Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff408fb2-5324-3772-97e5-3cd561090c57.roa
File:                     ff408fb2-5324-3772-97e5-3cd561090c57.roa (raw, json)
Hash identifier:          81fttq3eUihorezjmiKWxr6aj5ooFQa66BsQeDN8Wzo=
Subject key identifier:   70:31:5C:53:B7:E7:F1:8C:D2:37:DB:44:8C:02:D1:A8:7F:62:2B:15
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D2644AF5A29805C0C92A84494
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff408fb2-5324-3772-97e5-3cd561090c57.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     6167
IP address blocks:        2600:100e:b240::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:af:5a:29:80:5c:0c:92:a8:44:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=f66ec339-785a-4b25-859f-dfcb41511b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:75:51:26:ea:56:c3:3b:5a:b2:db:5c:26:ba:
                    97:05:66:e0:03:75:d4:b2:3c:ae:bd:e8:ce:00:a1:
                    30:a9:37:31:33:bb:3f:21:93:c8:72:2f:ac:a9:54:
                    fd:bc:eb:a5:9c:0f:16:e1:19:e5:07:1b:ee:f1:96:
                    29:75:24:d0:e4:e3:03:27:ba:5d:50:ca:3e:da:be:
                    8d:2b:5d:3a:d0:19:5c:04:b4:89:63:21:69:02:a0:
                    f0:c0:75:52:3a:9d:14:b6:12:0c:46:f1:a9:64:f5:
                    94:6a:ed:6f:4f:4c:63:09:f5:bc:2a:f6:98:61:7f:
                    80:b3:bd:ff:d0:b5:1f:3b:21:ef:a7:74:9f:a6:c9:
                    79:8a:71:3f:ab:e3:87:f9:6e:a1:5e:05:87:4e:2c:
                    11:11:d6:b2:4d:71:df:c3:0b:f7:0d:66:b2:b1:db:
                    3c:ee:14:fc:6c:cc:e7:a5:c2:1b:14:b3:32:dc:49:
                    1a:be:c0:56:6a:45:f5:e0:62:0f:86:b2:19:ed:59:
                    0c:f6:7e:56:77:e6:9a:62:17:68:7e:7b:c7:2b:4b:
                    26:2e:99:8c:f4:5c:65:8c:48:12:74:df:34:7a:41:
                    57:5e:66:47:ab:e4:8f:f0:f7:0b:9c:fd:34:91:52:
                    e6:08:f3:89:76:07:f4:7e:0f:ab:b0:2e:e8:fc:c1:
                    ce:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:31:5C:53:B7:E7:F1:8C:D2:37:DB:44:8C:02:D1:A8:7F:62:2B:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff408fb2-5324-3772-97e5-3cd561090c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b240::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:2a:04:b5:19:42:e7:dc:1e:b8:1f:1f:ce:cc:db:f4:87:9c:
         54:21:db:93:62:4c:44:e9:33:6e:cc:9b:f1:b6:50:6e:dd:6d:
         69:8f:bd:3a:d5:f5:3a:3e:f1:b4:bb:96:4c:ca:26:96:9b:4a:
         90:99:f7:cd:85:04:89:5e:c0:61:ca:ea:5e:92:cb:9d:48:94:
         18:db:2a:0b:86:a3:e6:4d:49:d4:45:05:79:95:e1:f8:c6:7e:
         37:f3:a8:31:5b:5c:18:db:56:c1:61:57:06:ab:d0:d9:8c:f8:
         d1:e6:e5:4b:20:0c:67:cf:99:06:d8:71:fb:37:e5:51:40:78:
         8a:74:dd:0a:8b:f2:02:00:84:e5:2a:f0:f7:10:88:3f:c6:fc:
         97:32:6e:ac:c2:f3:57:05:56:89:30:4a:d0:cb:60:83:fe:41:
         8b:41:64:b7:95:b4:cd:04:df:0e:a3:60:4a:88:5d:8b:43:40:
         81:67:a5:92:21:ef:3f:9a:59:56:72:ac:b7:7e:8d:c1:c7:bb:
         9f:8d:7b:db:eb:e6:f3:85:ba:cb:fa:2b:1f:ca:3c:1a:3b:8f:
         18:f1:2c:fe:ad:45:1d:9a:ac:e7:d0:6a:a2:fb:3b:e2:82:2c:
         e8:67:70:42:66:a4:8f:7c:60:fc:6b:4b:d4:ae:e5:71:16:b8:
         4f:41:82:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:16 2026 by rpki-client