Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b96113d-7866-3b53-b689-b9e960e2783e.roa
File:                     9b96113d-7866-3b53-b689-b9e960e2783e.roa (raw, json)
Hash identifier:          tpMnZyE+qr2ZS7RnDG5I01Pk/Y+NU9wzsoIKwNzrcJo=
Subject key identifier:   B3:9C:E1:12:38:E5:3E:02:DA:E5:81:B9:04:B5:E9:96:6D:86:29:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D300A34F99169BBDF6B8CFB90
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b96113d-7866-3b53-b689-b9e960e2783e.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:1012:b360::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:34:f9:91:69:bb:df:6b:8c:fb:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=8dc4b740-25c8-487a-91f7-51ec1bf46c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:71:1b:10:c0:a2:d4:64:e3:fa:c7:f4:1c:
                    1d:22:4a:54:32:bb:41:fd:53:a2:45:af:51:e6:0d:
                    48:d4:8f:aa:da:f5:e2:2e:8e:fe:8a:3c:92:a3:a1:
                    72:f2:31:4d:15:43:19:65:21:0b:71:3c:1a:a2:26:
                    6d:eb:3a:e9:6f:7d:3a:74:0b:99:1e:a3:4c:68:4a:
                    10:c1:a2:68:c8:82:b0:47:68:4f:57:70:62:ed:f0:
                    ee:52:e5:0d:c3:78:ec:c9:b2:43:3b:a7:97:6a:87:
                    16:32:2d:36:25:3e:07:c9:36:83:29:39:38:a7:28:
                    d9:91:3f:af:10:53:a9:ea:fd:bd:da:1d:88:a7:45:
                    19:b9:c4:3d:cd:21:0a:c2:bc:53:e2:43:f3:32:35:
                    e6:6e:c7:13:8c:0e:58:c6:55:d3:31:16:58:b4:4f:
                    c1:be:9e:77:f8:fa:bd:b2:8d:09:3b:0d:ad:ac:17:
                    11:30:e1:ba:71:28:4c:d5:14:bd:46:de:a5:c4:82:
                    a9:f0:30:8a:8a:2b:e3:a9:f6:8d:79:75:e1:3e:3a:
                    97:09:20:a5:27:d8:8e:fe:93:4e:46:56:fa:7a:3d:
                    e7:55:2f:e7:92:8c:79:23:f8:10:db:0c:7e:e2:bd:
                    b3:08:a0:e8:90:f8:3b:40:40:92:5a:0e:aa:72:9e:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9C:E1:12:38:E5:3E:02:DA:E5:81:B9:04:B5:E9:96:6D:86:29:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b96113d-7866-3b53-b689-b9e960e2783e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b360::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e1:39:58:f0:0f:bd:32:13:ba:36:7a:3a:47:a7:72:2a:bd:
         55:35:bf:03:16:bc:67:a0:61:87:08:ac:ba:36:52:c2:46:5b:
         67:e9:37:f9:a9:b6:39:c1:46:53:aa:e0:0f:08:b7:89:21:31:
         9f:bc:0c:80:ef:83:43:2e:4a:20:26:9b:1e:26:8d:02:ab:cc:
         95:b6:63:b6:ec:30:0f:4a:f0:74:c9:4f:be:54:44:20:5b:a3:
         8e:53:fb:b8:d0:03:9d:cc:6e:ca:a8:d0:0a:6c:26:f4:d7:16:
         14:af:4b:a3:94:2d:1d:b0:7a:7d:24:5c:22:68:0c:81:b1:24:
         c3:12:db:5d:92:cc:94:92:01:45:6d:ed:a3:2c:3d:e2:99:6f:
         fa:7b:6a:9e:bb:41:60:5d:ef:7a:9a:a4:f7:60:2e:b3:4e:61:
         c1:b6:18:96:d7:15:8d:4e:43:02:0e:12:98:82:dd:97:e1:a1:
         fe:82:a7:c7:e9:40:fe:3c:94:02:df:4e:d3:42:45:3e:c9:57:
         2a:04:ac:e5:64:fd:bb:51:dd:fe:46:b7:0a:50:37:df:10:43:
         f5:12:15:b8:4a:1d:41:39:6c:05:b0:1d:e0:07:1a:60:89:09:
         7b:cf:d4:d9:10:b5:e9:1d:3b:b4:8e:1b:aa:01:3d:53:1c:7b:
         28:01:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:16 2026 by rpki-client