Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d68a678-d6e2-3f40-af0c-a7e37da458c1.roa
File:                     7d68a678-d6e2-3f40-af0c-a7e37da458c1.roa (raw, json)
Hash identifier:          dgLF34l495YQV2QjpPQjH+G+w2S0eg86qaSCz1cq8mo=
Subject key identifier:   05:EB:E0:1B:ED:29:11:17:39:DC:44:2C:12:4F:2D:35:58:3A:4C:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD64184B03A45EC11E200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d68a678-d6e2-3f40-af0c-a7e37da458c1.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        2607:f160:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d6:41:84:b0:3a:45:ec:11:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=0c4fdecf-0b97-4f9f-a53a-7af2054cd714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9f:0b:c7:82:f0:b7:e4:a6:4b:2a:64:f4:2d:
                    2a:68:60:d3:85:96:69:64:d7:3d:29:d7:27:f3:a3:
                    b0:9e:46:b0:56:48:f4:5b:78:8f:6f:c3:de:7a:a7:
                    2f:a1:9d:48:ac:8e:1a:68:c8:6e:24:9f:03:b3:d5:
                    50:eb:3f:b3:09:aa:55:1b:9f:6a:20:9e:1c:c7:35:
                    21:b6:fc:bf:3f:53:99:30:cc:35:45:c6:6c:16:44:
                    38:50:77:0a:12:14:fa:f1:15:4e:90:3d:fa:99:35:
                    e8:3e:38:1a:fc:ce:76:0b:8a:ef:93:00:5d:9b:d7:
                    a9:40:e2:81:8f:f2:78:a5:2e:97:e6:66:e8:72:c0:
                    1f:3d:43:d9:49:f8:69:63:c9:0e:1c:a0:b2:ac:1d:
                    24:53:ff:e9:6c:f0:e2:98:ba:e9:84:a5:b7:9e:ac:
                    8f:02:d6:ea:c0:5a:be:91:5a:f5:8f:16:1b:be:e1:
                    7d:28:89:7b:fa:38:77:90:fe:0a:5c:a9:df:b0:ba:
                    d8:59:c9:2a:49:64:ea:6b:7a:3a:50:64:15:4c:d2:
                    f7:c6:3b:e3:80:51:ef:35:97:63:67:ab:21:a5:d8:
                    39:fb:91:60:9f:aa:ed:b1:65:37:f1:ac:a7:89:a8:
                    41:af:39:66:1a:a3:2b:71:4c:43:85:4a:ba:be:8f:
                    f2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EB:E0:1B:ED:29:11:17:39:DC:44:2C:12:4F:2D:35:58:3A:4C:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d68a678-d6e2-3f40-af0c-a7e37da458c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:27:ed:48:15:ce:41:9f:51:18:bc:ad:d1:51:d3:3a:63:7a:
         32:1c:56:4e:5b:8a:3a:f0:3f:8e:7b:c9:62:6f:8f:6c:25:62:
         ed:58:25:3f:be:28:85:4d:f4:13:5a:b3:18:93:35:aa:73:e6:
         b7:c1:bf:c9:06:6b:3b:d6:0d:7a:b0:50:49:73:aa:f5:4b:65:
         28:56:6b:84:a5:24:a4:70:79:4f:2e:b6:e7:66:6f:2f:32:a5:
         48:b3:35:ab:4d:40:89:04:74:b4:94:68:22:0e:1d:a3:12:16:
         13:ff:43:54:4c:ae:40:1e:1f:76:37:2f:8a:fc:ca:42:37:8e:
         c3:39:c1:80:48:8d:c3:56:9f:e4:9b:e2:83:b1:44:29:a7:24:
         d9:69:e7:d3:93:b2:55:3a:52:b1:b8:5d:8e:49:55:4d:c9:9c:
         1a:c2:73:18:4d:08:a3:9e:cb:10:b0:1c:c1:17:bd:54:d6:df:
         6f:a7:5f:81:e3:9c:78:b3:3a:8f:0a:78:e7:bd:c3:08:23:7b:
         15:87:aa:0d:3f:d0:43:f1:f3:2d:e1:d0:67:18:a7:03:3d:09:
         5d:04:ea:27:df:a0:85:ad:33:d2:5f:67:e9:17:6e:55:99:d6:
         d5:3d:c5:b2:7a:36:e1:e4:8d:8f:a9:e5:de:7e:b7:7e:84:a3:
         e1:fd:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:56 2026 by rpki-client