Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27480c46-7388-33c2-b7c7-1fe686692267.roa
File:                     27480c46-7388-33c2-b7c7-1fe686692267.roa (raw, json)
Hash identifier:          ZvRZXZnIcPFrsuJUP1vd2zP7ooi3j0NKzbIoiJSjiq8=
Subject key identifier:   36:36:2B:0D:B9:DF:9C:0A:6F:32:05:F3:AA:2F:E2:9A:A8:88:A1:E3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D2644D706783D83C7028AE000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27480c46-7388-33c2-b7c7-1fe686692267.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     6167
IP address blocks:        2600:100e:b330::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:d7:06:78:3d:83:c7:02:8a:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=569ce48d-3627-4ad3-be09-00db24ff1809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:7e:ed:5c:a8:8a:ad:66:77:40:86:1f:89:
                    1b:13:d3:78:48:89:77:b5:bb:01:75:3c:dc:f1:d4:
                    fc:a4:97:b2:04:9a:e0:52:2c:44:89:dc:8e:c4:c5:
                    34:70:e0:cf:37:64:13:70:a3:db:a3:9a:85:40:69:
                    6a:cf:83:95:1c:43:0f:cb:5c:14:26:0e:d6:aa:5e:
                    c9:32:5b:68:70:31:a8:ae:b3:a1:5d:d6:d1:42:23:
                    cf:3f:51:1b:55:e7:2c:a0:c3:06:a3:9a:d0:f1:b6:
                    84:78:a4:c7:10:5a:fe:ae:e0:1c:23:0e:c5:bc:6c:
                    fd:30:68:78:0c:05:99:b5:c8:72:b4:d4:cd:d8:31:
                    67:5f:51:d6:53:94:fc:1e:ff:ff:16:c0:fe:82:9f:
                    2f:cb:12:b8:41:52:e3:7c:59:10:42:56:55:14:5b:
                    66:e9:91:11:da:d8:f9:69:93:89:d3:38:93:4f:ed:
                    ec:7a:e5:ec:56:fb:4a:e5:54:be:3d:96:1d:c8:92:
                    8f:49:bf:7a:63:e1:2e:f5:67:c8:da:6f:8d:26:e3:
                    1e:58:7e:61:3d:6e:4c:7f:91:98:29:af:b9:14:c3:
                    28:2d:fe:fd:d0:f8:2a:db:4e:c3:24:2c:ef:4d:ae:
                    81:e7:32:46:b3:ab:0e:08:49:9d:51:ce:dd:a2:aa:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:36:2B:0D:B9:DF:9C:0A:6F:32:05:F3:AA:2F:E2:9A:A8:88:A1:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/27480c46-7388-33c2-b7c7-1fe686692267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b330::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:c2:4b:64:5f:08:a7:b7:16:58:51:70:86:ce:21:2f:50:
         a4:d3:97:88:3c:76:3b:fc:c8:83:44:41:28:fd:c0:1e:8c:c8:
         d3:42:1f:fd:13:7e:80:32:e3:ea:f5:74:a1:f9:08:ba:fb:4c:
         e2:11:e5:00:14:8e:85:35:58:aa:55:fe:48:c4:2e:b8:8e:ea:
         1e:12:42:73:c5:6c:31:ff:8b:d5:03:14:d7:36:75:b9:89:bf:
         1f:a7:72:48:a8:83:21:c7:6e:c9:30:3d:1d:4e:b4:78:13:c0:
         82:59:32:a8:98:6c:f3:94:4c:e2:fe:f3:ab:97:ef:17:59:3f:
         0d:7f:d4:43:ae:10:0b:5e:7c:98:90:27:e4:2c:c4:eb:db:4a:
         e4:57:8d:30:e5:22:7f:59:26:ee:3f:c5:56:15:5d:04:39:c5:
         1e:18:db:f5:8d:ff:80:eb:a5:ba:d2:af:3d:86:33:f9:e9:3a:
         5a:4d:13:b8:8b:50:75:33:b1:ef:3c:c3:54:be:78:ea:83:8c:
         67:86:ab:f2:78:24:c1:1a:df:64:15:b4:df:75:b4:c1:fa:d6:
         96:d9:63:01:cb:f8:31:a0:73:88:5e:5c:95:23:04:16:80:f6:
         0a:19:54:76:58:f1:e5:8b:4b:aa:42:34:21:9c:d8:0e:14:2e:
         65:01:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:25:08 2026 by rpki-client