Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d63e7efc-b29d-30da-8cf3-06ad92a6a8f0.roa
File:                     d63e7efc-b29d-30da-8cf3-06ad92a6a8f0.roa (raw, json)
Hash identifier:          Xckh41yXjnFS1bjIeGyTNQ2V0Jywyr9v9CX0+yGruys=
Subject key identifier:   1B:A7:85:E2:1D:82:6A:FC:97:9B:0C:8D:F3:06:09:31:E2:71:4F:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D2FC994ACA5FA997B0A40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d63e7efc-b29d-30da-8cf3-06ad92a6a8f0.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100f:b210::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:2f:c9:94:ac:a5:fa:99:7b:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=056c8bc8-7a11-4a9b-a773-785c23d6821a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:ef:6f:aa:24:5b:26:3a:16:bf:8e:d7:fa:
                    aa:4a:63:d4:2f:38:44:52:c1:dd:77:b2:42:13:8b:
                    99:9e:a1:7f:f6:e6:87:4c:f2:45:c1:5d:47:30:5c:
                    5b:01:d2:6b:ec:6a:95:3a:7e:b6:2d:f1:ed:59:68:
                    41:20:59:19:95:0f:26:a2:83:8d:54:5b:1f:b3:0c:
                    f9:bc:d4:84:c4:b9:f5:b9:85:1a:f7:bc:26:7e:88:
                    3a:63:39:83:f1:84:e7:a0:1c:c0:32:1e:e1:e2:a4:
                    69:6b:da:9a:34:23:00:ce:e3:8a:f0:30:b9:a8:ab:
                    12:61:1b:f3:36:90:26:43:a8:c0:04:41:6d:87:43:
                    47:23:1a:58:68:04:82:38:6e:53:7b:81:0e:be:90:
                    1d:16:ff:2a:33:94:15:18:81:1b:75:fa:e0:32:cc:
                    6b:db:15:92:4e:28:02:01:ec:c2:66:07:68:ad:59:
                    85:95:6e:f5:1b:b4:6e:88:64:c0:02:b6:5d:1a:88:
                    d5:88:a0:65:8d:da:e2:53:07:2c:c0:cb:7b:55:42:
                    63:49:4f:bd:c0:33:0f:4f:4e:c4:2c:1d:30:b2:cd:
                    16:8f:7c:56:07:69:3e:d7:c6:4e:1d:15:92:70:a1:
                    c1:58:e2:1e:86:51:d9:de:c4:d5:9b:2f:cd:a8:6c:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:85:E2:1D:82:6A:FC:97:9B:0C:8D:F3:06:09:31:E2:71:4F:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d63e7efc-b29d-30da-8cf3-06ad92a6a8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b210::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5c:17:2e:26:53:6d:21:d2:6d:de:ba:5b:4f:07:61:c3:27:
         bb:52:85:3f:92:a8:58:3a:df:dd:a6:53:23:15:3d:9b:fa:1c:
         c2:c1:36:e5:56:76:c2:58:3d:dc:c1:b6:94:97:02:60:b8:da:
         2a:86:d5:1f:f4:16:62:ef:0c:16:1e:98:a0:5c:94:7d:6e:8e:
         45:34:ac:a6:24:f4:30:d6:d2:8c:b5:a6:42:9f:1d:49:60:89:
         61:9e:03:c5:8e:ff:e2:f9:12:5a:b8:ff:a6:79:7d:ad:2f:ce:
         31:38:f7:4f:35:4b:2e:b2:d7:9d:67:a4:3a:f9:c6:e6:e7:8c:
         a8:f5:bf:4b:e3:8d:ab:9a:a4:71:fa:39:d4:1f:97:3f:a8:1a:
         ce:57:8a:05:f7:c4:e5:57:3b:0f:28:7c:d0:93:3a:84:7a:b0:
         11:2f:9d:55:2b:c9:4f:37:22:a9:71:d5:1e:76:03:5a:cb:f6:
         ee:2d:82:f9:b6:99:78:96:14:b0:4c:81:c7:c0:08:eb:1c:82:
         4e:bd:ae:78:44:93:cf:32:db:aa:3d:35:a5:cc:37:cb:0c:c5:
         00:91:e4:2e:b4:18:e8:e5:d5:fd:21:87:64:71:6b:89:4d:17:
         2d:da:60:3a:f3:5a:97:6b:ee:33:44:e6:63:b5:d6:21:05:af:
         f9:4f:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:19 2026 by rpki-client