Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e56e81b1-2a66-3f46-9c26-58d7e8427b73.roa
File:                     e56e81b1-2a66-3f46-9c26-58d7e8427b73.roa (raw, json)
Hash identifier:          hBOvoBkgb63f2SS2G0s35VJuMy8qn4ivkE9uPIAsP6g=
Subject key identifier:   15:96:63:60:00:66:B9:3C:51:AA:7E:0D:91:FF:EC:19:28:74:E7:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A07592B0707CB9345F980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e56e81b1-2a66-3f46-9c26-58d7e8427b73.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1012:a128::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:07:59:2b:07:07:cb:93:45:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=1c90db05-7830-4cf5-87a8-620f061a28f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:a6:a5:61:bd:a3:97:f0:a2:0d:51:d6:ec:
                    f2:0e:72:23:e9:3c:17:30:47:d6:6a:69:34:5c:06:
                    7c:09:70:6d:32:00:97:1e:d8:04:25:17:4a:80:66:
                    40:0c:89:7e:c2:6f:9e:98:35:a1:6f:af:34:59:93:
                    3b:a5:35:65:ca:45:22:f2:2f:d0:a1:3e:5e:08:d4:
                    99:d3:75:c2:a9:93:4d:f9:b4:e8:69:d2:47:90:ce:
                    2e:bb:6c:18:de:ce:4d:d7:7a:15:7b:e0:1d:af:f5:
                    ec:24:e2:be:57:97:a0:e8:a4:b9:16:e0:a3:f5:2b:
                    df:b6:b8:3f:f1:dd:ad:72:3a:e5:69:8d:fe:97:78:
                    79:af:0e:f7:72:63:f2:00:d5:94:cc:dd:48:05:e7:
                    79:8e:33:64:e0:2c:cb:fd:5a:84:d4:83:58:7e:1f:
                    e1:7f:57:38:69:ec:b1:05:8f:81:4f:fd:be:bb:11:
                    72:80:a8:b3:54:2a:38:5b:72:7a:42:1b:ab:f8:8d:
                    e5:61:00:2a:b5:42:80:54:a0:f8:0f:15:37:6c:11:
                    6b:02:fd:80:7c:d9:0d:7d:c1:cc:02:b4:29:f7:50:
                    53:97:24:ba:25:a3:d8:b2:4b:c4:b1:38:d0:b6:48:
                    9a:6b:10:0c:f9:9c:da:c0:ee:0d:e2:9f:75:1d:b4:
                    90:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:63:60:00:66:B9:3C:51:AA:7E:0D:91:FF:EC:19:28:74:E7:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e56e81b1-2a66-3f46-9c26-58d7e8427b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a128::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:ca:fb:8d:fb:b9:8c:30:7f:08:e2:7e:c7:d9:a2:0d:69:
         3d:b9:4d:20:4d:6a:3d:1a:f9:41:29:30:75:4e:a3:59:09:e1:
         85:dd:83:85:40:be:42:51:d0:ed:99:5e:a8:39:84:79:cd:ba:
         1b:06:58:0a:b2:e7:74:49:e6:06:15:02:30:9e:ba:f4:3a:87:
         46:68:77:5a:04:af:a5:3d:25:4a:63:22:73:b3:48:5c:4a:91:
         1c:30:8f:9c:29:2c:2a:95:ee:e4:fd:17:d9:5a:6f:68:3b:39:
         db:e3:f0:c0:57:fd:2d:1e:41:78:30:d6:b3:63:3d:d6:9c:a6:
         db:67:86:77:8b:eb:53:ab:5a:0b:f4:71:55:47:de:d2:eb:e6:
         ee:85:af:30:bb:79:1c:8c:56:49:2a:5e:e5:ce:44:17:43:6a:
         3a:14:6b:c0:40:e7:4b:4e:ab:23:41:33:cb:0a:df:d3:dc:8d:
         4c:43:a2:de:e6:2e:28:21:a9:5e:46:9e:f0:98:06:6f:43:d3:
         7f:b8:3f:29:b9:40:13:49:27:b5:46:f4:fe:1b:29:fb:a9:8b:
         34:54:fd:1a:38:53:27:27:dd:42:a1:58:58:b5:62:04:d1:e7:
         e4:c4:de:df:69:cb:68:bd:ea:4a:90:c8:58:78:40:ae:15:c9:
         81:ca:7c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:49 2026 by rpki-client