Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/60295918-dfbc-3bea-bf20-df0fc072fbea.roa
File:                     60295918-dfbc-3bea-bf20-df0fc072fbea.roa (raw, json)
Hash identifier:          hv6YV+jxuPcplbZfuAfmOHKMwLEveEZJTu4g2tlDZYw=
Subject key identifier:   40:6C:FF:FA:A0:68:37:7A:7A:BE:BC:6A:DA:07:AC:FB:FE:68:12:21
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584CF8524B96BE3B99865A506100
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/60295918-dfbc-3bea-bf20-df0fc072fbea.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     30058
IP address blocks:        2001:49f0:d009::/48 maxlen: 48
                          2001:49f0:d014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:4b:96:be:3b:99:86:5a:50:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=e020cca8-f929-429c-9417-be69efe2222e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:bc:0f:32:fa:a5:cf:1e:e8:32:6e:10:c3:
                    a3:f3:29:2d:a2:84:90:e1:64:f2:bb:f1:90:4b:f1:
                    2a:86:6a:44:33:a8:36:b9:53:8d:0a:f9:0f:7d:6d:
                    aa:d7:e0:16:54:dd:c4:77:a6:4b:52:ca:ef:4a:de:
                    17:05:a0:bf:d4:11:e3:b6:65:60:7e:62:c5:ee:52:
                    0d:01:89:de:3b:56:bf:d1:d2:f0:ce:bb:fa:52:21:
                    16:27:2c:fa:f2:f5:b6:30:55:4a:07:79:d1:fa:b5:
                    be:d6:30:95:d1:8c:be:15:01:b9:45:75:b2:db:b8:
                    f0:5e:5a:7b:e1:f9:5e:49:4e:1e:35:7f:ae:f3:ac:
                    30:6c:ab:9f:2d:9d:42:93:c1:33:96:da:dd:92:48:
                    1d:8f:fe:26:f5:98:7e:fd:ee:4e:8a:38:11:de:aa:
                    1b:af:90:db:be:59:71:14:83:66:5e:a1:77:cd:2e:
                    93:f7:d7:86:2c:ef:10:30:b1:ae:4f:4b:99:9a:16:
                    3a:10:52:ec:5d:2f:d6:9f:fc:15:3e:67:70:fb:b1:
                    84:c4:00:8d:12:b8:f0:1c:6f:55:8b:2f:45:93:a1:
                    78:80:70:4c:7a:86:7f:57:1f:ba:53:38:48:e0:43:
                    f7:aa:07:2c:0e:b1:95:f4:db:83:60:f5:d4:db:98:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6C:FF:FA:A0:68:37:7A:7A:BE:BC:6A:DA:07:AC:FB:FE:68:12:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/60295918-dfbc-3bea-bf20-df0fc072fbea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d009::/48
                  2001:49f0:d014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:ed:44:aa:94:26:e4:6d:a7:fe:5f:75:72:62:b9:74:35:
         50:8f:06:e4:69:7f:82:66:ee:b4:06:61:3d:98:f7:ab:f2:9f:
         13:44:7f:f0:bf:29:79:96:e3:d5:6f:88:20:9b:67:ae:20:43:
         92:79:1d:59:b1:b3:ed:45:84:c4:9c:d5:e9:22:8d:e0:45:d8:
         c3:b9:ef:e4:11:6d:62:4d:13:49:38:b6:29:31:13:ce:64:b6:
         0e:6a:cc:3f:c9:ee:15:af:49:a6:cb:85:b0:1e:eb:10:7f:5a:
         51:e1:ca:e1:83:e2:7d:42:e3:d3:81:30:6b:42:17:ad:96:a7:
         18:9d:2e:60:f4:98:e5:86:50:22:50:6f:58:ac:f2:aa:bf:07:
         cf:69:97:b1:a5:89:e9:6c:f8:68:38:cf:eb:d4:5b:92:a0:df:
         4a:ac:ab:26:9d:51:17:f0:48:56:15:fd:56:5c:b8:e1:88:e3:
         66:78:1a:e2:f4:07:5e:45:3a:f7:18:df:1b:81:c1:7c:3b:9d:
         19:bb:19:0a:48:51:fb:ca:95:52:7b:20:39:49:8c:c2:8c:d8:
         e9:44:63:fe:f7:fc:8d:eb:09:35:77:97:b4:6a:f0:91:43:9f:
         e8:b3:47:64:6d:dc:eb:5f:99:8a:61:1f:04:c5:ad:3b:90:0a:
         62:9c:02:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:38:22 2026 by rpki-client