Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18de253f-787a-3bb6-935c-ee02d1c387f2.roa
File:                     18de253f-787a-3bb6-935c-ee02d1c387f2.roa (raw, json)
Hash identifier:          k1EJ1po5JJo3/3ePyRdFiCET4YcnFQmBb6crl42JrNI=
Subject key identifier:   1A:8A:BE:95:0D:FE:43:BB:BE:B9:46:3C:0F:9F:CB:7D:5F:B4:14:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE03A47DF530406E622ED00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18de253f-787a-3bb6-935c-ee02d1c387f2.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1010:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:3a:47:df:53:04:06:e6:22:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=c7452514-8412-42b3-8446-4a1af4eb2bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9f:8b:42:9c:1c:c7:a0:8b:8a:e9:23:e5:90:
                    c2:91:3d:a6:01:a4:85:08:c9:53:9a:b2:9b:5b:73:
                    e5:82:98:24:96:4b:8c:23:b4:64:79:0b:18:0b:ba:
                    a8:52:83:2d:e0:40:6a:75:cf:79:25:db:19:69:bf:
                    7c:3f:0e:da:9b:c5:25:9c:18:40:54:1a:73:cd:b8:
                    c4:7b:bf:13:23:84:6a:43:29:f7:f3:75:92:5b:db:
                    5c:90:59:7a:ea:fa:8d:02:03:e2:c1:8b:b7:4b:b8:
                    44:19:29:f6:19:ab:c0:eb:98:5b:80:5f:a9:32:df:
                    c1:da:b2:cb:00:6f:a7:26:6d:2f:b6:85:ea:50:da:
                    ef:21:37:e1:0e:ec:1d:69:d0:a9:63:f8:ef:9d:09:
                    4f:05:82:75:6f:33:f4:42:2f:6b:bb:a2:6d:67:a6:
                    56:32:08:84:98:8a:b6:f4:f3:1f:42:cd:72:89:e6:
                    97:cb:d9:79:a9:fc:37:88:60:f3:44:87:46:d4:a8:
                    16:3d:07:59:cd:9b:10:50:c9:00:81:e0:37:c1:17:
                    79:56:be:5a:73:52:d1:16:eb:c6:49:4e:de:b4:ae:
                    e0:05:0b:e0:98:97:8b:76:5b:6f:29:97:cb:8d:b9:
                    bc:8d:5a:6d:ba:49:86:38:18:a4:1f:b1:77:e2:23:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8A:BE:95:0D:FE:43:BB:BE:B9:46:3C:0F:9F:CB:7D:5F:B4:14:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18de253f-787a-3bb6-935c-ee02d1c387f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:3e:42:97:0a:4c:d5:c2:89:26:b2:31:28:a1:ec:11:9a:
         07:60:58:e2:c8:9d:dc:c0:66:51:b9:f0:3a:a6:c3:dc:55:1b:
         6d:91:14:84:c3:c9:0a:6c:a0:6c:9e:8a:9b:a1:db:b5:cf:9c:
         8f:f1:3f:43:6c:9b:9b:db:dd:3f:e6:32:6f:dd:ed:5a:41:02:
         8a:f5:08:30:1e:77:5e:9c:10:21:53:a3:3a:03:47:ea:40:c8:
         9d:10:f0:a7:42:8d:16:76:b2:6c:6c:75:ef:8e:d7:f5:bb:25:
         bb:83:c8:7f:e9:6c:83:92:5f:d5:17:cc:ce:fd:7f:67:8f:68:
         51:45:1d:36:8b:f6:dd:d2:8c:3a:4c:51:3a:b8:e9:5c:26:f9:
         bf:c8:22:a1:96:96:70:b7:5f:d2:2d:50:36:da:32:0d:bf:a8:
         c8:49:63:62:d7:4f:51:b8:f2:ba:41:3b:16:e3:b3:5e:ec:fb:
         e4:1f:39:26:9b:b2:ca:7e:2a:62:c9:79:3b:b1:12:b0:07:4d:
         f0:1c:d0:df:8b:29:8b:23:11:5f:27:bc:1f:aa:23:a4:98:22:
         6f:63:84:f0:f1:1b:4c:e2:4a:4f:16:c9:e4:97:ef:15:e5:bd:
         99:67:fc:23:da:75:3d:8c:94:1d:4f:80:71:f4:36:bc:85:74:
         51:e4:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:06 2026 by rpki-client