Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c9c20f7-ef07-358a-be86-9c789c650ee4.roa
File:                     4c9c20f7-ef07-358a-be86-9c789c650ee4.roa (raw, json)
Hash identifier:          BFmxN1ALIITCBFhJVKLJ8rJsV1Ej2ynEg+uGs6ljabo=
Subject key identifier:   E6:2D:A4:AE:BC:90:A1:FF:A6:06:CD:0E:72:5A:DE:C3:F2:95:29:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D25505BC98C300E52CB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c9c20f7-ef07-358a-be86-9c789c650ee4.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100d:bf0a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:25:50:5b:c9:8c:30:0e:52:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=6637a1fb-7835-4d65-8975-6e32ba55ca58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:21:9f:3e:8d:0a:5a:5d:65:42:65:dd:e3:37:
                    f2:a5:5a:f5:91:ad:56:d8:df:97:ae:e1:76:b0:01:
                    7d:38:16:47:c2:ec:e5:2c:4f:fd:67:76:1e:ee:2c:
                    7e:88:a8:0b:3e:7a:de:f1:2d:c7:33:cd:fc:ea:e9:
                    a6:77:fe:b5:3c:7b:aa:b5:42:56:fe:30:80:e9:ba:
                    68:ed:ec:ff:06:9e:17:90:95:21:11:71:11:53:44:
                    77:e6:cb:c1:b2:c4:59:81:b7:fc:78:e9:82:ff:1d:
                    31:b8:56:e8:44:5b:a1:94:fb:a4:35:e7:e2:0b:a3:
                    a4:2c:22:23:11:ad:15:1a:0c:9a:61:5b:a6:aa:80:
                    1f:b4:f0:35:0e:f3:41:05:7f:8e:55:b5:d2:3d:2c:
                    78:ac:73:3f:67:65:05:29:d4:30:a8:6d:8e:0c:cd:
                    1e:4b:4a:dc:fd:0f:67:a1:0f:eb:98:ae:87:73:aa:
                    d9:d2:a6:70:24:9f:4d:98:9d:b9:6d:50:38:c0:2e:
                    18:8f:98:66:29:bf:89:8d:c4:5b:6c:af:75:0b:bc:
                    1c:29:23:b8:20:b3:5b:48:73:a8:78:44:d4:df:49:
                    6f:25:c8:f7:71:1f:ed:67:08:8c:c8:b8:ee:8e:78:
                    46:53:ee:eb:8f:1d:5c:44:6d:23:b7:5e:7f:aa:a2:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2D:A4:AE:BC:90:A1:FF:A6:06:CD:0E:72:5A:DE:C3:F2:95:29:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c9c20f7-ef07-358a-be86-9c789c650ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:bf0a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:e6:fb:22:b5:60:99:88:17:e1:a6:63:ac:a6:22:46:7f:
         e0:20:a4:27:e1:a4:81:1c:d3:c2:82:a8:bf:3e:35:eb:0f:a6:
         b2:0d:0d:92:f3:c9:4a:de:b0:85:51:83:b9:1f:88:93:ae:6c:
         13:b3:08:d7:84:89:85:d6:71:f8:48:ec:2f:20:4f:3d:e3:ad:
         f9:25:fe:08:52:01:00:a1:e8:de:bf:65:aa:10:50:73:a2:d3:
         84:c2:44:07:84:ed:db:d9:aa:77:12:c0:83:ac:a8:c0:91:7f:
         3d:2b:e6:b0:26:cc:bf:bb:dc:dd:34:00:32:f7:c7:ec:93:cb:
         22:7f:38:7e:ba:ab:2d:62:4d:c3:dd:8a:a2:b5:1b:93:fd:14:
         e6:fd:bd:ee:04:cb:19:ad:3c:e6:7a:b2:f4:02:fb:02:8e:fa:
         39:60:45:ab:35:3c:e0:5e:0b:1f:ea:e5:68:bc:17:ae:9f:4b:
         d9:51:85:da:79:0b:d8:9b:97:08:df:4e:1b:a0:60:1c:79:fe:
         50:5c:4a:9a:ca:7b:99:cb:d7:fb:b6:32:c9:e3:fb:72:65:d9:
         29:6d:a9:42:c3:a9:3b:ae:68:02:fc:17:71:81:8d:84:0a:d7:
         e2:11:5b:48:98:f1:b0:66:fb:14:94:09:27:66:33:5d:66:0b:
         5b:d5:a2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:13:46 2026 by rpki-client