Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3b987f3-c61b-3d6e-abd9-db1ec36dfd15.roa
File:                     a3b987f3-c61b-3d6e-abd9-db1ec36dfd15.roa (raw, json)
Hash identifier:          fCbYxmjUMssBK9foTPf0I/LDteuLKxS2ELNWN5mG4C8=
Subject key identifier:   6F:05:2E:B0:23:25:8D:0B:53:CB:45:8F:BC:73:67:78:04:9F:20:42
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E15E48AD4A189561084932370
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3b987f3-c61b-3d6e-abd9-db1ec36dfd15.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     6167
IP address blocks:        2600:1004:a120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:8a:d4:a1:89:56:10:84:93:23:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=79fc5754-f237-441b-934d-f335ead73d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:17:fe:fd:1f:0b:c2:d8:d0:bd:d4:e1:c9:
                    11:36:01:49:9a:04:03:63:ea:9a:fd:d0:7a:15:3b:
                    e4:29:09:64:fc:53:e7:05:67:ec:97:2e:4a:db:7a:
                    b4:91:ec:42:e2:d6:73:ad:0c:5e:27:e3:18:4f:43:
                    82:83:53:b8:8a:79:84:95:a1:2a:12:7e:c2:a1:aa:
                    33:ad:d8:07:27:09:0b:be:e6:5d:06:36:3e:7c:2e:
                    24:ac:12:6b:c4:d7:c1:b2:28:77:c7:16:4a:34:a5:
                    b7:df:8e:a7:1f:66:50:35:f2:d4:44:53:54:16:6e:
                    0d:67:18:a9:e9:f4:38:2f:06:44:76:e2:90:61:a1:
                    f4:59:62:41:7d:fb:fb:32:3a:f9:a0:10:8a:99:4d:
                    65:97:90:50:5b:0a:f8:32:cb:3c:80:13:8c:b8:24:
                    bf:c8:d2:1c:3b:6b:93:1f:62:e1:22:68:fd:71:4e:
                    be:35:ac:b1:8a:7c:af:64:82:bc:af:db:c6:ea:1e:
                    8a:f9:5e:f1:cf:de:2d:52:65:ee:a7:fd:59:d5:fa:
                    b2:21:fa:ce:15:b9:1b:5b:be:e4:9b:aa:c3:60:60:
                    15:65:d7:94:8a:02:51:a4:aa:96:0f:59:18:5a:0c:
                    26:f4:14:55:b0:4b:38:6b:fa:e7:fc:1f:20:3d:47:
                    0e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:05:2E:B0:23:25:8D:0B:53:CB:45:8F:BC:73:67:78:04:9F:20:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3b987f3-c61b-3d6e-abd9-db1ec36dfd15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8d:23:f3:75:fd:70:cd:b2:9e:6c:e8:d3:68:22:b9:07:9d:
         e5:b0:b9:5a:dd:ee:72:4c:4f:93:47:62:84:32:d1:3b:5c:b6:
         fe:2f:95:a9:0c:5e:8f:67:3e:f0:27:49:bb:1b:3e:75:4e:c7:
         1a:77:79:62:7d:d3:a4:5a:05:6a:6b:46:dc:b3:a8:6e:09:5f:
         3a:dd:29:a4:72:a7:b3:80:52:98:4b:4b:58:a7:30:0c:87:3f:
         45:8a:fb:81:36:17:fb:d8:f4:4d:19:f6:ad:25:82:45:c4:42:
         7c:c7:06:e4:cb:4c:93:4c:3e:fc:2f:14:f7:fd:11:5f:0c:58:
         83:9c:34:27:cd:5a:b6:85:8e:92:46:b2:df:74:bb:ee:3e:f5:
         b3:44:7d:75:40:36:b4:42:a6:be:17:57:10:77:a6:93:81:e1:
         c1:2a:f9:cb:58:68:60:9e:fe:fe:0a:88:84:89:2b:8d:65:22:
         61:0c:a4:78:24:5c:20:82:1a:55:15:bf:70:8f:46:4c:32:a7:
         b5:d5:a8:38:61:39:eb:bb:fd:d5:2a:33:b5:ea:86:cb:34:92:
         58:fe:c8:5d:5a:da:2f:78:f6:ce:bf:94:48:16:71:82:29:8d:
         89:2b:6a:6e:8c:b5:73:8d:75:b7:5b:59:88:1c:4c:5f:d0:70:
         55:f5:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:23:23 2026 by rpki-client