Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1f66afc-8447-30d4-b796-33e8827a84dd.roa
File:                     c1f66afc-8447-30d4-b796-33e8827a84dd.roa (raw, json)
Hash identifier:          qYFk7l52oVZogyxAp9RETWo1NvHxZCIkC0OB6tbygbE=
Subject key identifier:   C7:03:A8:44:07:5D:CC:C2:D1:AF:6F:59:E1:A1:78:2E:9B:0C:9F:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0411FFD1AB16F3ECF6B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1f66afc-8447-30d4-b796-33e8827a84dd.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:b0c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:41:1f:fd:1a:b1:6f:3e:cf:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=67a1c96f-aa48-44fe-8fde-89436902353e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b0:b9:bc:99:2e:61:11:9f:2b:61:d0:7b:40:
                    30:49:da:06:c7:c2:57:f9:55:07:59:4f:3a:ee:d8:
                    69:ff:be:e1:a2:ee:13:0d:c2:ec:52:9e:90:72:96:
                    07:03:30:a4:0d:17:02:27:00:54:50:ff:ba:da:6d:
                    b4:26:f2:9a:9e:a6:91:ca:73:64:20:3e:23:fc:8c:
                    26:43:a9:2d:05:51:26:52:70:88:db:6a:0a:6b:c3:
                    de:25:82:2a:a9:ca:2a:d1:ee:7d:02:52:14:b3:de:
                    f0:49:ab:0f:ac:70:3b:b4:15:e6:21:eb:26:3e:06:
                    41:dc:64:60:c8:f7:74:58:52:89:2c:9e:26:16:42:
                    46:df:b6:60:f8:e1:df:83:f0:55:29:97:25:7e:74:
                    b6:87:6b:0f:16:88:69:7a:e8:a4:3d:63:f3:fa:77:
                    b4:a8:e7:6d:ec:89:d1:3b:91:74:8b:ef:85:1e:ef:
                    3b:01:ac:6f:79:63:bf:e1:8b:00:66:6c:64:78:b3:
                    7f:81:34:98:d7:76:8f:b3:77:45:8c:8e:7a:e0:b2:
                    57:d4:28:ed:a7:eb:ca:a6:f8:6c:06:38:f1:ca:f5:
                    a8:76:e9:84:a1:9a:72:26:10:26:9b:39:ce:9c:35:
                    bd:b6:c9:fe:d2:37:ec:38:37:af:6d:eb:74:62:23:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:03:A8:44:07:5D:CC:C2:D1:AF:6F:59:E1:A1:78:2E:9B:0C:9F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c1f66afc-8447-30d4-b796-33e8827a84dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b0c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0e:4b:cd:93:f8:c2:71:2f:7c:96:eb:19:d3:8d:c5:e8:6c:
         e6:f5:9a:ef:96:1c:9f:81:a2:28:22:72:d6:85:26:cc:a4:7a:
         9d:23:78:61:64:37:a2:14:db:ff:5e:fd:32:0b:47:07:6a:17:
         41:49:af:53:ca:7e:57:f3:41:a4:fd:93:54:66:ff:f8:29:93:
         db:72:00:20:f4:64:12:28:80:04:7a:45:7f:f8:ee:64:d8:9e:
         61:87:bb:36:c9:bf:7b:44:c8:b7:4d:1f:61:21:de:88:b6:f3:
         df:5d:b4:93:e1:6c:1e:e9:0e:29:26:e3:b8:89:70:21:2d:09:
         c5:e4:d4:5a:33:db:fb:8e:8f:5b:49:a6:b9:82:52:d5:b1:28:
         79:87:f6:85:66:61:fa:e4:69:61:85:b5:b9:0d:5d:16:6d:27:
         8e:67:5f:35:94:bd:90:ae:38:24:35:bd:84:18:a2:8f:1a:0e:
         20:5a:c6:49:bf:16:1a:d4:52:74:22:de:10:ff:a8:3c:03:c3:
         0a:61:75:52:33:98:5f:3e:3b:f8:78:ea:d6:59:a1:e4:c8:1c:
         04:6b:0e:9a:65:99:fd:02:98:67:38:d1:8e:ad:aa:13:8b:80:
         fb:3e:d6:7e:0e:9c:f2:aa:a8:d3:1e:ba:11:bd:73:4c:d2:da:
         48:1d:3f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:48:23 2026 by rpki-client