Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5df2c839-b2c4-32d4-92c2-de48828731df.roa
File:                     5df2c839-b2c4-32d4-92c2-de48828731df.roa (raw, json)
Hash identifier:          DEQDQuBGZXq7krFhZqqSc2F5PxjMRZup0W84IV7gY8w=
Subject key identifier:   07:6F:B2:E9:CF:DB:30:EE:24:90:86:FC:F0:FC:BB:89:14:32:8F:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0418D7BE77D5F49C45580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5df2c839-b2c4-32d4-92c2-de48828731df.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:b160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:41:8d:7b:e7:7d:5f:49:c4:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=23277db0-5b5f-4c70-80f4-a831fd2b4a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:84:50:f2:d0:28:7a:e9:93:08:5a:6d:75:
                    bf:c1:c3:90:e0:c8:f9:3f:07:d6:bf:00:f3:68:d1:
                    cc:9d:5b:8a:65:81:75:22:b6:9d:bf:45:80:4c:f3:
                    42:32:a0:2d:a7:ff:fb:86:f0:e3:60:d7:ba:31:9d:
                    0a:cc:30:4d:43:3f:84:c7:a1:48:51:09:87:33:2e:
                    cd:30:9f:20:af:9e:da:1e:35:dc:46:49:53:5b:1f:
                    3d:b0:75:36:fc:07:e0:a5:c4:b0:81:b3:71:4b:07:
                    29:68:a8:8b:f0:8e:59:5f:4e:46:a6:3e:a3:84:84:
                    35:23:fc:a7:05:fc:b0:aa:e8:b3:f9:d7:76:86:5e:
                    8c:50:2d:dc:c6:6a:e9:07:92:44:be:d9:9e:88:c4:
                    50:3a:3f:ea:ad:9d:19:5d:cc:1f:55:e8:ed:50:97:
                    c5:d9:4f:91:72:16:79:7a:31:59:71:87:79:80:9c:
                    59:6a:e6:13:4a:96:44:3d:93:56:1a:52:ad:5c:0b:
                    c3:de:51:30:8c:72:db:10:54:10:40:6f:c5:1b:77:
                    84:89:67:79:8e:a0:be:12:1d:82:8c:e6:7a:c6:0f:
                    9f:ba:94:67:c2:44:cb:1f:3b:c4:6b:0a:1d:78:6e:
                    6b:5f:87:83:d2:43:c2:11:9d:af:b0:6c:bf:90:22:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6F:B2:E9:CF:DB:30:EE:24:90:86:FC:F0:FC:BB:89:14:32:8F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5df2c839-b2c4-32d4-92c2-de48828731df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:2c:bd:49:73:01:39:d7:9a:dc:a0:7f:51:96:3f:8a:b7:
         8e:d2:3e:31:01:91:d1:25:2c:67:38:88:3d:49:76:5a:4a:f3:
         0e:2c:90:94:d3:90:85:be:c0:e3:1d:35:90:31:dd:8b:bd:88:
         87:df:89:eb:96:d9:87:24:16:cf:b8:c4:2e:88:53:2b:67:e0:
         9d:d5:a0:84:65:9a:85:30:04:19:35:d2:59:f6:3b:ab:12:90:
         e1:5f:87:22:67:68:92:f1:ea:4a:4e:6a:a2:c8:79:14:f5:c6:
         c2:67:e6:b2:c6:c0:90:ac:ba:80:b5:08:a1:7f:18:92:ba:e5:
         ea:d6:8f:0a:28:9f:2b:c2:fe:69:5e:49:02:0b:1e:03:0a:48:
         79:ee:84:6b:16:c2:92:6a:d8:41:ad:9c:da:76:84:a8:a8:f1:
         f3:f7:7e:32:7e:3b:62:28:41:fd:8e:32:3c:e1:0f:96:4c:43:
         6e:1b:08:91:56:3b:77:be:6c:fc:c6:ec:6f:4e:ec:ec:84:0f:
         92:2c:32:d3:c4:29:a4:38:6f:7d:ce:1f:23:22:fe:c4:ce:b0:
         23:a0:54:68:b6:ce:22:21:a6:67:b2:56:a7:fd:0f:22:3b:7b:
         ca:ba:b0:88:9f:d1:f4:7f:5f:e4:15:5b:70:26:69:6a:3f:a9:
         78:60:19:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:11:21 2026 by rpki-client