Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b12d3c8-17c1-3d50-b90e-b36e328b5b82.roa
File:                     9b12d3c8-17c1-3d50-b90e-b36e328b5b82.roa (raw, json)
Hash identifier:          FTIIUjAxdaQpLjM9qrSgAyrhI1wSTXI6z6olzdSzoAo=
Subject key identifier:   30:67:53:0E:BF:59:89:BA:44:6D:64:1F:F8:DD:4F:E7:3C:3E:8B:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D9E4FFF6AE26DC19DC357AD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b12d3c8-17c1-3d50-b90e-b36e328b5b82.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1002:b070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:4f:ff:6a:e2:6d:c1:9d:c3:57:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=acb7ae6d-9ddb-40e0-a549-fdf645553d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:5e:c6:e5:6f:a7:ff:07:a6:12:97:f6:6e:
                    a9:e5:ac:14:51:fb:b4:fc:8f:91:94:6f:02:55:1d:
                    b9:4c:38:4f:14:d6:0c:59:81:cb:f8:72:eb:4f:07:
                    b0:32:0a:48:e1:6c:00:59:99:a2:1b:ff:8a:9e:2b:
                    40:bf:45:6d:23:ce:aa:e1:42:a2:58:d3:b8:14:85:
                    34:3c:da:ca:39:42:67:07:61:b1:75:ff:3f:69:28:
                    5f:5f:88:04:99:6a:d9:ae:c5:6b:53:74:63:b8:0c:
                    7f:4e:37:6c:1b:bd:73:f0:b2:00:ab:a9:bf:c9:df:
                    76:57:4d:fb:3a:a5:30:01:b6:94:da:8a:f2:51:a8:
                    4e:73:10:20:04:63:5a:a4:6f:2a:c4:97:52:72:e8:
                    11:29:25:4c:2e:f9:c8:85:c5:13:c6:4a:0a:c2:a4:
                    f7:0b:4b:27:98:25:fc:0d:a9:c7:39:61:9b:f7:aa:
                    6a:11:d9:26:00:e3:aa:eb:cd:57:80:e5:a4:a3:0a:
                    a5:49:d1:22:62:e7:66:a7:8e:51:dd:c9:3f:85:bc:
                    50:99:a5:81:7f:7f:78:f6:eb:e2:62:36:f3:5e:71:
                    ee:e0:c3:9b:50:6c:4b:f2:12:3e:fa:92:f0:4b:6d:
                    b8:dd:4c:5d:7d:51:1e:6a:26:2f:bb:6e:c9:26:47:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:67:53:0E:BF:59:89:BA:44:6D:64:1F:F8:DD:4F:E7:3C:3E:8B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b12d3c8-17c1-3d50-b90e-b36e328b5b82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:48:e7:60:0c:d6:7f:11:96:6f:2f:91:d7:b4:a1:a9:94:09:
         67:a0:b3:ca:f8:df:3c:91:bd:c8:6a:16:1c:3d:e4:bf:fc:99:
         02:29:61:8f:fa:0f:0c:f3:91:51:b0:4c:cb:3b:2c:4d:27:dd:
         5e:28:8e:fa:14:fb:ab:11:18:de:c3:ff:7e:fa:5a:25:f1:f0:
         93:c7:4d:c9:e1:e7:7a:f6:3e:7b:f5:9c:28:00:0c:5f:c3:ad:
         80:85:df:7f:f4:e2:46:a1:fc:1c:3d:de:32:8a:cd:b1:04:13:
         d1:23:a2:71:f1:c1:6c:b9:87:09:e5:23:7f:e0:28:f0:e0:82:
         72:38:7e:59:77:80:da:58:e4:c3:db:dc:d2:46:8e:7e:86:0f:
         fe:bd:a5:02:ec:78:fe:3c:aa:45:28:fc:5e:70:4a:d4:15:75:
         14:9d:51:81:ae:f4:28:97:31:2e:31:01:a6:5f:22:d2:60:a1:
         25:be:65:a2:6c:f3:09:e1:0c:4b:da:6e:3b:4d:a4:7a:57:1a:
         e7:63:8d:09:ac:2e:66:76:da:ab:e0:a5:1e:1a:30:7e:4c:94:
         f4:97:23:f1:07:45:e1:09:bf:f9:29:f7:00:5a:17:a5:2c:f5:
         a1:9b:18:9f:b9:58:91:88:bf:b2:35:e6:7a:44:e8:3a:b5:4f:
         6f:3c:fa:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eT/9q4m3BncNXrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
YWNiN2FlNmQtOWRkYi00MGUwLWE1NDktZmRmNjQ1NTUzZDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqdexuVvp/8HphKX9m6p5awUUfu0/I+RlG8C
VR25TDhPFNYMWYHL+HLrTwewMgpI4WwAWZmiG/+KnitAv0VtI86q4UKiWNO4FIU0
PNrKOUJnB2Gxdf8/aShfX4gEmWrZrsVrU3RjuAx/TjdsG71z8LIAq6m/yd92V037
OqUwAbaU2oryUahOcxAgBGNapG8qxJdScugRKSVMLvnIhcUTxkoKwqT3C0snmCX8
DanHOWGb96pqEdkmAOOq681XgOWkowqlSdEiYudmp45R3ck/hbxQmaWBf3949uvi
YjbzXnHu4MObUGxL8hI++pLwS2243UxdfVEeaiYvu27JJkdo5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDBnUw6/WYm6RG1kH/jdT+c8Pov/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWIxMmQzYzgtMTdjMS0z
ZDUwLWI5MGUtYjM2ZTMyOGI1YjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQArBw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFJI52AM1n8Rlm8vkde0oamUCWegs8r43zyRvchqFhw95L/8mQIp
YY/6DwzzkVGwTMs7LE0n3V4ojvoU+6sRGN7D/376WiXx8JPHTcnh53r2Pnv1nCgA
DF/DrYCF33/04kah/Bw93jKKzbEEE9EjonHxwWy5hwnlI3/gKPDggnI4fll3gNpY
5MPb3NJGjn6GD/69pQLseP48qkUo/F5wStQVdRSdUYGu9CiXMS4xAaZfItJgoSW+
ZaJs8wnhDEvabjtNpHpXGudjjQmsLmZ22qvgpR4aMH5MlPSXI/EHReEJv/kp9wBa
F6Us9aGbGJ+5WJGIv7I15npE6Dq1T288+so=
-----END CERTIFICATE-----
Generated at Wed May 13 10:45:18 2026 by rpki-client