d:3d:33:df:11:
         b0:81:20:bf:3b:00:d5:81:ad:02:13:0c:e3:7f:c4:d3:34:8a:
         2d:a1:a5:3a:9f:2e:fe:50:dc:7b:b7:1e:2f:e4:6f:7b:d7:70:
         7f:9f:1d:85:ec:70:cf:56:e3:8d:39:c5:05:81:ec:bd:c1:7a:
         d5:d2:e3:4b:da:d9:5c:0a:4e:cc:ea:6c:fa:f5:dd:c2:26:99:
         0d:da:82:4c:34:7c:2a:94:22:e2:18:64:4c:cb:af:27:7b:55:
         49:24:a7:2f:c3:d7:eb:83:c4:f7:13:e0:42:9d:27:85:4b:e0:
         c0:1e:41:73:6d:95:03:f7:b3:8b:29:7f:d6:ab:d0:8e:3f:05:
         31:00:0a:bf:ae:ed:a8:cb:a8:52:76:b9:df:65:73:e8:46:a4:
         b1:4d:f3:42:6d:c7:c0:34:d5:af:dc:6d:3a:bd:44:1a:96:1d:
         e2:70:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:58:56 2026 by rpki-client