Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/178a9c3b-e0c4-3fc9-b217-bae5ea6d6127.roa
File:                     178a9c3b-e0c4-3fc9-b217-bae5ea6d6127.roa (raw, json)
Hash identifier:          HtNlgoG52SZdstUrOObeJ8UsyFOdJCrk+1QYbJ0P+cs=
Subject key identifier:   44:F9:05:90:6A:65:4C:6D:1B:34:BF:6A:24:BC:A6:A4:E6:7A:DB:7F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0452D0752178F5F6BD100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/178a9c3b-e0c4-3fc9-b217-bae5ea6d6127.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1012:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:45:2d:07:52:17:8f:5f:6b:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=2a3e5c01-f4fa-47f7-9aea-6fc1474305fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:20:a7:b9:8f:92:b2:d3:32:1d:c1:91:96:22:
                    25:cf:8b:0c:29:0a:48:5f:73:16:3d:4f:01:ef:da:
                    39:a8:41:16:0a:71:4e:18:0c:79:7d:c4:6c:7b:bd:
                    d4:50:15:6d:92:09:33:aa:79:cd:d6:b9:9c:ba:a7:
                    cc:07:7a:c7:58:46:00:f0:16:7e:23:90:20:6f:c2:
                    d4:be:70:bd:97:99:9c:51:56:76:97:a0:7f:52:f8:
                    b6:14:78:35:6e:a2:4d:d0:6d:cd:25:76:f7:bd:f3:
                    13:90:c9:eb:4b:43:bc:73:93:39:6d:fd:98:06:88:
                    6b:f3:e3:d9:47:3c:e4:df:93:ec:a8:03:28:36:05:
                    0f:75:3a:5c:0c:89:2d:16:59:56:ef:64:a9:bf:5d:
                    fb:a1:79:38:a5:e5:31:2b:d2:50:b8:49:7e:35:8f:
                    7c:89:e0:1a:af:80:e1:d1:bc:85:66:f4:a6:e7:f6:
                    39:ce:67:02:fe:9c:69:75:1d:25:56:9e:23:7f:86:
                    c1:59:3b:d9:ed:ad:ad:55:03:b0:ed:9f:16:95:d5:
                    19:22:d9:48:79:f3:63:72:c1:44:e3:7e:35:bc:34:
                    56:56:43:c5:97:de:bf:81:72:e8:fd:7b:1e:7d:23:
                    23:57:11:5d:ec:29:8b:db:6e:b7:cd:71:7e:b3:9d:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:05:90:6A:65:4C:6D:1B:34:BF:6A:24:BC:A6:A4:E6:7A:DB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/178a9c3b-e0c4-3fc9-b217-bae5ea6d6127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e2:65:e7:44:9a:0e:75:01:7e:c8:8b:52:a3:9f:8c:b1:0f:
         0b:06:06:5f:cd:ad:a4:e7:f3:fe:23:db:53:25:a5:a3:37:51:
         55:fa:87:e2:9b:20:9a:cb:b3:d2:11:fb:b2:59:23:72:74:0b:
         38:f2:a2:f3:ee:ae:ca:26:ad:af:3d:91:64:d9:62:9e:f3:56:
         93:26:9c:55:81:5a:ed:85:31:7f:08:50:f0:9c:44:08:bc:a1:
         0e:9f:12:a5:93:99:b4:c2:55:6b:23:e2:f7:03:b4:4e:96:d2:
         a9:de:cd:09:ad:5f:ca:83:f3:4e:c0:e8:1e:8b:c2:21:a0:e8:
         5a:0a:95:77:f5:65:ed:2a:ff:e9:a8:d7:ac:08:28:ed:92:03:
         50:c5:80:0f:32:57:5b:fd:4a:99:93:ae:47:b8:41:dc:66:c1:
         b1:6f:40:7c:e2:c2:6e:29:d8:f6:13:85:1e:0d:7c:11:8b:5c:
         bd:d8:d2:91:9e:d3:46:f9:a4:04:ee:58:ad:6e:f2:d7:51:99:
         68:88:5a:a6:90:cf:52:c1:a2:dd:aa:99:03:41:85:a6:c2:f1:
         78:5c:fc:9c:56:36:d5:d6:7a:a9:ad:06:33:65:00:9e:f3:4f:
         b9:3c:68:58:4d:82:8a:73:60:be:5d:6d:0f:34:90:ed:c3:d5:
         48:fe:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:34 2026 by rpki-client