Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f121d2e-3b0f-3a00-85cb-194ef6cab372.roa
File:                     1f121d2e-3b0f-3a00-85cb-194ef6cab372.roa (raw, json)
Hash identifier:          a3MGpyBcwfW1oT1ENCHQhVZ6kUaJjspYOIsH94B8GBU=
Subject key identifier:   AD:80:92:1A:27:7F:FB:CF:44:CC:51:FA:FA:97:BA:F3:18:76:3A:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A36177FDE9880DBC3C500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f121d2e-3b0f-3a00-85cb-194ef6cab372.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:100f:a030::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:36:17:7f:de:98:80:db:c3:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=46bfdfcd-f56d-4d68-9760-3d26b87782b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:98:cd:06:70:27:99:cf:d8:d1:df:ad:58:
                    43:18:2d:cf:4a:60:9f:0e:00:9a:24:da:c4:53:cf:
                    d4:ee:36:d5:ed:dc:08:bf:bc:40:5c:74:6e:36:c3:
                    89:e6:ad:e6:67:77:4f:be:0d:ac:30:ed:fa:44:7a:
                    ea:3e:23:2c:a8:14:93:03:e4:41:e0:88:f2:7e:5a:
                    d7:3a:f7:96:34:21:1a:de:a0:e1:52:c4:5b:ee:b2:
                    a4:10:51:b9:4d:00:3a:ff:bb:ce:93:fd:7f:a4:f0:
                    7f:99:0f:b7:0f:a7:56:c6:27:89:35:70:8d:34:49:
                    8e:fc:3c:b8:c2:65:65:50:59:85:92:13:b2:bc:82:
                    82:af:e3:d0:58:5c:5d:f5:cb:ae:22:20:f6:5a:99:
                    5a:5d:e3:23:4b:d1:45:e5:09:f8:f7:f4:e5:ff:fb:
                    c1:24:56:c5:d0:ac:b4:95:2f:25:c2:a2:e1:e2:32:
                    46:c1:fc:ba:0e:73:d5:83:c4:98:4f:90:fb:b8:fc:
                    8b:20:6b:ae:dd:42:bf:6a:09:f2:c9:2b:4e:46:dc:
                    0b:be:0e:39:4e:a4:61:5d:e5:e5:2d:8b:46:7b:50:
                    29:28:89:46:c3:f1:a1:54:2f:e0:9d:c2:40:5e:8e:
                    65:3a:4e:10:18:04:4d:0d:f8:61:b0:ea:98:ef:ff:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:80:92:1A:27:7F:FB:CF:44:CC:51:FA:FA:97:BA:F3:18:76:3A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f121d2e-3b0f-3a00-85cb-194ef6cab372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a030::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:3d:92:97:dc:4f:46:0a:34:df:2c:aa:b4:35:9b:ee:35:
         f9:e8:ac:6d:01:fd:c7:48:97:99:f9:4c:bb:74:e2:43:7f:44:
         56:56:65:fd:9b:f4:c2:08:95:90:ce:a5:95:79:00:c8:57:54:
         b4:1d:e6:eb:05:45:09:f1:07:72:f3:76:94:d0:6e:c4:fc:ea:
         28:91:44:96:d1:ce:51:ac:49:bc:fc:9f:f8:e0:4c:6c:43:ea:
         e5:eb:31:66:a5:8e:3f:48:5c:13:cf:9c:d8:40:ee:6e:af:ee:
         6c:4d:18:17:4c:d9:07:42:05:b5:71:8e:e2:da:49:05:c0:88:
         9e:cf:c3:82:01:9b:56:1f:f7:ed:be:b1:06:42:7e:0c:85:61:
         18:de:bd:8e:cc:19:26:0e:18:84:87:71:20:50:ff:37:ce:58:
         17:1f:f3:a6:50:79:f9:88:b7:bf:8a:7d:d3:52:82:c6:11:cb:
         6b:52:e8:c7:e6:d0:01:30:3c:15:f0:5e:6f:5c:0b:20:36:5b:
         32:a0:15:96:f3:a1:1f:5a:ce:b4:4c:41:05:10:55:38:73:70:
         b0:17:2a:76:e7:80:1b:c3:cc:d9:ab:5b:34:79:61:2c:cd:61:
         5d:c2:a8:13:e5:14:a0:dc:1f:46:2a:2c:9b:8a:35:33:00:41:
         e0:75:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:39 2026 by rpki-client