Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d84f34d-50e0-340d-afd8-3d920ecf99d5.roa
File:                     0d84f34d-50e0-340d-afd8-3d920ecf99d5.roa (raw, json)
Hash identifier:          fJHwo/W1AoSH2m1/7arzCDebHqMVDgFZJAjltxcmyIc=
Subject key identifier:   4C:9A:1C:3D:0B:EA:7D:80:8A:D0:E0:4E:52:B7:E2:3F:FD:79:2C:A2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D2528431257F39391A500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d84f34d-50e0-340d-afd8-3d920ecf99d5.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100d:bf04::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:25:28:43:12:57:f3:93:91:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=bd60522b-3eef-469a-a53f-06629c6c7365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:72:e1:38:79:32:7d:76:cc:3e:2a:d5:cc:
                    66:30:71:f6:0d:f7:ed:af:37:c5:b8:ff:36:2e:79:
                    5e:1c:e8:be:75:02:c8:47:ea:31:7d:c2:87:fb:b3:
                    87:12:37:03:b8:96:6c:67:26:8b:31:95:cb:6a:82:
                    e8:54:b0:a9:6b:34:1a:88:92:57:c3:a2:00:5d:a0:
                    11:dd:74:1a:7e:56:58:fc:05:6b:41:e8:e2:42:be:
                    8a:11:05:70:7e:48:72:46:c9:fc:c1:10:0e:1a:9c:
                    43:5e:86:3b:59:38:35:6f:69:d5:96:bb:6b:09:64:
                    ca:e9:33:a5:33:74:9f:49:f9:42:99:91:ba:eb:6b:
                    c9:81:43:ab:37:1d:e0:e8:fd:c6:2a:55:9b:97:52:
                    7d:a6:37:ca:20:b4:27:06:38:36:ee:25:34:1d:51:
                    7e:7b:64:13:a8:21:d5:fe:3b:6a:84:ba:7b:9f:c2:
                    1d:e7:43:2b:b5:ac:69:d6:e1:7b:e6:01:03:3e:15:
                    d1:29:14:85:fb:22:c8:b9:56:64:63:e4:f2:30:de:
                    68:94:18:ed:5f:ed:c9:12:4e:90:46:af:19:3c:a4:
                    c1:72:54:ce:24:f3:49:5b:3c:02:ff:ed:5a:a2:05:
                    7b:f9:76:31:ad:b8:e1:c3:6c:d7:6a:eb:a8:f4:cb:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9A:1C:3D:0B:EA:7D:80:8A:D0:E0:4E:52:B7:E2:3F:FD:79:2C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0d84f34d-50e0-340d-afd8-3d920ecf99d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:bf04::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:dc:44:8d:97:ac:45:b8:1c:ea:2f:16:c8:a1:cc:0a:fe:
         d2:6a:98:e5:eb:76:a6:05:3c:6d:6e:bc:0e:7e:23:fe:be:bf:
         7a:e1:67:b5:f5:fe:d7:8d:86:81:fc:c8:65:b2:6f:db:c5:9f:
         c8:71:f9:61:e1:49:df:93:c5:db:ee:15:ca:7b:e8:70:97:db:
         79:49:c9:e2:05:04:68:06:1c:17:ce:89:7b:34:dc:ff:0f:b6:
         68:00:ee:d2:eb:6f:27:bc:82:97:12:b3:cb:4d:00:43:93:8c:
         f8:d9:20:da:83:f4:4f:27:88:55:c8:a8:61:d3:cf:92:31:b0:
         88:65:d0:94:32:86:68:01:b4:d2:28:32:e6:cc:25:db:ab:48:
         23:50:1f:f7:55:66:ed:3d:02:b6:cd:13:9e:f1:4d:3f:72:00:
         0a:6d:b0:45:fd:b7:b7:2e:ba:b1:7d:1b:c8:51:e9:da:91:7e:
         9e:a1:4e:1e:39:d9:37:7d:7a:46:b9:5e:2e:5f:d6:d8:00:a4:
         6c:be:64:86:7a:a4:51:8b:31:b7:b6:b2:a1:ec:d6:5f:4c:45:
         5f:7d:8f:09:14:5a:50:74:0a:36:3e:a6:4e:42:5a:75:eb:19:
         3f:dc:8e:0e:9b:0f:0b:94:a6:96:1f:62:cd:d1:e3:c8:aa:20:
         19:f0:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:54:16 2026 by rpki-client