Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39740e66-321e-3274-995b-fed0ea9e53e5.roa
File:                     39740e66-321e-3274-995b-fed0ea9e53e5.roa (raw, json)
Hash identifier:          ns/96tYdz+lVn/fHDakW4xpf3Yr8HdwucdHCHfP6EU4=
Subject key identifier:   CC:05:68:A8:A6:00:D0:C6:23:41:04:1E:A2:2C:D6:A3:1C:26:B9:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D300A343AC3F1FA6E446D7840
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39740e66-321e-3274-995b-fed0ea9e53e5.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:1009:a124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:34:3a:c3:f1:fa:6e:44:6d:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=14eefe15-1b89-4236-a975-d2917dae41b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:d0:73:09:67:0f:dc:76:b5:50:6f:f3:82:
                    9e:c9:fc:6b:45:8e:78:99:8c:49:c8:99:44:9d:5f:
                    24:ab:bb:44:09:1d:ac:8a:0b:e2:62:10:bf:04:9c:
                    3f:08:d0:e5:a4:a3:ae:43:32:74:2c:a9:06:b8:44:
                    e5:9d:e5:21:78:2f:45:79:97:ab:da:b6:c0:0f:91:
                    b3:5c:24:2b:11:9d:44:59:b4:94:1f:37:26:80:de:
                    18:3a:48:46:8a:e0:b0:42:99:69:12:12:95:f8:70:
                    c2:59:9d:13:81:f0:49:bd:16:0f:43:fb:f2:cd:16:
                    6e:c4:80:3f:33:ac:d2:f2:ac:1e:88:0f:e5:e5:38:
                    ce:a3:a7:dc:35:ae:7a:d4:8a:b3:50:b1:88:99:50:
                    70:fc:ee:a0:52:3a:d6:eb:5e:25:77:6e:5c:68:23:
                    50:ab:b6:7b:9e:cd:0d:c0:b6:05:fd:b4:24:21:97:
                    d1:ac:1e:3a:60:78:a5:4c:e1:49:03:d1:01:05:aa:
                    19:1e:bb:89:a7:85:21:c6:8f:7d:8d:f9:a1:17:de:
                    8d:ab:32:2d:e6:55:83:89:f6:eb:a7:e3:68:68:89:
                    ce:0d:5b:be:84:7f:5a:24:e6:55:8f:2e:b1:ea:f1:
                    7c:da:c9:da:a2:1e:49:4d:3c:36:56:86:45:23:c4:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:05:68:A8:A6:00:D0:C6:23:41:04:1E:A2:2C:D6:A3:1C:26:B9:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39740e66-321e-3274-995b-fed0ea9e53e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:94:4f:d0:42:fd:2f:b7:f3:7c:43:de:8c:03:86:fe:a7:
         28:8d:b8:62:41:bc:be:de:aa:68:3b:ef:ac:71:b2:eb:23:f7:
         c8:73:69:b6:0a:20:03:e0:12:89:5c:b3:e6:57:48:0e:bf:f9:
         25:0f:22:0d:3d:57:87:fd:d1:50:b8:fc:f3:d9:9f:b6:20:56:
         61:13:80:7f:33:42:88:2c:be:fd:96:25:bf:b2:63:32:46:ad:
         36:f1:63:78:25:c7:5f:af:14:59:04:b5:d9:52:3a:9f:3a:58:
         35:ec:42:15:dc:d0:2d:39:98:18:7a:6a:58:86:8d:b4:7f:31:
         f0:b6:b2:27:aa:5f:38:3d:59:95:39:10:6b:f3:86:93:b0:db:
         c8:68:93:eb:a2:b7:44:17:a8:d5:05:ec:72:c9:09:c8:0c:d5:
         69:d5:c3:31:dd:3c:ce:f3:1e:04:a5:8c:7b:ae:43:bc:99:ee:
         92:b3:29:4d:dc:73:5f:ae:b5:33:14:55:cd:a5:12:01:94:bf:
         74:c5:29:ee:8c:b1:3d:2b:75:5c:45:dd:8c:28:9f:a6:f9:12:
         51:76:9f:61:57:f6:86:0c:88:5b:5d:32:89:a4:0f:b9:cf:8b:
         ba:45:49:0c:8c:60:24:9c:2f:cb:ae:a5:8a:29:ce:1a:6d:e3:
         a4:0b:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:08 2026 by rpki-client