Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa
File:                     98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa (raw, json)
Hash identifier:          eghbNMla/GmNIfn2QN3IlPMiTFDKWvrW+6BJ9L9xQmQ=
Subject key identifier:   8C:0B:74:76:C7:7E:3A:64:E9:21:2A:6D:CE:E1:BF:28:B6:BB:70:6A
Certificate issuer:       /CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
Certificate serial:       010D0C9F4328584D02179809F92E03EF7048E200
Authority key identifier: 8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     30330
IP address blocks:        2602:803:5001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:98:09:f9:2e:03:ef:70:48:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340da77e-1ff9-45fc-b1ec-0eaa0e43586b
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=742d4c12-aa71-4e7c-b23d-7a2261edbf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fb:40:2c:25:4c:e8:15:e9:d6:59:b5:0e:30:
                    d4:f5:6c:f7:95:e9:66:ae:78:8f:fb:86:30:8e:f7:
                    10:82:da:c7:f4:6f:f7:5c:ff:28:77:de:da:c7:bd:
                    af:7a:52:f2:d0:9e:4c:03:3c:67:9f:70:1c:0a:f5:
                    59:61:0a:01:a2:c0:55:c8:38:b7:e6:5a:ee:41:40:
                    bb:be:24:ce:16:af:8d:0a:f6:a4:31:bb:f1:8f:29:
                    8b:45:24:f6:38:b6:87:a5:f0:23:4c:10:6a:93:9d:
                    2f:8c:f0:e9:66:1a:82:19:53:99:f1:97:0b:e8:e7:
                    a5:e0:b7:19:5e:6a:3f:f8:42:d7:a9:f2:03:b4:77:
                    e6:38:4a:c8:6f:ba:7b:2e:13:0b:f0:bb:af:b4:df:
                    34:f8:da:a3:79:5a:48:df:f2:28:6c:d9:66:74:ee:
                    ad:72:af:82:41:c1:04:cc:fa:a8:18:2c:65:f4:ca:
                    8f:0b:25:d9:e8:ed:0a:e7:39:20:cc:36:dc:b6:35:
                    55:7f:b6:84:b3:34:b6:fb:a5:a2:ba:98:6a:41:e2:
                    45:4a:dc:fc:a3:64:4f:b5:dd:c9:27:b5:fa:c8:7a:
                    dc:86:59:f7:0f:c6:43:15:22:12:d3:04:18:f8:ab:
                    c0:8b:b4:6a:fa:76:79:36:7c:6d:29:49:e2:e4:db:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0B:74:76:C7:7E:3A:64:E9:21:2A:6D:CE:E1:BF:28:B6:BB:70:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/98db6a8e-c8b6-38c5-bd1b-d75f788debd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.crl

            X509v3 Authority Key Identifier:
                keyid:8C:97:02:52:D4:FD:88:D3:A5:1D:5B:5F:30:33:08:85:CB:5C:27:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/340da77e-1ff9-45fc-b1ec-0eaa0e43586b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:5001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:81:73:68:e2:e9:f8:51:1f:a1:ed:41:73:5f:de:dd:d3:
         00:89:ab:f8:28:32:b4:c0:df:8b:ea:ea:fb:75:64:f8:b6:c4:
         c7:04:7b:81:6d:42:60:f0:3f:db:a9:8e:65:22:a0:61:59:33:
         69:a5:a9:1e:2b:31:68:33:f4:40:24:ec:7e:ac:66:22:d8:35:
         93:c6:b6:7e:e9:76:3c:a0:6b:d6:65:61:b6:f0:0f:cd:f3:dd:
         a4:e2:7c:cb:ea:a8:0f:8f:19:38:7a:91:57:43:d1:b8:97:e0:
         23:e3:56:4b:01:73:52:52:da:bf:a8:5b:31:8b:cd:ed:e5:32:
         df:73:a8:09:e0:80:5f:be:b4:1a:27:34:44:d6:b2:c4:9a:53:
         47:73:06:ef:d3:32:c0:d7:b7:33:10:83:2b:d4:34:3c:98:f2:
         06:d9:fa:a9:48:ce:9c:e6:a8:61:e7:6f:ed:a1:67:ec:c3:8a:
         9b:49:c3:f4:dc:46:a7:62:b9:bd:91:e7:07:8f:5b:f1:58:a2:
         a6:ce:05:01:de:1a:01:88:47:0c:55:18:f5:d3:5b:5d:9e:bb:
         c4:b5:30:60:db:02:70:d1:bb:47:ca:05:38:ef:08:f9:7b:e8:
         04:5f:08:ae:1d:d4:57:e4:ed:5e:da:c9:7c:a4:fd:20:ef:2b:
         82:2b:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:10 2026 by rpki-client