Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa
File:                     dee5b4c9-16a9-3873-8941-c417a9236e9f.roa (raw, json)
Hash identifier:          nQsbAtS4jLASUhbHwtdbCTfzOtm2J0EizVQ89uU/flQ=
Subject key identifier:   8E:F7:C2:EF:17:71:9C:99:5F:2C:1D:72:D8:56:85:77:F1:46:E5:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D47212FB818CB7C52E300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100d:b170::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:47:21:2f:b8:18:cb:7c:52:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=8132bd8f-2349-4633-8717-c8514fcda7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:8e:d7:8d:72:c9:8c:1d:97:3f:01:82:30:
                    fa:99:c5:c8:8d:bf:f1:7d:b2:49:0e:93:46:e0:51:
                    f8:42:e2:7c:ca:e3:fe:68:13:5f:12:44:ca:ea:a9:
                    b0:85:ba:a4:54:1b:df:e3:ec:e6:2a:1f:2a:11:36:
                    26:97:da:c5:ec:44:88:77:65:0b:ae:31:dd:ca:31:
                    26:ec:4e:b7:27:e8:58:92:4a:51:c0:7b:2b:d3:d1:
                    da:8c:35:4f:b6:3c:2d:9b:e6:54:44:57:97:4a:5a:
                    c8:9f:36:6d:a9:94:9f:46:2b:88:ed:f5:9d:cf:38:
                    ca:7f:50:c2:28:f5:6c:d0:79:92:17:e8:76:8b:2c:
                    b1:f9:ef:2c:4f:4b:b0:11:31:33:d9:c8:dd:5e:c6:
                    d7:c4:ba:19:08:3a:c1:c2:63:41:50:ff:b5:22:c7:
                    e6:23:86:b4:d5:2d:48:63:5d:1a:1d:65:c5:e6:95:
                    40:26:0b:eb:7f:9d:db:c4:79:67:e0:96:34:67:39:
                    06:81:05:5f:d7:db:89:50:43:71:01:14:42:f7:9d:
                    b3:74:6e:48:1a:6d:43:65:e5:26:95:eb:51:f7:4a:
                    f1:0c:6c:c2:c5:3b:d5:18:c9:c9:5b:dd:8e:84:7e:
                    93:5f:7a:54:bb:f3:83:49:7e:37:fc:29:0d:23:f6:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F7:C2:EF:17:71:9C:99:5F:2C:1D:72:D8:56:85:77:F1:46:E5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dee5b4c9-16a9-3873-8941-c417a9236e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b170::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:2d:e6:01:df:cb:a7:68:48:09:99:38:21:6d:3f:bd:b3:
         43:1e:db:b7:95:cf:89:06:e4:ec:1d:77:ef:97:50:73:4b:fb:
         ac:59:88:62:60:fa:6e:09:0e:f0:37:0f:b2:f7:85:c9:07:94:
         6b:f7:00:5e:80:2a:94:28:97:7b:b3:05:02:a4:bc:d2:34:28:
         d9:d4:59:5f:3b:65:c6:8b:08:56:fd:33:fa:d6:42:0d:61:44:
         74:61:d8:a4:e6:34:dc:2c:be:db:c5:9f:cb:e3:f3:c2:6a:c0:
         d2:70:2e:26:dc:85:6b:80:89:8c:4a:c8:3e:de:59:ff:c7:ca:
         8c:e7:7e:27:b7:39:06:63:cf:0e:59:15:4a:1b:9c:72:b3:74:
         6d:9d:48:26:95:cd:1c:92:e5:a5:e2:74:f9:c5:ac:22:a6:4a:
         55:2c:d6:b7:16:2f:53:92:d3:fa:bb:c2:33:54:f0:4c:5e:be:
         b5:2d:40:89:7e:ec:19:06:4c:07:37:57:d0:b0:2f:cb:32:bf:
         42:f2:6f:92:ed:f8:f5:2b:3b:f7:98:24:8c:1e:84:54:cb:13:
         43:eb:c0:c4:69:7a:fb:08:c1:8d:99:94:52:c9:46:57:dc:fb:
         43:2e:d5:42:f5:ac:5d:54:1e:b3:fb:c5:4e:bc:8c:ad:28:6a:
         78:59:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:11:19 2026 by rpki-client