Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/729e04e9-be8d-3086-9a98-db1b2c6944c4.roa
File:                     729e04e9-be8d-3086-9a98-db1b2c6944c4.roa (raw, json)
Hash identifier:          yeZDhpqzPMSDsvIj56012FGtZKZOtUEAfcKo+EwPG6Q=
Subject key identifier:   71:09:10:E9:BB:FB:06:E0:31:3C:5E:29:D5:39:A2:72:A3:67:EC:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0414FA717E3D6FFF28B90
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/729e04e9-be8d-3086-9a98-db1b2c6944c4.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:b110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:41:4f:a7:17:e3:d6:ff:f2:8b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=69650b45-6e04-4b35-a695-a2d394e348ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:65:4e:53:f0:83:b2:45:88:dd:af:71:e0:5e:
                    d3:90:b6:86:86:b6:cc:b3:08:ca:38:5c:44:54:8e:
                    5f:0b:c6:0c:4d:ba:72:1e:fa:b0:b2:34:d6:59:b6:
                    b6:71:56:2c:23:6b:d0:0b:f2:95:5b:9c:f2:4b:12:
                    b6:02:57:58:27:90:0a:60:20:ee:b6:a4:cd:81:32:
                    ac:67:d3:ed:98:5f:53:84:2b:e2:2a:72:4b:16:f7:
                    45:a4:c8:d2:31:f6:ce:03:6a:af:01:13:7e:15:4f:
                    e4:98:53:93:0d:d5:25:72:3e:6e:50:1c:4e:5f:56:
                    33:5f:cc:3c:18:7c:cb:93:2b:f8:3e:11:ba:fd:ba:
                    a8:a7:fd:25:16:c1:98:20:21:09:b4:ed:51:ef:24:
                    1f:c0:01:50:76:b1:d6:24:f1:12:fc:f7:e3:a0:30:
                    8f:28:9e:fc:a5:f2:cd:3e:b8:96:d4:72:e6:35:95:
                    3b:93:c4:34:0c:85:47:d3:23:42:7f:33:69:21:1d:
                    c5:38:16:cd:26:6e:d6:83:e1:2a:bf:ea:40:72:70:
                    bd:01:8d:91:e6:c9:ee:da:d4:12:8e:45:be:05:7f:
                    b6:14:d2:65:db:bb:39:b4:ca:5a:c3:1e:47:a4:75:
                    7c:42:a9:76:65:ff:6c:70:04:87:a1:96:b4:22:b6:
                    43:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:09:10:E9:BB:FB:06:E0:31:3C:5E:29:D5:39:A2:72:A3:67:EC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/729e04e9-be8d-3086-9a98-db1b2c6944c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a5:79:5a:5b:77:25:d9:c8:c2:ae:6e:b1:61:4d:9d:8a:1a:
         89:f4:6a:e6:3a:3c:03:6c:83:02:80:c3:f8:a0:b0:9c:0d:ce:
         29:6b:1c:ec:09:61:17:aa:45:4f:08:ea:1d:7b:7d:e2:78:c2:
         9b:c4:63:75:94:61:48:53:92:97:a1:69:3b:de:25:5f:3f:09:
         62:b5:de:43:94:e0:6d:a7:4d:0b:97:b2:3a:96:77:90:08:cf:
         ce:9a:7e:e6:a4:7b:4a:05:71:d3:97:be:75:8f:35:8e:17:3a:
         53:f9:d4:5b:45:b5:c0:49:6f:ed:a1:80:cc:94:bf:f5:ae:1d:
         ca:09:fd:56:cd:41:f7:1d:cb:c8:2c:c9:b1:ed:57:ac:5c:82:
         43:b1:e2:d0:25:13:bd:75:26:18:29:3b:df:97:24:9b:65:c7:
         65:b9:96:07:b9:59:fd:54:72:33:64:41:06:be:f7:a7:47:e6:
         31:f0:36:a0:75:7c:21:c2:d1:16:73:b2:d4:1f:0f:ac:8e:04:
         48:3a:9a:64:c4:b7:a2:66:b5:c5:d4:e4:10:15:64:52:95:e1:
         fb:2d:8c:ff:7a:d9:c3:d0:47:c5:1c:fc:95:e1:f3:c8:f5:f2:
         e1:8f:60:87:de:ce:2e:df:e5:d9:80:55:74:51:f8:37:9d:7e:
         27:49:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:51:21 2026 by rpki-client