Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca0124a1-aa49-3a26-9b04-79d18556e047.roa
File:                     ca0124a1-aa49-3a26-9b04-79d18556e047.roa (raw, json)
Hash identifier:          nTCRjbMwzr7XCYv0+rv3aQ+Qm+x3OJdO4wfTk5wYpGI=
Subject key identifier:   38:AC:49:E5:E5:44:8D:AB:19:28:79:CE:7C:A8:5C:6C:77:88:B8:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05B7843310745489088C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca0124a1-aa49-3a26-9b04-79d18556e047.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1007:d010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:b7:84:33:10:74:54:89:08:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=b7cb0623-9e40-482d-a3a3-3663d38e3539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:b1:14:3c:61:bf:b6:9b:50:69:3b:0e:03:
                    70:06:1d:b8:c3:92:e3:c8:93:6c:be:0d:f1:f4:44:
                    a8:6b:e8:41:73:d8:7b:2b:5e:44:f9:d2:44:cd:33:
                    61:33:22:e5:20:d3:32:c5:cf:97:08:27:c7:d3:8f:
                    2c:68:9d:f5:42:ea:21:92:be:b1:04:df:5c:52:a2:
                    93:9f:7a:cb:91:6e:71:62:43:77:bc:8c:39:62:13:
                    47:e4:a2:1d:27:84:c7:37:c9:79:6b:2e:d2:86:65:
                    fc:03:83:00:2e:e1:22:9a:8a:36:41:9e:dc:83:24:
                    f1:be:1d:37:a9:13:95:b0:3c:3a:74:96:b7:a4:32:
                    32:50:2c:2f:e4:db:98:87:9d:f1:9d:41:3e:31:38:
                    69:46:87:1c:9a:bb:44:76:e1:48:db:a1:b6:d6:26:
                    63:4f:a1:e3:c4:76:25:da:a4:cf:45:05:47:47:ce:
                    e3:fa:a7:bd:75:fa:1b:6f:11:da:32:d8:ff:22:59:
                    f1:a9:20:4a:3d:c7:7a:60:b0:9a:b0:2e:5f:80:f2:
                    c8:e5:b5:bc:06:56:7b:a3:01:f7:2b:66:3e:de:ce:
                    ff:b4:4b:a8:93:19:3a:80:41:37:4b:fe:32:27:50:
                    17:43:c5:3f:ef:0b:a6:a8:fd:13:71:24:d7:0a:21:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:49:E5:E5:44:8D:AB:19:28:79:CE:7C:A8:5C:6C:77:88:B8:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca0124a1-aa49-3a26-9b04-79d18556e047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:d010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:90:e5:78:03:8d:c0:30:83:b5:a9:eb:21:a8:41:44:60:bb:
         b6:0a:96:d0:3d:14:67:25:df:b4:37:5a:72:88:07:88:5c:54:
         d4:e5:a3:aa:9e:f4:4a:73:a1:33:2f:88:20:be:22:a3:25:ea:
         24:ce:26:52:c3:76:78:eb:09:48:5e:2e:b1:ca:67:d1:bc:a9:
         76:0b:f5:81:4f:46:03:19:56:4b:a6:10:fd:21:67:39:b8:3a:
         8e:4d:45:62:06:cd:bc:ed:9b:0f:9f:2e:0c:99:f7:d5:cf:08:
         62:dc:24:63:1f:cd:17:c0:af:ca:92:87:cd:75:7c:51:5b:e0:
         3b:34:cb:c9:8d:1b:55:51:7e:c4:a6:ab:8c:dc:15:50:cf:ad:
         cb:66:ba:77:62:7d:bc:52:e6:70:68:1a:8c:64:14:54:7a:5a:
         59:9b:6d:bc:e8:48:54:90:99:c0:c2:0d:78:28:63:5d:58:8c:
         ab:b7:f3:b4:86:12:e7:29:1d:4c:6f:47:8e:49:d8:e9:53:08:
         2c:5e:89:fd:41:c2:bf:f2:bc:61:3f:9c:43:81:ee:0a:23:25:
         8f:9f:59:08:70:d1:42:73:b7:98:4f:2e:e7:27:6f:39:23:c3:
         a7:bd:aa:04:05:9b:3d:38:77:eb:73:9f:32:57:bd:b8:ce:56:
         2d:37:98:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE29BbeEMxB0VIkIjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
YjdjYjA2MjMtOWU0MC00ODJkLWEzYTMtMzY2M2QzOGUzNTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxixFDxhv7abUGk7DgNwBh24w5LjyJNsvg3x
9ESoa+hBc9h7K15E+dJEzTNhMyLlINMyxc+XCCfH048saJ31Quohkr6xBN9cUqKT
n3rLkW5xYkN3vIw5YhNH5KIdJ4THN8l5ay7ShmX8A4MALuEimoo2QZ7cgyTxvh03
qROVsDw6dJa3pDIyUCwv5NuYh53xnUE+MThpRoccmrtEduFI26G21iZjT6HjxHYl
2qTPRQVHR87j+qe9dfobbxHaMtj/IlnxqSBKPcd6YLCasC5fgPLI5bW8BlZ7owH3
K2Y+3s7/tEuokxk6gEE3S/4yJ1AXQ8U/7wumqP0TcSTXCiEA1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDisSeXlRI2rGSh5znyoXGx3iLjIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2EwMTI0YTEtYWE0OS0z
YTI2LTliMDQtNzlkMTg1NTZlMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQB9AQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABCQ5XgDjcAwg7Wp6yGoQURgu7YKltA9FGcl37Q3WnKIB4hcVNTl
o6qe9EpzoTMviCC+IqMl6iTOJlLDdnjrCUheLrHKZ9G8qXYL9YFPRgMZVkumEP0h
Zzm4Oo5NRWIGzbztmw+fLgyZ99XPCGLcJGMfzRfAr8qSh811fFFb4Ds0y8mNG1VR
fsSmq4zcFVDPrctmundifbxS5nBoGoxkFFR6WlmbbbzoSFSQmcDCDXgoY11YjKu3
87SGEucpHUxvR45J2OlTCCxeif1Bwr/yvGE/nEOB7gojJY+fWQhw0UJzt5hPLucn
bzkjw6e9qgQFmz04d+tznzJXvbjOVi03mAM=
-----END CERTIFICATE-----
Generated at Wed May 13 12:44:54 2026 by rpki-client