Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21a32863-5285-3445-8b3f-c1a07ebf6bcf.roa
File:                     21a32863-5285-3445-8b3f-c1a07ebf6bcf.roa (raw, json)
Hash identifier:          HZGm6JzlfJI1V/B0gpE3vVu6PjbpYijN1nC6d7VJHrU=
Subject key identifier:   9C:F4:10:AC:A7:C3:0F:69:F4:CC:90:1C:F7:25:81:B6:7F:0C:25:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE048AEBACF0ACFAF711F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21a32863-5285-3445-8b3f-c1a07ebf6bcf.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1016:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:48:ae:ba:cf:0a:cf:af:71:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=dfdcb818-b4b9-4235-8dba-f0e55d29c100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ac:84:c1:dd:e9:77:61:be:a8:c9:1d:82:67:
                    e7:39:30:a1:39:29:cd:49:cf:3e:3f:5b:08:2f:85:
                    af:af:f7:e3:f6:44:39:85:8e:f0:9a:32:c6:27:7a:
                    cd:9c:4d:14:53:cd:7b:4b:16:d8:2c:36:0a:75:4b:
                    c0:54:1b:2b:4c:64:b9:db:a0:2a:5c:02:9d:80:dd:
                    d3:a3:20:a0:28:de:d4:9e:bf:58:3b:8b:47:8c:15:
                    cb:cf:1b:07:e1:98:bb:2e:7d:a7:6b:99:44:34:e8:
                    f7:79:50:b3:83:78:00:f3:cc:00:73:51:ab:4c:20:
                    59:05:e3:a8:56:b2:f7:e8:67:48:14:08:17:50:58:
                    4b:ab:6c:d3:b9:44:40:88:32:e4:fe:31:79:79:de:
                    28:c8:fe:32:00:5d:2d:f6:ca:a2:e4:55:a4:f8:3f:
                    f6:c6:ce:e0:7e:cd:62:64:c5:69:41:d4:59:8e:fa:
                    c0:ca:f6:73:72:dc:9d:60:c9:60:2c:cb:dc:83:29:
                    4a:06:35:ea:f2:c0:cd:7d:a8:80:38:86:4f:7d:00:
                    be:2f:96:8b:1c:8c:c0:ba:ad:71:28:8f:01:22:e1:
                    93:42:77:3c:c3:33:84:55:85:7e:8b:a7:54:b6:0b:
                    26:6d:6e:69:b8:0d:63:a6:17:bb:dd:85:9b:6b:41:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F4:10:AC:A7:C3:0F:69:F4:CC:90:1C:F7:25:81:B6:7F:0C:25:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21a32863-5285-3445-8b3f-c1a07ebf6bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:63:26:3f:18:39:7b:d5:46:12:43:23:43:a0:6e:7a:14:
         2f:4e:88:bb:43:5b:b7:80:5c:50:e7:c3:a7:cd:95:9d:5e:07:
         d8:df:40:7f:a5:f7:bb:0f:e0:96:d6:ba:66:e3:dc:f8:a5:a0:
         37:e0:01:74:e2:b1:14:11:77:78:9a:6a:f7:ea:d9:be:f2:1f:
         66:9c:d1:35:1d:8c:13:f1:6e:93:8c:f0:be:16:7f:ff:aa:f7:
         8a:00:5c:93:1f:37:0e:4b:84:e0:db:7e:90:ab:d9:72:18:b7:
         43:8f:6f:db:f6:2d:8a:0b:a7:18:91:97:70:31:bd:b9:e0:22:
         e6:2a:d3:62:e1:4c:e0:3d:e1:5e:0f:6f:47:00:23:cb:f6:e2:
         74:55:f8:15:77:a0:67:d7:4a:f0:dc:34:42:dd:e0:da:7b:bb:
         c8:b2:08:3c:7a:b6:ba:aa:fc:68:4b:b1:e7:8d:3e:68:ab:8c:
         f6:9c:90:48:8c:5b:87:8e:bc:09:87:af:e4:61:64:d7:09:90:
         69:4b:f2:d4:40:12:e3:8a:96:c2:5a:18:c9:3f:6b:e3:9b:0c:
         9a:8c:31:a5:a5:92:c5:87:4c:bc:36:b4:73:a3:72:c8:b1:60:
         9c:1d:5b:96:7b:2f:10:f5:a3:1f:58:af:89:27:36:93:b3:80:
         d2:e6:6b:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4Eiuus8Kz69xH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
ZGZkY2I4MTgtYjRiOS00MjM1LThkYmEtZjBlNTVkMjljMTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqayEwd3pd2G+qMkdgmfnOTChOSnNSc8+P1sI
L4Wvr/fj9kQ5hY7wmjLGJ3rNnE0UU817SxbYLDYKdUvAVBsrTGS526AqXAKdgN3T
oyCgKN7Unr9YO4tHjBXLzxsH4Zi7Ln2na5lENOj3eVCzg3gA88wAc1GrTCBZBeOo
VrL36GdIFAgXUFhLq2zTuURAiDLk/jF5ed4oyP4yAF0t9sqi5FWk+D/2xs7gfs1i
ZMVpQdRZjvrAyvZzctydYMlgLMvcgylKBjXq8sDNfaiAOIZPfQC+L5aLHIzAuq1x
KI8BIuGTQnc8wzOEVYV+i6dUtgsmbW5puA1jphe73YWba0H/5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJz0EKynww9p9MyQHPclgbZ/DCVcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjFhMzI4NjMtNTI4NS0z
NDQ1LThiM2YtYzFhMDdlYmY2YmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQFrEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABb8YyY/GDl71UYSQyNDoG56FC9OiLtDW7eAXFDnw6fNlZ1eB9jf
QH+l97sP4JbWumbj3PiloDfgAXTisRQRd3iaavfq2b7yH2ac0TUdjBPxbpOM8L4W
f/+q94oAXJMfNw5LhODbfpCr2XIYt0OPb9v2LYoLpxiRl3AxvbngIuYq02LhTOA9
4V4Pb0cAI8v24nRV+BV3oGfXSvDcNELd4Np7u8iyCDx6trqq/GhLseeNPmirjPac
kEiMW4eOvAmHr+RhZNcJkGlL8tRAEuOKlsJaGMk/a+ObDJqMMaWlksWHTLw2tHOj
csixYJwdW5Z7LxD1ox9Yr4knNpOzgNLma8w=
-----END CERTIFICATE-----
Generated at Wed May 13 12:15:18 2026 by rpki-client