Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eccf8f8c-de9c-3814-8f51-fa0e63633fe2.roa
File:                     eccf8f8c-de9c-3814-8f51-fa0e63633fe2.roa (raw, json)
Hash identifier:          DvbCGJSuxsOP5Sk0X1Rqk2jSXCN7zmQ4WkzbnR/NRqA=
Subject key identifier:   20:5C:C8:92:13:86:AE:90:D9:3A:F2:CE:13:25:A0:80:14:B0:5D:79
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D2DCE2B000E3856B08380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eccf8f8c-de9c-3814-8f51-fa0e63633fe2.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100f:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:2d:ce:2b:00:0e:38:56:b0:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=2cdf7e8c-b90a-4a36-8ccd-aad95a901038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:77:9b:34:c3:ed:6d:15:75:17:53:31:2a:
                    d8:10:08:f5:bf:e8:bd:d2:62:48:b3:05:92:e2:a9:
                    a0:41:b2:cd:ac:cf:da:d9:3c:ef:83:32:47:66:48:
                    f4:e6:9b:f0:54:13:17:83:32:f6:9d:fb:4c:66:42:
                    36:4c:5d:8e:22:e0:13:4b:6b:e2:26:2a:82:ac:76:
                    ce:6d:e3:d4:21:c8:4c:73:aa:85:2c:b6:be:63:99:
                    6d:db:47:44:38:80:52:0b:00:90:c9:7b:7d:02:e3:
                    cc:3e:64:fe:5d:5f:a7:bb:f2:18:ee:ec:d1:99:26:
                    39:f1:03:ef:60:d3:71:4a:aa:b8:de:e0:2e:aa:5d:
                    2b:19:24:b2:e0:b8:d9:f7:f1:38:67:25:5e:13:2f:
                    7f:3b:82:0c:2e:53:ba:35:88:37:55:7f:74:42:8d:
                    ab:e3:59:5c:26:14:f2:db:a7:c6:96:54:b1:a7:91:
                    25:8b:46:42:7f:b7:c5:9a:f2:57:d5:ec:cd:82:f6:
                    f4:80:9a:19:19:ac:b5:aa:0d:6a:4d:04:31:fe:78:
                    7c:6c:da:80:61:f3:04:30:cc:a1:44:97:46:b6:65:
                    1b:c3:ea:be:53:51:5f:e8:75:6f:65:db:ac:a2:14:
                    f6:6b:4b:d7:c4:6f:eb:58:02:6a:c2:da:d3:ec:a8:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5C:C8:92:13:86:AE:90:D9:3A:F2:CE:13:25:A0:80:14:B0:5D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eccf8f8c-de9c-3814-8f51-fa0e63633fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:ec:b9:a7:1a:eb:ea:70:28:4b:ec:8d:db:7c:37:64:83:
         47:a3:67:c2:2a:ad:31:b0:63:93:32:e6:c3:45:dc:23:83:33:
         87:66:3f:2d:4e:bb:df:f1:c1:fc:16:30:3f:70:6d:35:80:e1:
         15:16:35:20:3e:bf:43:55:b7:69:49:85:18:8a:30:2f:f5:ae:
         e4:f9:55:3d:69:04:10:66:60:3a:cc:fc:d0:22:19:ad:15:fe:
         d0:47:72:8a:4d:3e:bd:22:9f:59:2f:2b:a5:ba:ee:dd:43:69:
         8c:8f:51:cb:67:ee:1a:27:58:38:cf:1e:3c:b9:36:97:fb:07:
         c1:f5:08:fc:6e:fc:ce:c8:e4:3e:4c:6b:85:09:82:80:37:c7:
         43:8d:26:67:20:97:a9:cf:65:8c:4e:e2:c2:23:3e:4f:c0:6a:
         c4:34:dd:55:48:c4:df:ae:de:76:4e:f6:c7:fa:3b:42:95:df:
         3b:62:6c:a5:a7:88:22:ef:ba:7b:db:69:66:01:1c:2d:99:b4:
         0e:bd:d7:de:8c:d7:e5:b8:33:5c:ed:0b:8d:56:07:5a:38:f6:
         21:e1:81:b4:46:0a:bb:c3:d0:16:5e:b3:25:b1:01:0e:72:c6:
         ec:88:40:a9:d4:bf:5f:f6:ac:b2:98:61:1f:9a:8b:43:43:e3:
         fe:43:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:56 2026 by rpki-client