Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebd85f6b-1316-39eb-bcbf-4539b3d0b512.roa
File:                     ebd85f6b-1316-39eb-bcbf-4539b3d0b512.roa (raw, json)
Hash identifier:          foUDgQcN0uVKlT1j2JAfFP5vz9IXhy5U7e1hGCYFBU0=
Subject key identifier:   3B:BB:C3:10:70:7B:E1:C7:7F:EF:4B:89:B2:0E:02:8B:42:12:CC:F9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE04430E8DAC32906F77730
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebd85f6b-1316-39eb-bcbf-4539b3d0b512.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1012:b138::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:44:30:e8:da:c3:29:06:f7:77:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=e2b4ad86-5b46-49dc-954e-306e561a9eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:eb:20:78:b3:b4:6b:19:3c:16:ec:b1:67:
                    7a:37:bf:2e:23:cf:d1:e2:79:d7:31:3e:21:a7:02:
                    24:f6:47:bb:e0:ae:44:c9:44:31:35:88:ee:9f:50:
                    24:19:d6:95:7b:07:02:89:66:51:3c:e1:21:cc:65:
                    8d:a8:6a:c0:36:33:94:a6:70:d0:80:2e:b7:fc:a5:
                    b0:8d:9f:50:ec:cc:c2:e8:a3:7c:bd:e3:9e:9d:90:
                    c0:1e:f1:3c:76:80:46:b5:aa:ae:4e:ad:94:0d:65:
                    b4:39:93:3c:09:41:6a:c1:dd:17:e3:0a:20:dd:77:
                    88:4f:7a:66:36:cd:19:27:c5:ac:24:14:20:e2:76:
                    08:73:b4:da:f7:8a:89:af:ad:e7:08:da:d4:d9:68:
                    5c:8f:d5:15:77:29:51:75:32:76:74:a1:78:a0:44:
                    33:c5:86:79:a3:46:ec:03:7f:c7:be:c7:fa:6c:d8:
                    d5:ca:67:76:70:2c:62:ba:e7:50:74:96:c1:14:46:
                    71:19:e8:d4:f1:8d:6a:08:87:a8:5a:93:c8:9f:94:
                    04:34:d9:de:d7:56:b0:16:96:a3:2a:12:f6:d9:3f:
                    d3:fb:61:5f:0e:14:95:66:c7:35:66:01:21:42:74:
                    7a:43:d2:44:21:46:bc:ea:be:e1:69:ae:a9:76:44:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BB:C3:10:70:7B:E1:C7:7F:EF:4B:89:B2:0E:02:8B:42:12:CC:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ebd85f6b-1316-39eb-bcbf-4539b3d0b512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b138::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:50:3e:3a:95:9a:ac:18:bf:af:f9:2d:52:38:4f:9f:e5:
         d0:f4:35:a8:5e:21:c1:2a:87:4c:6e:d8:b9:eb:3e:76:6d:f8:
         48:33:63:5c:4b:7b:15:31:41:2c:14:ab:3c:12:cb:1e:52:8b:
         1f:93:c1:ba:58:ff:fe:16:d6:89:0a:15:85:e1:bb:e2:8d:39:
         11:f1:03:c9:a6:95:a9:77:81:27:87:8e:be:be:4b:5d:ce:da:
         dc:fd:23:2d:07:4b:8b:16:ca:ba:13:e6:bb:9e:e2:29:e5:b0:
         fd:2b:c2:e0:fa:ee:9b:82:a5:a1:3d:7e:85:2d:b5:69:86:bd:
         5d:17:ae:56:8a:c3:af:c7:e3:4b:c6:89:2b:4e:e3:30:71:e6:
         fa:83:56:32:ef:6a:be:64:50:ca:37:63:63:89:e4:b9:7c:3a:
         8c:cb:ed:05:a0:bc:da:cc:fd:98:47:e8:c1:cd:a0:2b:9c:07:
         70:ea:3e:5c:31:d3:cc:cb:e5:60:c9:7f:0a:f4:45:9a:f5:dc:
         ff:37:10:0f:a2:b2:86:fe:5e:cb:52:b5:14:95:0e:08:41:09:
         83:82:da:4d:a2:cd:aa:9a:ca:fa:69:d8:0c:e7:74:3d:8b:17:
         a0:27:7e:f4:d3:31:6a:fe:93:96:51:bb:7e:94:0f:78:94:1a:
         62:5f:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:18:36 2026 by rpki-client