Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da58a7c8-ec87-36bd-95e2-ecdc5b5180b9.roa
File:                     da58a7c8-ec87-36bd-95e2-ecdc5b5180b9.roa (raw, json)
Hash identifier:          kk7Dcrr6vk3DkhaBsz9poYPE4JxDezTBhcFVGB2h73o=
Subject key identifier:   AB:DC:E5:3D:DA:BF:99:6F:75:2C:1E:AF:8B:BA:66:0B:34:31:E3:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05AE2CF61B262DCE19DE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da58a7c8-ec87-36bd-95e2-ecdc5b5180b9.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1002:a011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:ae:2c:f6:1b:26:2d:ce:19:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=0564b360-e6b2-4bfd-a6c7-06280fce4775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:43:09:61:41:11:e1:52:9f:00:59:69:3a:cf:
                    79:f5:7a:25:19:58:a4:c5:42:2d:96:0f:98:50:a6:
                    3f:ce:06:1d:c8:22:bc:3f:b3:d1:ec:6f:9e:42:54:
                    72:26:e2:21:00:fc:bd:f0:12:6b:95:a0:a8:41:56:
                    c7:37:71:63:1a:ca:65:02:41:8b:b5:1e:ab:e7:dc:
                    5a:8a:63:31:7b:4d:81:1d:f3:bd:9a:2c:19:27:16:
                    d0:90:4f:78:7a:2b:f3:6e:a1:aa:4a:61:43:fe:16:
                    50:9e:14:2e:bf:59:53:c9:37:c4:18:0c:fd:4b:9e:
                    03:ee:00:fe:8c:27:45:7f:f2:46:78:62:86:9c:89:
                    e6:06:ad:95:1f:d0:b3:b2:f4:35:47:df:9d:3e:c7:
                    bb:7f:a1:d5:93:ab:13:9b:9d:33:a2:21:d6:b7:89:
                    ec:98:bb:e0:46:de:fa:81:49:03:ce:62:7e:a7:60:
                    cb:13:14:cf:e9:65:97:39:4c:92:e4:4e:8c:1a:31:
                    54:17:8b:0a:1e:ab:ec:a1:f7:4d:30:71:1c:44:51:
                    52:c8:52:88:f9:e9:c9:60:e2:0d:a1:a2:53:b1:55:
                    24:6c:ea:e2:8e:e6:7f:99:31:7a:b6:82:e9:53:bb:
                    48:cb:be:12:ce:37:bf:d2:3c:83:e9:f7:9b:cc:44:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:E5:3D:DA:BF:99:6F:75:2C:1E:AF:8B:BA:66:0B:34:31:E3:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da58a7c8-ec87-36bd-95e2-ecdc5b5180b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a011::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2f:e7:d1:82:c5:99:8f:fd:8a:79:a2:1c:02:01:da:08:3b:
         ab:79:5c:09:58:3f:a4:e5:ad:78:60:6d:63:64:b0:b5:9c:e2:
         d0:bf:f6:80:b5:5f:24:15:26:42:55:a6:9f:a0:c2:38:bb:34:
         dd:61:62:04:56:6f:7d:19:68:78:47:38:db:1a:36:d7:be:76:
         5f:95:e1:13:6f:9b:30:20:48:c2:f8:84:5e:e3:93:b3:3f:1b:
         c0:a1:33:31:ff:4f:56:76:aa:ba:19:c8:e8:c0:c3:44:f4:29:
         72:8e:05:c4:2d:a9:b2:59:71:59:45:3d:e7:40:ef:76:8c:6f:
         98:de:ed:96:b3:3d:be:74:de:e4:0c:c8:6a:ce:fe:08:0a:1a:
         69:0a:10:36:d7:7a:23:79:dc:fa:96:56:bd:98:b1:9a:9e:f2:
         a7:ed:91:c2:2b:1f:a1:4d:11:df:f3:6e:05:2d:e7:db:cf:ef:
         29:ff:a8:b5:0b:1f:0d:05:32:9f:86:5c:f7:8b:d0:c1:3f:32:
         14:a4:2d:f5:29:29:f0:ae:52:9c:17:c6:79:2c:b9:12:1a:19:
         54:be:66:7c:75:77:48:d1:10:0f:f2:a8:ff:2e:23:1e:10:ae:
         6f:21:62:24:05:f7:5d:2e:ba:23:68:f8:56:1e:76:7f:4a:ca:
         c2:c2:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:59:07 2026 by rpki-client