Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a21d23d-5601-3e47-8699-857924c4db7e.roa
File:                     3a21d23d-5601-3e47-8699-857924c4db7e.roa (raw, json)
Hash identifier:          xOHCU2Aobz5K/1PRYdPtOwh/ZWs3/ZHtas0hqjFS1Zs=
Subject key identifier:   0C:9D:6C:7A:76:23:DF:EA:02:1E:BC:A6:C6:FE:F2:79:29:39:1A:9E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D948AA1750B6BB5C71E5A0CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a21d23d-5601-3e47-8699-857924c4db7e.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:100d:f022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:a1:75:0b:6b:b5:c7:1e:5a:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=ae8c189f-490d-4efa-b48b-6d2d931d1b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:89:a6:c8:4e:f8:9b:4b:43:5c:d8:f8:70:
                    16:af:b7:f0:24:f7:3b:32:a6:1a:41:d9:98:1f:34:
                    dc:36:b2:20:52:e2:b5:6c:f8:da:14:1d:3d:a6:62:
                    45:3b:22:a2:0e:83:3d:79:db:cf:61:9f:43:75:95:
                    cb:e5:c5:98:60:a4:ea:ae:48:c3:85:96:06:6a:e5:
                    49:70:76:3c:7d:39:6b:fe:60:24:60:33:6a:ab:34:
                    82:91:af:e0:7d:8c:60:93:41:7d:14:29:d3:e5:09:
                    f3:d1:d4:25:76:f2:26:f8:f9:4b:9c:dd:29:d5:56:
                    17:19:46:d1:86:ed:f8:31:d8:8f:fe:81:5f:84:01:
                    fa:88:23:78:1e:74:50:69:b8:86:30:ea:a7:22:19:
                    a1:35:54:b7:4a:8d:5d:e0:a0:37:70:cb:b7:4a:5a:
                    05:fd:98:59:a5:ea:3a:a2:2d:3d:2e:d1:2a:89:3a:
                    ab:18:ba:62:b3:45:8b:9d:c5:12:5f:01:e4:25:4b:
                    71:d7:bc:41:fd:47:d9:bb:95:21:e8:d6:20:c1:9b:
                    9c:3b:86:75:99:1b:76:f6:08:bf:ca:00:85:00:81:
                    80:b6:5c:63:c3:d5:8a:54:c5:8f:fb:0d:0f:f4:75:
                    17:5b:e8:3f:62:6a:e3:43:87:c1:3d:ce:df:d7:09:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9D:6C:7A:76:23:DF:EA:02:1E:BC:A6:C6:FE:F2:79:29:39:1A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a21d23d-5601-3e47-8699-857924c4db7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:f022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9c:cf:4b:89:d6:2c:4c:d9:d8:ed:69:d3:5b:78:3d:73:39:
         22:0f:ec:5f:b9:20:f7:a9:d2:3d:33:7e:ee:e9:8e:82:fb:89:
         98:70:20:d2:9b:49:b5:63:68:dc:70:46:64:00:e2:e9:7f:ec:
         1a:82:56:79:13:21:2a:99:90:d2:eb:fd:5d:35:3c:24:70:14:
         7c:25:b1:d1:60:f5:1f:cf:a4:81:f5:36:49:fd:60:c9:1e:e2:
         b4:0b:e5:9a:65:3c:d4:d2:2e:fa:2f:7a:ee:9b:ab:c3:b8:6f:
         64:d5:fc:7c:df:a1:a2:25:fc:cc:ad:ac:7a:cb:bb:fa:ae:e7:
         d0:29:98:ae:4b:80:7b:c4:a2:a4:11:9a:24:77:62:49:ff:a8:
         b7:cf:67:92:e6:f8:d2:0c:26:6e:8b:2c:e7:0d:fe:96:66:7a:
         70:84:9d:33:e2:89:ac:22:c7:27:2f:d5:98:60:f0:3f:ab:7e:
         55:c0:0a:7f:9c:35:b2:42:cb:76:02:1b:88:aa:dd:fc:5d:c3:
         08:18:ed:da:3f:79:8c:ce:84:85:5b:18:2b:f9:88:48:51:6e:
         42:7b:00:3d:96:cd:1a:1f:97:40:80:44:02:f0:51:88:f6:8d:
         7b:56:1a:14:1b:23:1e:4f:33:1b:31:1c:1d:2e:be:6f:22:3e:
         cd:5b:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:10:04 2026 by rpki-client