Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6cd8e398-ff9d-32f6-83ec-dafb9c8adb38.roa
File:                     6cd8e398-ff9d-32f6-83ec-dafb9c8adb38.roa (raw, json)
Hash identifier:          HpsGnvYenKD2rI906MdYzKy9v/fPa4Dcknm0yVClwuQ=
Subject key identifier:   17:1F:98:09:03:F1:C7:D7:8E:E2:1E:B5:B1:AB:99:E5:C5:40:DB:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBA3AE1BB06DA9EECDCC7D4C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6cd8e398-ff9d-32f6-83ec-dafb9c8adb38.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        2600:100c:b330::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e1:bb:06:da:9e:ec:dc:c7:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=d9e87e3a-3a63-407c-a015-7476fcd9b5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ec:c4:89:88:33:18:57:99:cc:e1:2d:89:bd:
                    80:65:d2:c7:52:03:da:cc:a0:ae:f4:68:15:88:3f:
                    d9:06:0d:36:47:96:62:2b:1f:17:7e:88:43:ef:f0:
                    32:ba:6e:cf:21:fe:14:ec:11:f6:79:d9:54:89:f6:
                    30:d3:e0:67:06:4d:77:e6:a9:d7:1a:01:8e:d4:69:
                    2e:8a:c7:cd:4b:bf:05:04:f7:00:15:47:ff:fd:83:
                    57:e7:fc:88:86:9a:3a:bc:f5:3e:8f:31:2e:c6:97:
                    e4:2e:35:bf:be:e6:44:5f:ce:4f:1e:0c:1c:06:77:
                    b5:39:3a:61:1a:c2:49:96:4d:d0:34:3f:e0:87:2a:
                    e4:34:13:be:6b:bc:5a:e0:06:c7:3f:31:b0:ef:b3:
                    78:c4:1e:69:a0:a1:cb:ea:f7:11:1e:04:2f:7b:1d:
                    44:8b:c2:2d:60:2b:23:50:7f:1f:7f:59:fe:33:89:
                    71:11:e1:dd:51:23:e7:87:ba:cf:f5:69:42:0f:b1:
                    12:41:3d:f6:1a:37:84:55:37:fe:15:d3:8e:de:2e:
                    fc:a4:3c:cf:60:e7:6e:59:c8:b5:bf:b8:f6:8a:1c:
                    e8:fa:81:8a:ef:56:7a:e2:eb:3e:f1:ce:57:ec:63:
                    54:c9:47:ce:55:68:58:c0:7e:7b:a4:f4:61:5f:e7:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1F:98:09:03:F1:C7:D7:8E:E2:1E:B5:B1:AB:99:E5:C5:40:DB:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6cd8e398-ff9d-32f6-83ec-dafb9c8adb38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b330::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:48:a3:cc:70:55:21:00:70:16:b9:cf:6d:a4:3e:d8:ef:45:
         b8:1c:42:9e:da:89:39:40:96:db:36:df:6b:f4:ab:3f:a2:68:
         ca:f9:9a:b3:2d:4e:34:24:17:65:06:bb:49:1f:02:31:7b:93:
         65:2a:fb:82:f1:d4:dd:e0:6c:fb:04:e5:6a:10:38:98:a5:08:
         e1:a8:4a:74:84:51:39:91:1f:d8:33:20:18:5b:68:ce:92:5f:
         83:98:37:a0:c2:52:cd:ea:a8:e9:90:89:02:8b:b3:6e:c8:55:
         16:6e:aa:f7:19:da:13:8b:09:f9:6a:e1:2d:d5:dd:82:d8:8a:
         e2:ad:5d:9a:52:3b:36:5b:d1:0f:c8:1d:2f:29:a4:b2:d9:bd:
         3b:e2:ef:d9:5a:df:a0:c4:0d:9b:e1:6d:de:b2:2d:e1:ee:c3:
         ac:9e:a5:a3:f5:a0:6c:92:8a:54:f0:6e:6d:14:d3:3a:0c:fb:
         44:50:49:bd:4f:0f:63:f9:3d:5d:f3:84:ab:52:c0:0c:cc:14:
         3e:69:06:0c:0e:b8:24:b8:ca:37:2a:95:ae:20:23:cf:1c:91:
         84:f6:3b:cb:ee:0b:49:86:e9:2f:79:88:05:db:12:61:19:ba:
         ab:30:f7:38:20:47:72:93:9e:8c:8f:2f:cd:17:4b:0c:39:e7:
         4c:71:42:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:30:55 2026 by rpki-client