Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18b7d70f-1b30-3575-9a4f-e9dd8e74c2b1.roa
File:                     18b7d70f-1b30-3575-9a4f-e9dd8e74c2b1.roa (raw, json)
Hash identifier:          RpH+1ucE6dkXsgI4MJ9Rn/iqZ03JOVIHjdoVmD1uSW4=
Subject key identifier:   A1:97:C9:56:F3:87:3D:6A:21:FD:39:53:14:FD:D8:90:B7:2C:72:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC679D85DDFBCCE8E5891700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18b7d70f-1b30-3575-9a4f-e9dd8e74c2b1.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:9d:85:dd:fb:cc:e8:e5:89:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=2a92ec10-7b6b-45ef-a9f6-1301ea7dafdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:a1:48:24:27:66:c2:c8:5f:e4:a4:1e:ff:
                    6c:1e:74:df:d2:85:35:eb:ca:eb:88:c2:f4:47:4d:
                    b0:bb:27:7e:17:ee:a1:88:56:94:da:17:94:5c:f8:
                    ce:d8:e4:34:9e:21:42:35:4d:d1:d3:fa:df:23:31:
                    14:77:ab:f6:a0:aa:9c:a6:ba:cc:1b:4a:f1:49:93:
                    a4:d4:97:0c:cd:29:d0:89:91:48:08:8e:c8:b6:11:
                    00:9d:7a:50:15:38:9c:f4:77:40:eb:96:70:2c:b7:
                    54:4a:08:55:37:57:1e:dc:07:70:e6:c9:cb:d2:07:
                    6d:32:45:43:a1:62:fe:ba:5e:53:5f:25:92:7a:73:
                    a0:46:63:35:62:d7:0d:25:d6:07:a5:d7:2a:56:f1:
                    9f:f7:0c:ba:fe:89:ad:86:11:f4:84:35:44:fc:27:
                    80:a0:bc:60:48:96:8d:e5:30:fa:44:b0:2f:99:ba:
                    24:6c:39:c0:30:1f:5a:c9:02:2c:ba:92:32:9a:65:
                    47:cf:6c:48:43:2c:57:48:13:6a:53:21:80:63:e8:
                    46:03:f0:78:b6:c2:2d:cd:bc:fe:02:ef:85:48:09:
                    66:05:1e:fc:3a:de:4c:0b:e1:55:d8:7d:9a:18:5e:
                    ea:b4:d8:cc:e4:84:d3:0f:f1:01:f6:97:59:eb:c9:
                    13:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:97:C9:56:F3:87:3D:6A:21:FD:39:53:14:FD:D8:90:B7:2C:72:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18b7d70f-1b30-3575-9a4f-e9dd8e74c2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d4:9d:aa:98:9c:e2:e6:49:1d:f0:48:a3:10:95:f0:fa:a1:
         9a:98:fd:91:80:d3:8a:48:fc:f8:04:a5:78:ca:9b:65:34:d2:
         39:f4:08:45:c6:4d:5d:d5:10:1b:0f:f3:76:35:a4:7f:47:7d:
         f9:9d:da:ba:1d:24:d9:70:66:2d:25:1a:5c:e8:be:42:11:6b:
         f0:19:dd:b4:f6:b6:54:4e:01:f5:a3:90:06:aa:75:78:e4:41:
         0e:2e:27:27:be:6c:6c:41:b0:b3:fa:85:4f:76:0a:14:9b:7c:
         6e:63:78:cf:35:ed:17:5f:3b:08:48:9e:65:4e:ff:75:bb:76:
         ba:c6:fd:3d:d9:31:28:4c:0b:4e:fe:4c:0d:eb:84:39:dd:78:
         29:b9:8b:e9:42:cf:57:ed:31:45:2b:06:c3:18:7e:3d:db:e6:
         2c:00:36:94:46:46:3f:99:fb:d2:2e:3f:b3:d3:62:d2:28:1f:
         e5:90:42:20:d3:fe:1b:ba:41:e1:c4:bf:00:58:49:12:b8:ea:
         bc:14:bc:8b:e6:f6:e0:54:0e:e7:6d:6f:e4:93:3f:b0:0b:bd:
         2d:e7:63:06:0d:2e:2f:97:93:54:4c:6f:90:31:cf:b6:cd:ab:
         39:d1:01:ec:3e:c6:06:4d:22:23:37:94:f1:97:c2:78:50:28:
         fa:96:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:45:17 2026 by rpki-client