Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6af3399-af56-36fc-a443-43b5b2f73158.roa
File:                     f6af3399-af56-36fc-a443-43b5b2f73158.roa (raw, json)
Hash identifier:          p+3xBKp+kJWMIEAfD5izX5u3gGSaH8O5vwtUCZUepiI=
Subject key identifier:   6F:AA:DE:6D:16:DD:A0:31:E4:C1:47:2D:00:A6:6D:F2:7F:1A:D1:F1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D43A9368382E245CE9600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6af3399-af56-36fc-a443-43b5b2f73158.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100c:d240::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:43:a9:36:83:82:e2:45:ce:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=1a68796e-a12a-4299-8e2a-74e634c46a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bd:47:d3:ce:76:c6:c6:35:f3:97:64:42:ce:
                    8f:b8:b4:47:de:92:0b:f4:54:48:1a:e6:64:1c:0e:
                    f7:45:25:10:ef:cb:38:ac:83:48:c5:21:4f:98:d5:
                    61:d8:41:2b:14:b6:8d:b2:b4:45:1e:07:cd:41:a7:
                    7c:18:6c:93:32:94:d2:0d:a9:57:dc:55:e0:da:9a:
                    d7:10:24:37:78:dc:dc:d7:5d:63:5d:40:17:70:c5:
                    c6:59:91:31:71:99:e6:75:16:a5:2b:a7:d2:c8:74:
                    29:ca:e7:12:ac:50:64:5d:48:f6:bc:b1:fd:d9:14:
                    03:08:64:5e:ad:a5:77:bd:1c:78:67:d5:56:a1:54:
                    16:da:5d:0f:80:f2:0f:21:77:81:59:e8:8a:93:ad:
                    1c:41:d5:a9:67:97:8f:97:b8:e6:18:07:20:3e:a4:
                    9a:36:f3:33:15:13:9b:19:d9:e4:6d:8c:90:b8:5b:
                    7d:89:23:3a:84:90:e8:0c:29:79:9b:fb:94:eb:93:
                    89:de:2f:4a:74:be:a9:d9:01:7e:0c:06:15:13:7b:
                    b6:ca:f9:9a:d8:ed:d6:ef:5e:8d:4c:b8:ba:eb:d9:
                    1e:32:05:27:10:d1:4b:34:35:91:b4:a3:d9:94:58:
                    8c:88:f0:11:68:90:ea:16:3e:22:d4:a7:d6:da:03:
                    a2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AA:DE:6D:16:DD:A0:31:E4:C1:47:2D:00:A6:6D:F2:7F:1A:D1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f6af3399-af56-36fc-a443-43b5b2f73158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:d240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:1a:18:8a:5e:1e:09:32:4a:e1:c7:e8:ed:93:e6:99:bc:
         48:db:63:c9:d9:29:bb:4c:13:ce:33:e1:6d:18:21:46:8e:05:
         d5:89:da:ce:37:26:0e:df:f2:9e:88:aa:eb:94:ac:74:d0:b0:
         d0:de:dd:cc:08:1e:1c:3e:30:90:49:2c:e9:14:86:11:b9:27:
         68:29:5a:2e:0b:d0:96:93:cf:e5:25:95:aa:98:a9:6f:41:51:
         59:1f:d0:ab:66:c8:48:6d:26:a1:bb:dc:88:74:7e:19:59:36:
         c6:31:55:a3:5c:d6:8a:20:4c:6e:85:56:15:72:72:03:4c:56:
         c7:fe:88:4b:7b:f8:04:62:7d:2b:ef:65:cf:fc:34:28:1d:2b:
         13:0a:ac:91:d8:bb:65:6b:55:9e:35:70:36:8c:c2:fa:d2:d2:
         1c:75:63:14:53:fc:b2:6c:fb:88:11:35:79:1b:8e:b6:18:49:
         a6:69:22:a6:3f:86:59:11:eb:ba:de:86:82:91:93:ad:4f:57:
         68:5b:04:63:b0:04:36:81:6a:17:70:f5:e3:86:91:71:82:4b:
         4e:18:f0:83:0b:1c:b4:08:db:fb:7f:ef:46:fd:ac:d7:dd:5b:
         08:9c:f2:5c:db:72:0e:29:f9:70:a1:1b:85:8c:d5:e6:fb:b5:
         37:fe:ef:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:04 2026 by rpki-client