Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da5cc0f2-6458-322c-b7b2-6b54fcc3f2a7.roa
File:                     da5cc0f2-6458-322c-b7b2-6b54fcc3f2a7.roa (raw, json)
Hash identifier:          fafCwUCbu/kaZi6RP5CQxnDPU6EMFcI2qpn6fMDDGwE=
Subject key identifier:   B3:C3:D8:57:15:5D:A7:DA:7B:FA:FE:3A:5D:11:3E:ED:A5:8F:1E:18
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05AE08A935921DAD342480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da5cc0f2-6458-322c-b7b2-6b54fcc3f2a7.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1002:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:ae:08:a9:35:92:1d:ad:34:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=3143ebf7-d6cf-4232-b441-5dffa6723234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:82:59:26:a7:53:cb:3d:a1:33:16:a9:d0:
                    6d:b2:c0:4d:fb:f7:42:3e:9a:1b:84:f5:c2:b3:36:
                    b2:25:89:f1:7c:fc:24:66:eb:b4:91:3c:43:d3:69:
                    82:0c:b8:8c:87:3d:42:4a:20:1c:54:da:2f:6f:fc:
                    03:33:00:81:60:0a:a1:db:26:87:2e:47:51:6e:ca:
                    8e:0c:63:cd:59:e5:ad:1f:39:3c:48:54:d1:a1:84:
                    87:c6:0d:2d:45:ef:d4:24:57:79:0e:6d:11:fd:ad:
                    09:07:a5:99:44:d6:a2:f5:70:8e:af:8b:1f:89:2b:
                    da:67:12:78:e9:10:cc:b7:40:53:5b:c8:ef:99:d0:
                    a1:c9:23:90:7c:49:b1:92:00:94:84:99:d2:fe:41:
                    d1:a0:86:70:de:c6:22:55:ff:3d:18:05:d7:f4:23:
                    09:02:26:65:a7:c2:19:13:b1:43:0f:7f:b4:a8:a1:
                    c9:96:42:c0:ef:56:4a:8d:bd:d1:83:4f:82:c4:aa:
                    c9:fb:77:2d:59:4e:76:09:d6:14:24:90:fd:86:d4:
                    4d:5c:00:b9:37:bb:d4:1b:b2:bb:62:4d:ad:3c:59:
                    b1:00:dd:22:1d:f5:de:7e:0f:c2:91:ab:67:eb:6e:
                    6b:7e:58:37:d4:27:22:d9:ea:b2:38:17:90:6a:d0:
                    c4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C3:D8:57:15:5D:A7:DA:7B:FA:FE:3A:5D:11:3E:ED:A5:8F:1E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da5cc0f2-6458-322c-b7b2-6b54fcc3f2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:73:23:79:16:37:c3:67:0f:ac:9d:2b:43:2b:4c:a4:31:34:
         1c:13:40:0d:31:9c:58:ea:37:da:d7:9b:c1:45:00:cd:e9:68:
         64:2d:b4:c8:4b:1c:e1:1a:71:b1:e7:9b:0e:d6:05:03:1d:e8:
         d0:45:cf:39:0e:03:2c:8f:3e:63:0f:dd:aa:f6:38:57:f0:23:
         0d:d7:b7:2c:32:a2:a2:45:b2:79:0e:b5:74:90:61:2d:a9:5c:
         68:0a:f5:21:c8:f8:9c:7d:1d:13:9e:c7:1e:82:d1:76:e9:3b:
         93:2c:e3:9c:87:3f:fa:6e:58:df:50:ac:f2:11:2f:f4:2e:1d:
         c3:ec:9f:da:09:5a:df:0a:4d:ee:1c:fd:3b:2f:01:d8:4a:df:
         bc:06:a6:68:3b:da:3f:c9:c6:b5:e0:89:b3:33:4b:d0:fc:11:
         65:68:a1:a3:4c:e3:6a:c2:e8:4f:84:43:54:fe:92:3a:95:c5:
         7d:39:9a:d2:74:91:6e:a9:21:c4:6a:55:30:ec:ef:c6:fa:91:
         33:fa:49:c0:5f:0c:ec:be:d5:36:c2:f6:cc:51:b8:d7:d8:e2:
         49:d2:d9:64:30:3a:b6:54:f6:ef:79:34:b4:01:53:33:d2:8b:
         fa:dd:82:51:10:a3:26:32:98:7d:79:53:56:24:88:5b:2d:13:
         85:53:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:23 2026 by rpki-client