Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b9d2ddf-0ce4-362b-bd26-0ab168b190c4.roa
File:                     1b9d2ddf-0ce4-362b-bd26-0ab168b190c4.roa (raw, json)
Hash identifier:          K6geHz5Dcl6c+Ru9eAgxhYGLPXX8hiWZqSTTGVn3puY=
Subject key identifier:   4E:76:52:A3:14:63:29:38:9F:E5:8C:FF:A6:04:94:A2:A5:1A:DE:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE042383EB732A2B088D300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b9d2ddf-0ce4-362b-bd26-0ab168b190c4.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:b310::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:42:38:3e:b7:32:a2:b0:88:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=bac1c99a-10c6-435f-bda4-4c2c32bc6ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:0f:d7:5b:0f:18:5a:dc:b8:a6:72:a4:b1:
                    3a:70:7b:e3:6c:b0:fe:0e:36:22:13:ec:1b:03:6a:
                    ac:d0:09:de:65:d1:58:20:bd:00:cb:3a:78:49:cc:
                    61:2a:e4:6f:14:2d:6b:7d:97:65:d9:28:06:c7:45:
                    84:5d:9c:ef:90:cf:91:e6:29:73:eb:eb:46:f1:37:
                    96:5c:72:ef:25:19:5f:56:36:78:77:45:15:cf:8d:
                    ac:40:25:97:db:dc:b4:92:81:43:f9:e0:ba:9d:93:
                    0d:f6:97:7e:2a:bb:29:a8:40:8c:2c:92:ea:12:c9:
                    4d:74:6c:98:1d:c4:66:1e:54:13:c4:0d:f6:3f:12:
                    f2:f4:f0:40:80:7a:ce:26:2f:d7:a0:94:07:1a:1f:
                    47:cd:67:d0:f0:83:e6:88:5b:64:14:03:ff:c3:cb:
                    17:e4:97:d2:a3:e4:fc:f8:32:d3:d9:98:13:20:03:
                    4b:f4:c7:e2:c9:3c:c9:ee:a1:ec:4f:22:86:3b:6c:
                    49:b4:8c:e0:2b:cf:9d:b5:43:54:6d:88:87:74:7f:
                    7e:24:59:bb:90:5e:30:2d:70:84:1f:36:1c:a9:c8:
                    23:1b:cb:d0:b5:c3:52:51:77:f7:64:b8:39:60:94:
                    57:f2:67:38:0e:35:ea:7b:90:35:35:77:a7:6b:0f:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:76:52:A3:14:63:29:38:9F:E5:8C:FF:A6:04:94:A2:A5:1A:DE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b9d2ddf-0ce4-362b-bd26-0ab168b190c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b310::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:9d:ee:c5:0b:9a:7b:6a:47:2e:05:2a:2b:75:49:c1:9d:
         64:d6:42:26:db:f1:0f:38:5e:9b:d0:8c:2c:c5:c8:11:4b:4d:
         86:c8:cd:91:68:25:0a:27:8e:df:60:70:83:d2:c2:a5:1f:bc:
         8a:fd:c1:cc:f4:e4:cb:ed:d7:98:7d:0c:ff:2d:6c:e7:56:59:
         36:eb:13:dd:6c:6b:bc:c9:89:7d:10:8b:6b:30:54:77:ef:87:
         60:f8:06:79:d9:bd:24:ef:e2:0d:3b:65:b1:c5:3d:59:a0:a6:
         10:ec:3d:0c:06:2f:4d:98:2c:f6:d3:1a:fb:60:97:cb:0c:3f:
         31:b0:f5:c1:97:a9:15:f1:d7:bd:6b:21:fb:5b:d0:1f:66:63:
         e5:54:42:b5:cd:00:3f:1e:21:56:8d:b7:a2:f2:b3:1a:d3:b1:
         c1:b8:cf:75:5e:01:55:39:83:fb:ee:e2:87:37:26:a0:2d:b8:
         c2:42:88:80:15:b2:bd:20:f2:c8:41:4b:82:d4:7c:18:1f:ff:
         7c:7a:4a:2f:0f:c8:eb:8f:88:3a:0c:6d:34:b9:b5:0a:fe:c8:
         7e:78:7d:d0:71:0c:2c:e5:8a:6d:f5:bf:b9:78:03:0c:fa:16:
         4c:ec:e9:c8:84:bd:88:54:9f:7c:ab:03:16:49:d6:ed:3a:f3:
         13:ff:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:23 2026 by rpki-client