Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb5cf075-10c8-3e8f-9988-29cc480fcdb1.roa
File:                     bb5cf075-10c8-3e8f-9988-29cc480fcdb1.roa (raw, json)
Hash identifier:          NC0dnwMxq+Sd4sWsi2sgpMcOdxMzv7xNLV4pgerAeOg=
Subject key identifier:   12:1A:A6:1E:F5:64:8D:0E:59:6F:67:53:14:5D:51:1A:C5:D0:79:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67A27C9106298631B2EC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb5cf075-10c8-3e8f-9988-29cc480fcdb1.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1005:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:a2:7c:91:06:29:86:31:b2:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=517017d9-549e-4189-8502-47990e48bfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:19:2b:cc:0c:5c:ce:b1:56:04:fa:77:59:
                    f4:04:56:af:26:90:0c:5f:5f:92:56:2a:7a:47:c2:
                    09:95:9d:b5:4c:f4:e1:b9:b1:4e:fb:d9:66:0d:9b:
                    9f:9f:ce:60:de:12:5f:64:55:70:2c:5a:a4:99:09:
                    28:28:59:13:4a:06:0f:71:37:e3:a7:2d:e0:42:22:
                    97:c0:34:f8:6a:d6:b1:ea:18:e3:f1:ff:b0:2f:9f:
                    78:89:40:49:02:70:5d:a9:f7:4c:c5:1f:d9:6f:e6:
                    07:e7:75:c2:a7:98:6e:03:03:6d:3a:9e:01:8a:52:
                    f3:8a:d2:ed:07:4c:e1:08:60:db:7f:ea:29:55:33:
                    21:3d:68:79:57:9b:e5:d0:1b:b4:ee:f0:1d:9f:54:
                    3d:65:0e:6a:a3:03:8e:fd:f8:04:bd:c7:cc:27:3c:
                    c9:0f:51:a4:e3:57:5b:a0:87:c7:12:f6:8e:b2:c0:
                    2a:b0:a9:bb:c9:10:fe:e9:f9:19:29:5a:2e:d5:9b:
                    a1:2f:bd:03:dd:8d:07:33:cd:7e:d7:eb:43:54:93:
                    46:60:50:fe:47:29:5f:bf:08:36:3f:a4:2e:83:27:
                    75:dc:8e:9a:1c:84:2f:85:20:e1:ae:a3:24:ac:53:
                    3e:12:2b:ea:ac:f4:2e:ba:2d:a1:eb:b9:4d:d2:08:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1A:A6:1E:F5:64:8D:0E:59:6F:67:53:14:5D:51:1A:C5:D0:79:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb5cf075-10c8-3e8f-9988-29cc480fcdb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:5a:92:ac:18:32:9e:c8:26:ef:e0:13:64:6e:90:a0:94:
         47:7d:d1:e0:fb:1b:95:ec:e7:3d:34:53:fc:ed:bc:2d:5b:d9:
         6f:30:7f:c0:66:36:30:cf:48:05:5f:52:fc:a0:00:2d:a0:1e:
         7b:ce:1f:63:a0:12:c0:88:cc:0b:8c:aa:3a:f1:7e:0c:78:73:
         fa:86:2a:97:15:0a:75:ac:69:24:bd:9a:54:71:0f:16:79:9a:
         63:07:56:3c:c0:78:b7:56:a3:01:35:b8:75:6d:67:83:0e:46:
         9a:28:34:6a:25:50:ad:6b:7c:e3:d2:fe:aa:34:8b:55:92:81:
         67:69:48:75:54:44:70:cb:74:71:1d:c0:01:20:5b:cc:b1:b7:
         7e:d7:f8:eb:80:66:54:a3:48:7f:a5:71:bc:39:5c:ac:04:13:
         71:8d:5f:4c:93:c6:0a:74:a1:02:0d:e9:c7:f6:a3:d3:89:22:
         67:97:cc:00:dc:c2:0a:86:11:85:58:34:43:59:af:74:67:5d:
         3d:c2:a2:49:43:7b:ff:37:fd:f7:c3:7c:76:2b:87:cf:d2:a6:
         21:30:c1:22:ed:2c:9a:05:09:50:cb:44:c9:d1:36:48:7f:f7:
         d5:87:4b:a5:e4:06:a8:2d:bd:f0:6a:06:07:8e:0b:fe:0c:af:
         70:1a:9a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:45 2026 by rpki-client