Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddd1149a-f104-3c53-bb3d-bc76f9ff11e7.roa
File:                     ddd1149a-f104-3c53-bb3d-bc76f9ff11e7.roa (raw, json)
Hash identifier:          zMeDe5DztGs4I3ShCUcwy4JmwlKEFaI13vvjR7ZX3oM=
Subject key identifier:   F7:49:E7:46:3B:87:86:C6:E3:B6:48:3E:63:5A:33:01:6B:0A:7E:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B53BDF4B04CC4C3F17680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddd1149a-f104-3c53-bb3d-bc76f9ff11e7.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     22394
IP address blocks:        2600:1009::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:53:bd:f4:b0:4c:c4:c3:f1:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=125b8471-29d1-4622-af77-3406aa5ecff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:6d:91:27:fe:29:c1:a7:ec:90:cb:5c:84:
                    7c:57:5b:d9:9a:7f:d9:31:7a:b4:6e:4c:df:12:8c:
                    39:d9:dc:98:99:b9:51:ed:f3:e3:3a:b8:83:f1:75:
                    d3:e5:b5:58:98:12:7b:2e:b6:60:c5:15:6c:52:84:
                    42:81:1f:4a:41:3a:f9:5a:db:80:94:6e:d7:9a:46:
                    8f:c5:63:90:0e:89:7f:52:03:12:8e:eb:e3:3c:71:
                    f9:d9:20:55:9d:2b:95:da:3e:bc:a3:db:a4:a5:a5:
                    20:9e:e6:ef:65:9b:4d:1c:62:c5:31:a3:54:6e:08:
                    6c:a6:2a:5b:b3:bd:28:78:59:96:2e:d1:88:c9:56:
                    e4:0e:f1:64:bb:c6:41:c0:ec:32:5d:f3:73:c2:df:
                    e2:c5:0e:46:46:00:22:b1:2c:96:b2:af:78:7b:9d:
                    81:44:3f:32:d0:54:a8:bf:3e:48:b8:80:d9:a1:9c:
                    c6:43:6c:a3:09:56:48:01:79:d4:59:89:7f:3b:2a:
                    52:20:0a:20:b8:2a:aa:14:16:ba:52:fb:12:e5:89:
                    e1:16:79:88:4d:1f:1e:45:08:af:ac:ab:05:8e:b0:
                    46:a5:88:26:2c:bd:22:eb:52:57:8b:36:b5:90:42:
                    c1:49:c8:85:f0:5d:20:ba:4e:26:78:59:c3:b4:30:
                    74:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:49:E7:46:3B:87:86:C6:E3:B6:48:3E:63:5A:33:01:6B:0A:7E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ddd1149a-f104-3c53-bb3d-bc76f9ff11e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b8:86:7e:74:8f:0b:cc:4a:02:a7:e4:94:fb:58:01:7c:1f:
         58:74:b1:0c:c7:52:76:e4:48:98:ad:75:8d:0c:17:5b:b8:20:
         d9:ce:7f:6c:6f:6c:95:fb:92:3c:c1:f5:c1:87:b7:3b:5e:1d:
         29:ff:c6:d0:6f:47:7f:e1:ef:99:1a:ea:b1:a1:7d:f6:c2:ac:
         59:60:f0:dc:a9:0b:b4:f0:76:13:34:4f:a2:51:f2:cd:a3:52:
         8e:d0:3d:00:11:fb:1e:ee:df:ce:30:60:a9:3a:33:8a:31:3f:
         01:d1:24:4d:4c:0b:8a:1f:c4:23:ec:b6:64:54:ae:c8:e8:ec:
         5c:80:48:04:55:40:84:a5:c4:8d:42:a0:95:ae:d3:78:90:e4:
         05:20:31:44:31:ca:3b:a0:71:7b:49:ae:4c:da:00:5f:3e:77:
         04:18:e5:7f:bf:aa:07:f4:d9:aa:5a:27:6e:4c:d3:0c:68:f7:
         b2:d9:7e:11:7a:eb:cc:b5:b2:2f:be:35:94:23:5a:18:b5:de:
         92:82:b0:70:8a:d8:b8:4a:ca:12:40:6a:63:b6:84:5c:84:30:
         5c:0e:16:c2:bf:a6:fe:84:0d:c0:59:9a:83:66:6c:51:41:e8:
         66:8c:52:b6:23:d3:22:64:62:fc:b8:cd:05:88:73:53:a7:f1:
         e1:49:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 22:47:44 2026 by rpki-client