Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa
File:                     a2086c90-a19e-34c2-9f70-84be6d8812f7.roa (raw, json)
Hash identifier:          agMbxy7O9wzXbUf05ayI8cqPO5tUfxLjBHQOyAAX0kw=
Subject key identifier:   E4:16:E5:30:1D:A9:D4:8B:AF:DA:CD:04:98:AA:4D:3A:A8:C1:59:EC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D3ECB71131E913EFB0900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100a:b1c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:3e:cb:71:13:1e:91:3e:fb:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=5788b47f-d52a-4429-993d-78c432daa805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:8a:06:2b:da:7d:a4:fe:7c:59:f7:33:e5:
                    a4:23:37:fc:22:da:9b:17:4f:31:43:47:fe:ab:48:
                    b9:c7:7d:7e:dd:6d:3d:f7:6f:4b:19:55:3b:e2:67:
                    a0:f7:0d:08:a7:44:68:75:72:bc:87:fa:9a:1f:24:
                    78:0a:72:e6:23:c1:65:6e:76:d1:be:16:94:33:78:
                    21:31:ff:47:e0:ad:c3:0e:45:04:7c:10:57:de:d8:
                    d3:f4:16:6a:63:0f:6e:31:3a:98:23:69:48:cd:5c:
                    93:8e:ee:d1:71:08:2e:7d:b3:66:27:7d:1b:1c:5e:
                    36:10:4f:c1:a3:01:dd:e8:94:55:13:83:c5:8e:33:
                    3f:be:15:aa:76:60:bd:c3:6f:f5:44:92:bb:2b:ef:
                    be:70:10:c1:45:1b:cf:ac:ad:f4:f1:18:e0:15:7f:
                    a7:b2:28:a7:50:2a:f8:57:84:1e:5a:ec:b9:4f:89:
                    b9:72:d5:07:f3:bf:8b:8f:04:c2:1f:86:7d:20:48:
                    01:02:89:1a:a7:7c:f8:ec:15:95:09:33:e3:f7:25:
                    52:06:37:2d:bf:87:1b:c0:d4:ef:42:4e:99:86:ad:
                    bd:1d:ab:34:a1:95:85:4f:80:42:b6:00:aa:b3:f0:
                    7c:80:1a:72:29:f2:44:f2:21:e5:a0:a4:c9:39:b0:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:16:E5:30:1D:A9:D4:8B:AF:DA:CD:04:98:AA:4D:3A:A8:C1:59:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2086c90-a19e-34c2-9f70-84be6d8812f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b1c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:54:3d:e1:89:5a:aa:80:61:27:75:c2:e3:d4:a1:3b:f3:
         8a:1b:88:ff:ad:6c:8b:fb:db:60:21:dd:e6:aa:c3:61:95:17:
         cf:8d:89:7e:cd:9a:b3:a0:98:45:b7:0e:25:59:3b:ab:79:bc:
         d3:85:06:bf:11:24:bd:30:3f:21:a0:de:7a:f6:66:42:a0:77:
         9b:7b:2e:ca:8d:35:98:43:61:b3:f0:ff:0a:e8:54:00:6c:f3:
         68:c9:ca:d9:28:b5:72:20:88:85:1c:89:d4:27:00:68:e2:26:
         bf:67:10:c6:25:dd:e3:22:32:9c:f8:b6:57:62:61:36:2e:b1:
         5b:93:0a:a7:e7:ee:9f:62:8f:f6:27:07:55:9d:ae:22:b4:9e:
         3a:40:23:c5:e1:47:94:9b:c9:bb:3b:e8:de:7f:fa:81:0e:88:
         7d:a0:71:26:8e:96:41:08:6b:87:57:36:0d:12:21:f2:39:53:
         ac:d9:08:33:02:df:1f:2e:c6:af:7a:8a:84:e5:d1:a0:42:db:
         ba:c6:34:19:4e:29:0e:8b:c2:1c:67:51:fe:69:90:d2:ff:5c:
         36:f2:f7:3b:20:8c:36:9a:bd:bc:f6:6f:69:a1:9a:3c:d3:8d:
         2a:b3:bb:3c:fe:b3:97:77:02:26:b7:b4:8d:07:d5:0e:5a:9c:
         e8:d0:78:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:09 2026 by rpki-client