Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac4a538a-e74f-3ff6-ac6d-22919a952fbc.roa
File:                     ac4a538a-e74f-3ff6-ac6d-22919a952fbc.roa (raw, json)
Hash identifier:          vW3VhltAYthv14p4VYeZNFBzd3wzeTmCYhJdDyYfvxA=
Subject key identifier:   C9:A2:31:AD:8F:05:87:9B:FF:B2:21:55:49:44:AA:31:C6:AD:76:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05D8C07B9D79D0AE093300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac4a538a-e74f-3ff6-ac6d-22919a952fbc.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1003:b4c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:d8:c0:7b:9d:79:d0:ae:09:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=429fa515-ce33-4312-8ff6-2ce11c951a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e7:5e:3d:95:e4:3b:49:6e:f7:ce:6d:46:2c:
                    95:01:3e:59:e1:dc:82:dd:c2:4f:30:09:90:bb:84:
                    95:d3:2d:8a:a1:8a:ff:2b:d4:18:3d:a8:de:68:d5:
                    8f:c9:02:a9:aa:2d:d7:03:d3:63:28:9a:71:21:bb:
                    2d:17:fc:05:f6:15:ac:fb:ed:84:ec:72:c5:e0:f1:
                    27:c0:26:4d:c0:6c:b9:59:8c:25:a5:3a:09:6a:44:
                    53:96:4f:fc:8f:32:28:e2:53:cf:1d:c6:45:e9:a2:
                    f5:13:75:00:53:ad:ac:49:b5:59:ab:8e:5f:d4:c7:
                    e9:da:d7:4e:f2:73:40:67:57:12:a9:d0:0d:00:8f:
                    c1:a8:c6:9a:da:09:02:7b:03:95:13:2e:ec:45:78:
                    94:80:18:28:ef:02:31:ab:14:72:13:68:96:47:ab:
                    4e:11:c3:75:e6:10:ed:b5:4f:22:89:b9:6c:db:3a:
                    8e:fa:04:70:17:17:01:6d:8b:1e:72:ef:d4:0e:28:
                    46:b9:3f:69:eb:ae:13:36:2e:32:e3:24:67:12:0b:
                    ea:ab:13:7e:4b:a6:9c:c8:b2:c9:11:ea:8f:9a:37:
                    39:a6:e9:0b:01:41:aa:75:a8:24:c9:45:63:c6:a9:
                    cc:b7:73:dd:1d:73:af:dd:c9:0b:e2:9a:a7:46:2e:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A2:31:AD:8F:05:87:9B:FF:B2:21:55:49:44:AA:31:C6:AD:76:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac4a538a-e74f-3ff6-ac6d-22919a952fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b4c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:0f:56:3e:33:9c:26:e1:ad:bb:ab:f0:7b:5d:f1:89:32:06:
         22:44:ec:01:6d:6f:07:cd:92:39:ef:a6:1b:13:6b:50:85:5c:
         2a:21:b5:8a:ff:da:3a:84:38:34:26:d7:b8:75:18:ef:5a:10:
         e9:a6:11:b5:a2:42:b3:49:53:3d:4b:68:28:12:3d:07:1f:31:
         f6:fb:ec:b7:3b:9d:71:34:ae:ec:69:5a:87:38:71:97:77:b4:
         fc:a4:75:1b:3f:f9:e6:35:12:3c:94:ab:25:ed:aa:7e:82:a7:
         5d:fb:5b:8a:6b:3a:0f:80:0d:6b:65:cb:79:c3:41:3e:f7:2d:
         9b:0a:71:1f:ce:ca:91:65:87:45:b1:5a:7d:c1:ac:87:0b:7b:
         35:76:df:47:68:24:cb:9f:98:c4:2a:1d:6f:d5:d7:bd:a1:1c:
         0e:4a:04:02:c3:22:54:38:fb:9e:50:69:d0:aa:6c:c7:9d:ec:
         0b:36:02:f7:90:ac:8d:ca:47:8b:36:d7:72:04:8c:0a:29:84:
         58:8f:d2:20:db:c5:9a:1c:cd:a2:ad:7d:61:32:42:5f:2b:4c:
         a1:6c:e2:bc:f3:3d:8e:46:ed:89:ab:63:99:02:61:e9:94:ca:
         11:cd:f5:9d:6e:20:af:70:a2:81:d7:4a:fc:94:12:2d:55:e6:
         2b:96:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:39 2026 by rpki-client