Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/afb38254-dbef-357e-a36a-a7861e16c2b7.roa
File:                     afb38254-dbef-357e-a36a-a7861e16c2b7.roa (raw, json)
Hash identifier:          FZMBir1Si5pnJuIhVApt1uQYg0Dkxx9S1VQUmKZc3fM=
Subject key identifier:   1E:CC:2F:B7:5B:C5:BD:CB:31:A8:AE:3E:92:7E:0E:35:C5:C8:28:D7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D84831AEB106D8024ABD32360
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/afb38254-dbef-357e-a36a-a7861e16c2b7.roa
Signing time:             Wed 15 Apr 2026 19:12:26 +0000
ROA not before:           Wed 15 Apr 2026 19:12:26 +0000
ROA not after:            Tue 14 Jul 2026 19:12:26 +0000
asID:                     6167
IP address blocks:        2600:1004:a127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:84:83:1a:eb:10:6d:80:24:ab:d3:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:12:26 2026 GMT
            Not After : Jul 14 19:12:26 2026 GMT
        Subject: CN=63ff7746-2138-4b93-a0d7-523316efc1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:96:fd:d9:37:a0:73:61:21:03:cd:4a:02:
                    de:67:bf:14:ef:d1:89:77:b8:ad:0b:b6:79:52:4b:
                    48:13:d6:3a:f8:27:10:e3:b3:45:f2:69:c7:55:b2:
                    ac:94:9a:8a:98:83:63:18:62:df:d1:f6:af:81:9c:
                    55:68:0d:fd:6f:54:18:ae:c3:3e:5d:09:93:c7:3f:
                    ed:05:7e:8e:7f:e9:41:32:8c:20:10:c6:05:4b:7a:
                    b1:47:98:26:2a:f3:68:0f:8f:8d:7a:6b:7d:0d:3c:
                    21:91:c7:7c:d6:4b:30:76:8b:b8:bc:8f:2a:34:bd:
                    f4:fe:8a:b2:89:d9:13:91:c4:8f:ae:2b:9b:be:a1:
                    d3:59:8a:13:61:79:f5:9b:7d:ce:d7:7a:e3:e3:3d:
                    9a:35:23:ca:db:66:e4:dd:c2:d3:35:a1:3a:23:a2:
                    7f:82:77:c4:9b:9e:3c:17:71:c5:7e:96:64:32:49:
                    7e:dc:11:b2:06:6f:6a:33:2b:00:68:9e:08:41:0d:
                    f8:f7:af:61:a5:a3:3b:cc:1b:66:f3:55:73:f8:65:
                    91:d0:38:1b:0c:6d:81:85:90:48:6b:62:91:02:1f:
                    3a:39:d5:b6:45:0e:59:e5:85:36:a6:aa:a0:d7:e3:
                    16:01:f4:2f:13:eb:97:0b:60:0b:78:4b:0a:7a:4a:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CC:2F:B7:5B:C5:BD:CB:31:A8:AE:3E:92:7E:0E:35:C5:C8:28:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/afb38254-dbef-357e-a36a-a7861e16c2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f5:64:6f:07:8e:82:a5:76:4f:fb:cb:9b:8c:2b:fc:5c:2c:
         b5:57:ce:97:a6:0a:5d:ff:2d:bf:86:48:3a:c9:ec:c0:ed:0a:
         c7:a3:50:91:1e:58:01:d2:f7:2e:9a:4c:88:9a:ac:13:90:ec:
         72:f8:8e:47:6c:d8:11:62:bb:2b:24:7c:d1:7c:44:a9:ea:9b:
         64:89:cc:68:e4:67:e6:0b:92:67:65:06:22:22:ac:be:95:86:
         e1:ef:e7:51:ad:33:11:92:39:b8:f0:fd:cf:d6:cb:a7:13:7f:
         e2:a0:a2:10:05:39:50:9f:c8:ce:2f:b6:65:00:e2:c3:20:8b:
         c7:da:39:ba:e2:d8:77:a8:23:d0:56:03:83:47:0a:67:75:09:
         cf:eb:b4:91:68:fc:c2:33:a8:56:5a:96:65:55:3a:04:ca:93:
         bf:65:fd:d5:fe:fe:6e:36:24:32:d0:a1:22:12:68:c9:cc:27:
         92:8a:cc:1c:38:9d:4f:c0:8a:9a:6a:55:7b:ff:fc:b8:ae:60:
         5c:99:62:9e:16:20:8c:5f:16:c9:c9:ea:36:40:9c:b5:0f:12:
         20:95:b4:70:8b:dd:0a:b6:a6:02:3b:27:ea:d8:17:45:e2:17:
         7b:6c:2b:9e:94:41:48:45:dc:72:dc:49:97:1d:c4:37:0d:ca:
         b3:87:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:57:11 2026 by rpki-client