Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a998199a-5a34-3db8-b702-81f969250e1d.roa
File:                     a998199a-5a34-3db8-b702-81f969250e1d.roa (raw, json)
Hash identifier:          XHZbx4/4u6IgWS5CkZSILvu8q6/ansrwk1OT19R/r0g=
Subject key identifier:   90:F7:0F:85:72:AF:2B:5C:81:B2:31:5F:59:2D:3F:0F:02:AD:38:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D24C7C2A4E76DEED05C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a998199a-5a34-3db8-b702-81f969250e1d.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100d:be04::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:24:c7:c2:a4:e7:6d:ee:d0:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=a5df1bba-fb16-4996-ba51-25b57a9618c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:be:0b:91:57:a6:88:7c:dc:3f:63:0e:91:
                    81:37:48:93:fb:50:1b:ce:b1:91:72:f5:d2:f4:ca:
                    ee:79:18:8c:63:da:f7:73:31:b2:07:d2:02:76:24:
                    4f:3c:d0:b1:e5:ca:cb:0c:25:76:6f:4d:05:08:06:
                    4b:84:b6:d7:0e:4f:c0:de:c4:ba:db:98:f3:98:73:
                    e2:3d:3e:0f:52:d9:26:d8:f0:25:34:c1:37:88:bf:
                    8d:0a:71:de:55:09:08:1b:e5:3f:41:ef:bb:e8:dc:
                    77:a8:2f:db:57:41:cc:59:28:0e:8d:09:66:3f:7d:
                    d2:9f:75:80:23:65:97:60:0c:80:12:a6:24:f9:6b:
                    02:b6:aa:ab:f4:30:76:55:01:06:f2:eb:6c:f1:07:
                    ed:9a:0d:5d:93:18:c1:03:03:0b:39:3b:6b:00:29:
                    88:ee:48:30:71:61:c7:8a:35:2f:da:29:3f:17:ab:
                    6c:82:fd:e4:44:8f:3e:9c:d4:65:e6:1e:bb:06:9f:
                    ab:22:fb:28:31:02:c6:26:77:1e:a6:ef:60:98:03:
                    83:dc:a6:97:dd:64:da:58:f5:7d:06:61:b3:85:f0:
                    86:93:e3:93:27:0a:2d:f4:0c:9e:d0:3e:46:59:29:
                    d7:e6:95:a0:65:4a:f3:86:98:f6:ab:6b:cf:da:62:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F7:0F:85:72:AF:2B:5C:81:B2:31:5F:59:2D:3F:0F:02:AD:38:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a998199a-5a34-3db8-b702-81f969250e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:be04::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:24:76:23:98:35:01:3b:a7:ce:98:c8:e6:10:9e:f3:04:
         4a:8c:93:ce:3b:44:5f:fe:38:d3:e0:ac:cc:ad:da:70:0c:9e:
         49:f2:85:82:8b:17:6c:d3:a8:7c:05:3a:4a:ac:4b:81:50:57:
         2a:cd:87:63:97:37:46:76:2e:39:e3:c8:b3:7b:46:4c:6a:cc:
         e8:d2:01:ab:a7:78:a4:59:9f:59:b8:ee:09:18:77:4e:c4:d5:
         b7:8b:d4:e5:ea:9a:00:61:02:76:ec:c1:30:38:4c:01:76:0c:
         e4:60:c2:fc:00:47:d4:c6:80:ad:d4:a9:70:e1:4c:64:70:79:
         82:08:62:61:75:e8:c0:53:6d:e4:13:69:fb:b7:df:31:b1:92:
         dc:71:c6:0b:fd:16:30:bd:fa:72:8a:99:8b:b5:a3:5c:bb:bd:
         94:21:35:55:4e:ac:1b:5e:a5:76:b2:81:ed:76:0a:69:78:bf:
         9c:14:aa:93:7d:ce:38:12:47:b8:c1:3f:3f:a3:ed:6e:fe:f1:
         a9:08:38:c1:3e:0d:49:3f:e7:f2:27:c9:75:5d:f5:d4:91:41:
         cb:0e:50:e1:a2:8f:7a:a3:59:36:b3:35:3b:87:72:6d:8e:de:
         f7:c9:d8:72:a0:ae:10:85:a4:fa:35:92:bf:d8:48:55:96:6a:
         ee:97:f4:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0DfSTHwqTnbe7QXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
YTVkZjFiYmEtZmIxNi00OTk2LWJhNTEtMjViNTdhOTYxOGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6S+C5FXpoh83D9jDpGBN0iT+1AbzrGRcvXS
9MrueRiMY9r3czGyB9ICdiRPPNCx5crLDCV2b00FCAZLhLbXDk/A3sS625jzmHPi
PT4PUtkm2PAlNME3iL+NCnHeVQkIG+U/Qe+76Nx3qC/bV0HMWSgOjQlmP33Sn3WA
I2WXYAyAEqYk+WsCtqqr9DB2VQEG8uts8Qftmg1dkxjBAwMLOTtrACmI7kgwcWHH
ijUv2ik/F6tsgv3kRI8+nNRl5h67Bp+rIvsoMQLGJncepu9gmAOD3KaX3WTaWPV9
BmGzhfCGk+OTJwot9Aye0D5GWSnX5pWgZUrzhpj2q2vP2mJDnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJD3D4VyrytcgbIxX1ktPw8CrTj4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTk5ODE5OWEtNWEzNC0z
ZGI4LWI3MDItODFmOTY5MjUwZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQDb4E
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABniJHYjmDUBO6fOmMjmEJ7zBEqMk847RF/+ONPgrMyt2nAMnkny
hYKLF2zTqHwFOkqsS4FQVyrNh2OXN0Z2LjnjyLN7RkxqzOjSAauneKRZn1m47gkY
d07E1beL1OXqmgBhAnbswTA4TAF2DORgwvwAR9TGgK3UqXDhTGRweYIIYmF16MBT
beQTafu33zGxktxxxgv9FjC9+nKKmYu1o1y7vZQhNVVOrBtepXayge12Cml4v5wU
qpN9zjgSR7jBPz+j7W7+8akIOME+DUk/5/InyXVd9dSRQcsOUOGij3qjWTazNTuH
cm2O3vfJ2HKgrhCFpPo1kr/YSFWWau6X9Gs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:19 2026 by rpki-client