Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3edc8a47-f7c3-35b3-b614-d2fcb55ba750.roa
File:                     3edc8a47-f7c3-35b3-b614-d2fcb55ba750.roa (raw, json)
Hash identifier:          GgTKnVrFJ/+uf5qDZX58zJkh81oS1urdmE2veHoKsBc=
Subject key identifier:   97:6B:78:06:63:63:35:EC:D2:B6:F8:15:A8:63:54:77:53:8B:A0:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CEE8CC101326B33933420EAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3edc8a47-f7c3-35b3-b614-d2fcb55ba750.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:f122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:c1:01:32:6b:33:93:34:20:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=0e36690c-788f-4ba2-af4f-b247162bc9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:d8:eb:84:85:b1:34:57:f0:e8:c6:dd:e3:
                    f8:97:2d:52:1a:21:20:d0:89:70:99:bf:40:80:af:
                    88:96:bf:b5:db:0c:b7:75:f5:74:10:97:a1:b3:d4:
                    43:9f:a4:51:2b:16:df:a9:db:0d:e4:15:b1:59:58:
                    49:da:b3:9b:25:69:4c:9a:b3:9d:e8:29:3a:fd:18:
                    a7:f3:a5:cd:ce:fb:c1:59:87:bf:eb:85:48:86:6e:
                    7f:84:fa:98:a3:32:b8:40:0c:4e:67:9f:fa:c9:0b:
                    a4:f1:dc:71:e8:69:1d:da:0b:e0:49:65:19:68:22:
                    c7:6b:d6:7e:a9:e8:0c:b6:01:14:9a:87:53:e6:fb:
                    bc:9e:7d:a7:ff:b7:39:3b:44:f1:cd:ed:6e:3b:9a:
                    f3:d2:c8:59:4e:10:0c:e7:bf:c6:6b:15:31:66:ca:
                    5d:26:bc:6f:9e:b2:dd:e9:b2:9a:af:2c:eb:db:f8:
                    3c:c4:5b:8b:63:79:af:ef:4b:95:a0:7b:47:cf:70:
                    b7:ce:38:e1:6c:76:e3:e6:82:6c:87:3d:b9:0a:3d:
                    d4:04:9c:7e:d9:79:7a:6f:6f:a9:4f:d4:88:18:73:
                    1d:e7:80:34:c9:a1:79:19:ad:f4:62:b9:52:44:8e:
                    e6:fa:39:0e:33:0b:3d:5a:f7:52:d7:29:44:d7:4e:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6B:78:06:63:63:35:EC:D2:B6:F8:15:A8:63:54:77:53:8B:A0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3edc8a47-f7c3-35b3-b614-d2fcb55ba750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:f122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:99:c8:fb:07:86:78:62:90:ac:15:65:20:f4:08:20:7f:b8:
         97:7a:fc:d1:42:00:9d:26:4c:d2:dd:a3:d1:e0:ca:92:1a:0a:
         eb:f0:50:fc:72:29:ad:aa:cd:e6:f1:3d:58:0d:0e:5c:90:dd:
         29:1c:ec:13:7f:9b:9d:59:1f:14:92:3b:cd:16:7e:7b:05:74:
         97:4d:46:37:c5:10:b0:ab:01:83:e2:d9:f9:70:11:49:ba:17:
         36:bf:3a:e2:8e:a5:8d:9a:28:6e:78:79:8b:f8:31:61:b9:76:
         d6:8d:51:d6:af:ba:53:c0:be:68:a0:64:39:59:c0:e4:d6:f1:
         b8:5a:04:19:cf:3e:4f:31:65:72:40:11:8f:fe:8d:f6:fc:2e:
         95:a9:75:81:e8:b5:eb:e3:14:c4:eb:93:98:9f:73:00:5a:d0:
         ef:66:64:1a:ff:f2:b5:dc:42:09:a3:c8:40:a0:f2:f7:27:67:
         89:6c:b1:55:3b:cb:8f:23:89:53:45:db:b7:a8:c6:56:13:a5:
         60:e4:3f:66:d3:34:9a:4f:60:eb:91:37:7b:3e:0e:47:13:b3:
         dc:64:06:35:ec:de:d8:ac:f3:6e:3c:38:ee:f6:50:2a:fa:8e:
         72:b1:db:c4:3a:90:85:03:a0:e1:7d:20:54:69:9c:b6:42:9e:
         d9:58:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:16:59 2026 by rpki-client