Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff951ba-83f4-3f16-84ef-f8197372ed37.roa
File:                     bff951ba-83f4-3f16-84ef-f8197372ed37.roa (raw, json)
Hash identifier:          ZWkh9nS3UbKzi9plqPytpHY8pksB6FGthulDwBjlthU=
Subject key identifier:   F4:81:CE:70:CB:27:FD:FC:34:9B:5A:DB:98:81:6E:B9:A0:73:F1:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE048DDE2CD06C72843FA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff951ba-83f4-3f16-84ef-f8197372ed37.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1016:b140::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:48:dd:e2:cd:06:c7:28:43:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=ddae9d4b-1f67-43ae-a321-5d579cf640c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:f6:21:a0:67:ec:56:23:66:2d:fe:95:31:
                    1c:00:a7:d4:f9:7e:41:29:c9:d2:f5:db:05:e0:65:
                    14:db:01:7e:21:a6:ad:bb:68:86:c2:31:32:5d:30:
                    02:05:4c:4f:b6:97:ba:6d:33:98:f8:51:a4:e6:de:
                    8b:81:be:a6:b3:b7:52:bd:59:85:e8:70:34:0d:69:
                    ed:31:ee:a2:fa:33:ed:13:c3:f7:48:04:d8:52:7d:
                    d8:9c:1e:ca:be:84:7f:fd:88:27:44:58:3d:bc:1b:
                    de:f4:1b:f1:ba:e8:f5:28:1b:61:d9:46:f0:11:67:
                    d7:5e:bf:6b:19:60:1f:f4:36:35:48:cd:d4:e9:15:
                    7e:e2:83:a1:df:2f:57:e4:2f:e3:22:70:3b:eb:cb:
                    c3:ec:05:79:7f:82:ac:e3:d3:23:dc:33:df:95:27:
                    f5:36:22:17:e9:81:86:01:69:80:23:2a:70:cc:fd:
                    d2:ec:64:4e:20:b3:eb:94:84:d3:41:a4:cc:91:f0:
                    fe:dd:e5:ad:50:4e:5d:ed:0c:d5:76:ef:15:75:a4:
                    b6:2e:21:69:2e:05:b4:1c:28:be:8d:f5:a7:36:aa:
                    ce:10:1a:97:e9:bb:66:5f:0e:81:a9:3f:ca:61:74:
                    68:b3:57:a0:14:2f:92:6b:38:de:19:76:51:74:c3:
                    fa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:81:CE:70:CB:27:FD:FC:34:9B:5A:DB:98:81:6E:B9:A0:73:F1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff951ba-83f4-3f16-84ef-f8197372ed37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b140::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:9f:cf:9d:df:42:35:20:14:54:e0:84:67:f2:8d:07:55:2a:
         ad:4b:e6:46:72:6a:67:e0:15:9a:e8:16:7a:d7:7f:11:e5:e1:
         4c:73:c7:49:b5:a7:18:36:78:16:ac:3e:21:81:d7:07:e7:3e:
         94:df:38:72:d9:e3:35:01:42:b5:0c:b6:ee:14:37:39:6c:e4:
         5a:1f:1f:79:14:15:be:dc:8c:05:c5:62:19:3a:35:62:7a:a8:
         05:81:aa:c6:9a:eb:00:8a:cd:44:d9:72:94:56:dc:e3:30:d3:
         4a:6a:a0:37:dd:75:ce:e1:65:5d:0f:57:11:99:14:40:43:e1:
         1c:49:2b:43:a6:c6:02:82:b3:66:62:72:e0:4b:a8:75:a9:01:
         f4:e6:b9:97:4f:c7:4b:9a:87:22:b0:91:77:e1:b9:03:f0:c2:
         37:c2:c6:4a:bc:e8:3c:38:69:82:7e:e9:69:4e:72:93:70:e3:
         68:7f:63:eb:fe:f3:55:78:9e:0e:f8:7c:cd:46:81:f7:b7:72:
         20:78:cd:96:a9:70:5e:79:c9:50:2c:68:5d:a4:f1:8f:d2:23:
         a2:67:13:e5:bf:8a:26:79:fd:a4:2f:9e:25:e4:9e:45:5f:92:
         34:3f:d9:5d:3b:bb:d3:ed:9d:1c:7f:f3:0f:0d:76:6c:51:5e:
         c0:f0:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:09:25 2026 by rpki-client