Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9eb8f808-aa11-3218-8c32-589ae1274042.roa
File:                     9eb8f808-aa11-3218-8c32-589ae1274042.roa (raw, json)
Hash identifier:          +VygNurSQNlhjByQZYCLZ24U/tUAmZzVpKBJofWgSqY=
Subject key identifier:   AF:EC:E2:BA:DE:DF:17:27:26:6D:67:13:74:0D:7A:74:A1:19:E4:5D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE049940A17783665831580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9eb8f808-aa11-3218-8c32-589ae1274042.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1017:a400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:49:94:0a:17:78:36:65:83:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=4dcd32f2-6a73-4d1d-9296-d147b997b490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6b:8b:bf:01:be:62:e7:bf:a2:71:9b:09:a0:
                    2d:b6:52:8e:02:43:3b:e4:39:2b:34:b0:97:36:ab:
                    c2:4d:4a:5e:e3:c8:9c:21:4c:50:aa:b1:99:0f:c1:
                    fb:b3:cb:c3:d9:bc:40:e2:69:00:bf:d5:4a:c7:09:
                    90:a5:07:00:c8:37:74:46:be:61:05:a5:35:04:eb:
                    81:32:a3:fc:66:0c:d4:6b:65:82:57:12:47:28:d3:
                    85:55:91:ab:bb:e7:27:6c:11:27:c0:8b:09:dd:e8:
                    cc:2e:18:0e:02:89:41:85:2f:d0:a9:4b:cf:73:97:
                    ba:fc:fa:e8:0b:f1:43:5a:ae:42:44:9c:3b:60:41:
                    12:b6:00:b0:de:c2:b7:44:b4:60:fe:96:12:8d:c7:
                    74:16:d9:1d:78:f0:fc:55:bd:93:ed:14:17:9a:67:
                    c1:2b:82:be:84:2b:74:8f:ae:c2:21:41:96:64:d3:
                    f1:69:f6:4c:24:14:5e:66:d2:30:69:f5:5c:81:23:
                    bd:74:dd:78:d5:dd:12:a0:75:f0:6b:be:17:bb:4e:
                    92:9c:86:fd:73:2d:93:ed:b8:f0:99:32:c0:1a:aa:
                    1c:b0:72:4b:af:fe:47:68:8b:13:e9:24:20:41:c2:
                    9c:2a:0f:16:70:68:46:e8:6f:8b:eb:6f:20:d0:e3:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EC:E2:BA:DE:DF:17:27:26:6D:67:13:74:0D:7A:74:A1:19:E4:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9eb8f808-aa11-3218-8c32-589ae1274042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:2b:65:dc:a4:f3:45:1f:2d:3c:bd:3b:22:d5:8f:1e:c1:28:
         59:89:0b:4f:65:0f:c8:7c:c0:c5:98:54:6e:0a:25:2e:2f:a6:
         5d:04:02:1e:8f:f2:d9:8f:7b:1c:70:f8:a0:63:77:2e:c3:77:
         65:f2:fc:49:3d:24:e3:bd:bc:51:37:0e:cc:fe:fc:bf:94:1f:
         15:ec:bf:bf:14:1e:da:11:38:bd:66:f8:05:31:f0:40:57:e2:
         9e:60:06:80:09:ec:3c:48:92:77:9f:ce:16:03:f1:a1:de:a4:
         50:bd:d0:88:b9:7c:01:13:a2:43:dc:3f:0b:4a:36:48:92:be:
         07:b5:19:c1:15:34:09:82:52:d2:f2:e1:10:28:86:e2:db:ae:
         a2:b1:76:c2:8a:91:17:b2:3e:cb:d1:9a:c2:a6:1c:b6:b4:8b:
         4d:21:00:79:96:fe:3c:a0:02:b9:54:ca:cf:e5:48:fb:80:e3:
         6c:24:65:c8:98:65:97:b6:0c:47:27:87:6b:e3:58:3c:c0:c5:
         8f:95:0c:19:e6:c7:5c:a2:d8:8b:37:e4:c1:97:3b:b4:5a:6b:
         9a:af:9b:90:c5:7d:72:d8:3c:47:cb:4b:9a:2a:30:50:2f:73:
         b8:3a:e8:87:64:73:5a:12:3a:5e:d1:a6:34:58:2a:77:0c:74:
         70:e0:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:21:32 2026 by rpki-client