Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7bc54bc3-6387-3de7-bbd6-2b754e1c504d.roa
File:                     7bc54bc3-6387-3de7-bbd6-2b754e1c504d.roa (raw, json)
Hash identifier:          T+IYz+3wyv3L6VZwqz4UAckS+Vgl2rjBUXofow9+r14=
Subject key identifier:   F9:B7:51:FD:29:D8:F2:62:00:0B:4D:B3:F4:D7:A5:C7:A2:D1:E7:16
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A360A8212DBEB23ABF680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7bc54bc3-6387-3de7-bbd6-2b754e1c504d.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:a118::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:36:0a:82:12:db:eb:23:ab:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=09e24ab3-2ef2-4e82-81cf-c2b4c0f77ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:1f:67:eb:56:18:03:f6:2a:2e:13:48:0d:
                    66:28:69:db:0b:8d:05:a3:02:71:1a:79:54:58:e1:
                    cc:6e:ca:82:59:c4:fb:0a:6f:8f:d8:19:2d:02:db:
                    bd:56:a5:13:1a:5b:54:bd:9c:db:4d:d1:e6:6f:3b:
                    8b:b7:7c:bf:a4:a4:f2:2d:11:95:66:66:29:1c:9a:
                    a0:59:44:b1:09:43:da:a5:a9:b0:7b:f1:b3:84:47:
                    25:06:15:55:60:6d:9c:0e:64:d6:76:18:52:48:0e:
                    2a:cb:b3:5c:8d:e0:c9:75:3b:e3:14:1b:4f:0d:12:
                    f1:65:eb:6d:ef:e2:2e:e4:ed:5c:ec:c3:f8:a9:ab:
                    6c:ae:c5:5a:43:0a:18:98:2a:4a:a3:ff:06:cb:d1:
                    13:13:75:92:15:b8:af:7e:26:f3:41:63:6f:5b:30:
                    48:98:a9:8a:89:c9:95:64:94:db:15:15:10:be:4f:
                    41:07:79:81:dc:4c:47:53:cc:35:d8:c4:d4:35:47:
                    7d:11:a1:aa:3e:8e:b0:ae:9b:5b:e5:f4:ee:a9:6f:
                    9d:7a:ae:07:eb:d3:b4:5a:3a:56:52:a3:33:be:97:
                    93:ff:68:93:13:dc:78:57:c3:a7:54:b3:d0:0a:57:
                    d1:bd:99:b3:51:39:2a:f2:1e:b3:e6:ad:c3:bc:32:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B7:51:FD:29:D8:F2:62:00:0B:4D:B3:F4:D7:A5:C7:A2:D1:E7:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7bc54bc3-6387-3de7-bbd6-2b754e1c504d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a118::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a6:2c:de:66:c2:d5:45:08:d8:87:06:22:f7:3e:22:3a:dc:
         9a:cf:6e:27:f1:60:6f:28:ac:eb:0c:96:25:39:f9:a0:68:92:
         64:ff:5e:d8:c4:95:13:21:c2:51:8d:c5:18:67:1c:47:4f:6b:
         8d:37:06:26:50:0a:ac:c6:e8:6b:96:ec:40:75:92:14:4b:34:
         2d:cd:01:bf:60:ca:89:fa:68:5b:a3:c1:a1:7f:c6:a3:44:6f:
         68:e8:4e:9f:82:d5:75:2f:2b:d3:c1:cc:bb:ef:65:c8:4a:1a:
         17:27:f8:ef:e8:df:3b:78:66:0e:09:d5:c2:53:67:01:09:2b:
         89:cd:57:1c:ed:4f:43:99:8e:84:38:14:f6:98:b8:7a:44:be:
         80:47:2c:4d:5a:14:1d:73:7f:84:9f:2d:ca:4b:42:a5:1a:ac:
         fd:f9:b4:6b:08:23:25:93:cf:26:3b:7a:77:e7:72:9f:e1:7a:
         42:85:39:7f:59:df:d6:28:c4:a7:18:29:30:d9:9e:8c:67:1d:
         2b:35:27:ad:13:20:93:73:44:9f:a7:f0:1c:22:e5:ed:51:fe:
         c8:97:fb:ae:2a:c2:68:f7:eb:83:8b:5c:07:e8:47:1d:ef:41:
         75:b3:51:95:ca:ca:eb:0e:e5:6a:8e:6f:69:eb:b8:1b:5a:4a:
         e0:95:97:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:00:34 2026 by rpki-client