Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa
File:                     f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa (raw, json)
Hash identifier:          TdV7/b1g4p7miWZJPLiW9hDHpLGetHEkLz0VE6uu1M8=
Subject key identifier:   F0:2A:9C:DC:39:F0:9C:AE:E0:36:9D:DA:CE:6D:CB:FF:E0:9A:F7:A2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B418F7D10FEB3742D7680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100f:b1d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:41:8f:7d:10:fe:b3:74:2d:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=b14e5d2b-ca78-4bc8-b627-1164c135b405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:94:1c:a2:66:bc:36:8e:31:a3:54:76:e5:
                    7a:9f:c1:29:61:c0:e4:9a:a3:a0:e7:c6:d0:b8:38:
                    53:68:f2:59:9d:f6:69:ab:bd:9c:41:e2:2c:03:1b:
                    93:7d:43:16:af:ae:23:ee:6d:cf:4d:fc:ba:8e:b7:
                    76:34:98:99:a3:f6:83:3f:d5:ea:2d:dc:f6:c9:05:
                    62:d8:48:a3:0d:d2:cc:67:dc:7f:0d:92:fa:82:ee:
                    f3:66:11:5b:41:35:88:8f:00:9c:4b:f2:0e:c7:13:
                    30:1f:74:6c:bc:9c:0e:f1:8a:ca:2d:47:a0:26:c3:
                    ed:6d:20:40:46:0a:82:0e:9e:cb:be:ad:fa:38:64:
                    8e:a2:d1:00:34:ae:2e:d5:63:b0:1d:e7:27:dc:74:
                    57:a4:d8:44:70:bd:20:ac:5c:d6:55:b5:12:cd:35:
                    e7:62:2c:71:b6:1f:30:17:b5:3f:c9:09:dd:2d:96:
                    4a:13:2d:95:c3:48:63:c6:dc:a7:7e:0a:d5:05:7e:
                    2c:c4:c5:28:24:5e:54:c4:b0:e0:8d:c1:24:1b:9a:
                    83:69:ac:3a:60:ec:4e:72:7a:fb:0d:f3:b5:07:2e:
                    08:37:72:cf:b9:c4:a5:9c:2a:7a:42:ae:72:69:2b:
                    30:7a:98:d2:f8:48:ff:09:39:91:c4:82:77:7c:ab:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2A:9C:DC:39:F0:9C:AE:E0:36:9D:DA:CE:6D:CB:FF:E0:9A:F7:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f298a90b-04a5-3e4a-b30f-36ce18d7379c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:01:a6:bd:e1:e8:11:53:da:b3:87:9b:9e:72:d0:8c:54:f4:
         1c:4a:15:d0:8b:01:b2:90:ff:53:a5:a8:f6:03:bb:c6:2c:93:
         ba:78:00:42:39:fe:6f:6c:1a:9a:12:bb:05:e2:2b:7b:79:2f:
         aa:73:d1:db:7d:67:ba:48:97:64:c1:10:0f:9e:7b:ec:04:b6:
         5b:f5:36:46:f4:83:e2:95:7a:fe:da:75:73:e5:ab:96:de:47:
         ef:78:2a:db:bd:69:9d:b1:ca:1a:6a:9c:ae:7c:7d:17:de:e2:
         80:9e:98:b9:f7:df:96:2b:65:2e:c3:3c:d1:f2:a5:05:dd:3d:
         69:bd:ae:85:2e:18:69:e3:db:d6:34:05:1a:ba:1e:8d:1a:20:
         34:5f:51:f2:bc:1c:6c:d0:28:0f:56:cd:60:99:05:e5:65:1e:
         4e:1c:7a:e8:93:b6:fb:0b:ab:6b:c1:b2:72:18:29:22:3c:c2:
         77:c2:32:15:40:87:21:b7:51:2b:03:42:ca:e5:b2:70:ff:18:
         11:df:d8:0e:db:38:82:9d:44:d3:3d:12:b1:c5:57:96:d4:88:
         8d:4d:05:5f:57:f6:11:3f:b3:27:fe:08:12:86:5c:f9:15:9a:
         8f:5c:b4:71:94:7c:32:9c:35:91:9f:87:3c:17:a2:42:a0:c6:
         39:d0:e6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:12:44 2026 by rpki-client