Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87a31c42-65ab-3abc-b061-8e5394443384.roa
File:                     87a31c42-65ab-3abc-b061-8e5394443384.roa (raw, json)
Hash identifier:          4evjxLa5IDPz5Tty0oP35bs6foXAoNhv3I24rtGc0DA=
Subject key identifier:   6D:F7:76:4F:99:90:C9:58:2B:FA:65:64:59:AB:36:1B:7D:6E:11:E2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D49E17C9D95E5176AC0229FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87a31c42-65ab-3abc-b061-8e5394443384.roa
Signing time:             Wed 25 Mar 2026 19:09:55 +0000
ROA not before:           Wed 25 Mar 2026 19:09:55 +0000
ROA not after:            Tue 23 Jun 2026 19:09:55 +0000
asID:                     6167
IP address blocks:        2600:1011:a038::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:e1:7c:9d:95:e5:17:6a:c0:22:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 19:09:55 2026 GMT
            Not After : Jun 23 19:09:55 2026 GMT
        Subject: CN=1e4c0836-9c5f-4652-9d46-0db829ce22d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e3:b5:72:20:d0:69:b3:12:2f:95:14:1a:68:
                    77:53:23:26:fa:e9:49:3d:c4:bb:bb:4c:e0:df:d3:
                    e4:68:b3:f0:00:54:32:7b:23:91:37:64:26:43:59:
                    92:ce:9b:d2:2a:e1:f5:bc:5a:fc:04:4a:e9:71:2b:
                    f1:36:a8:cf:98:8f:ed:1e:99:d3:ba:bd:81:e9:e8:
                    8c:ac:74:e4:a8:a7:92:90:db:66:eb:8f:bf:ad:5c:
                    2d:9d:71:69:2b:58:7f:61:0c:4e:39:68:9d:ad:99:
                    f2:2f:eb:48:38:e5:f2:93:dc:86:9d:ab:74:a9:7e:
                    ae:87:93:d6:5d:47:77:87:c6:53:e2:e6:84:72:c5:
                    9d:de:34:27:85:47:fa:b9:c6:94:d2:64:e0:e0:4c:
                    75:51:3f:3f:51:b2:cc:f3:ce:fc:59:87:15:30:fa:
                    c8:11:c0:56:fb:77:68:e9:e2:73:5d:80:85:a2:7e:
                    93:c2:e4:bb:03:1e:05:ae:f4:fb:a7:a8:4e:6b:43:
                    d4:24:96:2d:83:05:da:db:2f:b6:2c:27:72:9a:c8:
                    ae:bc:f1:a7:b5:60:1c:3c:63:58:9f:7f:01:c0:da:
                    d2:dd:67:0c:21:6e:b4:6e:c9:a8:0c:72:96:fe:ec:
                    06:1f:bb:86:c1:e1:8d:26:70:b1:ee:0c:f7:7e:cc:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:76:4F:99:90:C9:58:2B:FA:65:64:59:AB:36:1B:7D:6E:11:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87a31c42-65ab-3abc-b061-8e5394443384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a038::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:de:d0:26:ec:c4:85:d1:03:9b:84:71:a4:01:2d:27:a5:
         97:6e:14:df:61:89:cb:1f:2e:eb:41:98:19:86:41:56:41:d1:
         44:d9:97:f4:83:9e:82:d6:20:d6:23:7f:ec:3f:4a:44:4b:52:
         8f:88:6e:4c:19:15:2e:a6:98:7d:93:26:18:f8:e4:3b:a3:b4:
         7c:5d:74:16:95:e3:d2:c8:2d:ae:6a:8c:53:bb:a9:4e:dd:74:
         38:b5:7d:db:4e:af:1f:fe:8f:21:3d:35:7a:a5:23:23:fa:90:
         9a:21:ca:cd:7b:81:8a:b8:8a:fb:7a:3a:62:85:ad:17:fc:e8:
         3a:cf:a1:02:72:0c:35:95:31:93:96:62:eb:9e:52:0d:16:12:
         1f:21:d7:5a:f3:09:ea:66:2b:6b:25:a0:d9:ed:a1:09:09:87:
         27:2e:98:b5:b4:57:ad:a3:22:06:36:11:fa:cd:fd:7e:69:c6:
         29:d5:c6:d6:a5:12:d2:24:ca:c5:32:f2:33:b6:99:6b:c4:24:
         f5:69:bd:a1:31:80:61:29:a3:da:52:12:d5:ab:ae:ea:79:53:
         6a:51:c1:92:ad:00:b7:dd:7c:b2:11:9a:73:2f:68:88:1b:a6:
         1b:71:3d:55:e1:0f:b2:c2:85:8b:a9:3a:24:fc:ab:2f:69:2c:
         5d:fb:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:56 2026 by rpki-client