Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa
File:                     a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa (raw, json)
Hash identifier:          CXtr6qAM2jjU0FXfRHhDORCfwe1zV57V6bt1bk9naGE=
Subject key identifier:   37:50:01:D9:3E:22:10:05:44:C7:4B:A8:2F:E5:E0:97:AA:8E:C2:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05B339DE5B9152054103E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1005:d130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:b3:39:de:5b:91:52:05:41:03:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=1b4f3d38-2bc6-4509-869e-a09d65f4a37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:21:48:76:70:51:9d:83:ea:77:d2:b9:04:
                    c7:53:6c:2d:63:db:63:f0:1b:53:bb:3c:5e:6b:c0:
                    e5:f8:df:ee:2b:36:ae:54:cf:d1:4d:9c:a2:fd:46:
                    c3:8a:4b:6b:75:18:8d:d5:4f:7f:1a:aa:b3:0c:86:
                    dc:88:81:bc:e5:08:2d:ff:d4:e2:74:18:24:6c:21:
                    e7:e4:05:b4:40:57:7a:3f:97:2e:e4:2c:b1:0c:12:
                    ff:89:a4:d1:71:62:23:d5:74:89:ee:6b:5f:7c:e8:
                    6f:73:c4:22:c3:da:3c:1e:57:b7:88:79:9e:80:a5:
                    a9:dc:48:eb:f2:aa:04:24:20:c7:07:d9:a5:ea:68:
                    7f:ac:e6:67:20:c4:78:7a:09:db:2d:93:65:6a:a3:
                    d5:7f:9a:3b:0d:65:f4:51:21:32:9e:d6:0a:10:aa:
                    ae:03:b0:e3:49:17:1a:1f:e8:6b:5d:d0:e1:78:57:
                    6b:6a:eb:e9:95:3c:fe:ef:1f:8c:86:10:f8:99:f3:
                    7b:89:76:2e:fc:83:00:ab:6c:f2:ca:ef:9a:93:d7:
                    64:fa:d0:29:19:ba:b6:ef:df:a4:3e:08:d9:60:ec:
                    da:76:e8:c5:88:36:0d:b5:91:25:94:41:55:dd:5f:
                    9f:2a:6f:d2:21:b9:b1:da:c4:b9:26:67:71:07:f3:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:50:01:D9:3E:22:10:05:44:C7:4B:A8:2F:E5:E0:97:AA:8E:C2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:d130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9e:40:2a:df:4c:1c:e6:67:f5:ad:0a:67:f5:ae:89:13:40:
         14:ad:35:bb:c7:7b:83:86:1a:84:51:50:57:96:82:45:c1:57:
         5f:c2:92:cb:df:7d:54:90:fa:48:24:d8:ed:1f:37:58:88:69:
         a9:df:cd:6a:1f:ba:d5:a0:22:ad:a2:d6:f5:e9:76:ef:03:53:
         16:5f:14:79:31:ab:ae:9b:42:1e:bb:eb:9e:b7:8c:30:c9:fb:
         c0:78:60:40:5c:16:0b:6b:7b:d2:8c:2b:11:13:07:92:f5:ea:
         a6:60:ec:84:9f:4d:72:86:4c:12:66:8a:b6:7e:e4:71:ba:ec:
         2b:1e:40:b9:82:78:1d:c6:8e:80:14:4b:da:f1:33:2f:0a:96:
         24:8a:6a:95:9e:c5:72:07:cb:ce:8d:20:c3:7c:ae:6c:e3:81:
         25:cf:48:de:5d:43:08:79:2f:0e:c4:fd:ed:42:02:f4:4b:7b:
         be:f4:66:12:99:ce:6f:6e:6d:b9:7f:50:46:ff:58:55:8b:3c:
         37:d5:d1:35:4b:b5:0f:0d:96:87:a5:02:4a:c0:44:25:7b:74:
         f3:ed:a9:f7:c9:26:ec:35:e0:af:43:a1:d9:1f:62:48:22:37:
         0e:e1:f7:30:69:da:01:21:10:6e:e8:20:f6:53:0e:88:c3:d7:
         4f:78:d8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:16 2026 by rpki-client