Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e52720e-c4ea-36e0-b056-56e4bc71b374.roa
File:                     1e52720e-c4ea-36e0-b056-56e4bc71b374.roa (raw, json)
Hash identifier:          t370kevzAmqfts3Wha81TR3l4v8aE4dBa8190L/nQco=
Subject key identifier:   22:B8:09:87:24:59:53:C0:C7:BB:77:12:B8:A0:B1:85:43:5F:91:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05D9676E1748EDD6723280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e52720e-c4ea-36e0-b056-56e4bc71b374.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1003:d400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:d9:67:6e:17:48:ed:d6:72:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=a67bf839-29a9-4c75-afb7-247795497b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:b4:4d:ef:bb:46:9d:9a:99:65:8f:01:29:
                    10:95:e7:65:a6:f8:64:8e:db:f1:23:1d:56:41:2a:
                    a6:4c:cc:65:09:02:99:63:c7:cd:c5:fe:5d:83:5e:
                    4b:6f:39:78:05:a2:d5:79:33:3c:c8:af:ed:85:52:
                    18:ef:a9:4c:c4:73:1a:90:ad:e3:22:32:a6:71:98:
                    e6:98:e0:2c:72:3d:8f:12:37:f8:0f:60:a7:4e:6e:
                    3e:3d:10:ee:21:44:60:29:26:b2:8c:f0:bc:8f:62:
                    5b:ea:ca:87:dc:40:47:c2:1e:72:2f:61:75:d4:4a:
                    ef:f7:61:88:2b:ca:87:ee:d5:4b:6c:62:81:04:e1:
                    8e:40:f6:03:13:40:33:d3:77:ec:2e:d0:e2:62:f8:
                    7c:01:b4:b1:81:dc:ae:02:42:9e:41:a6:16:58:70:
                    31:fc:81:bf:7b:2e:32:a7:25:da:82:3f:b6:cf:62:
                    0a:82:c6:4d:ae:4f:9a:2d:2e:e0:0f:7b:5a:f2:5f:
                    62:e2:6d:63:0f:14:8f:39:a6:71:eb:c6:96:0c:45:
                    22:be:b2:4b:e8:0b:e2:fe:76:a0:84:0a:9c:c6:55:
                    cb:9f:f8:05:bc:7f:01:b2:f8:83:34:97:44:97:23:
                    1d:5f:2f:5d:2a:63:d8:22:ac:4a:50:36:cf:38:31:
                    4f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B8:09:87:24:59:53:C0:C7:BB:77:12:B8:A0:B1:85:43:5F:91:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e52720e-c4ea-36e0-b056-56e4bc71b374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:d400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e0:c1:ee:e4:fa:82:5b:d3:27:45:6c:a3:21:b4:d7:74:cc:
         0e:b0:f6:2f:18:8e:5f:c6:29:37:07:9b:94:ed:77:dd:97:50:
         17:68:18:1e:de:d6:8f:37:47:23:71:d3:77:ec:aa:8d:f9:fe:
         a6:0d:bb:cb:42:de:9c:f9:10:a1:f3:85:e5:af:49:f0:1f:d6:
         31:b4:56:27:df:cf:f5:cc:06:ed:46:51:48:26:8c:c7:4e:14:
         5c:36:56:44:e2:f5:e7:7f:0b:30:80:ca:bc:b0:00:bf:6d:d2:
         39:2f:d2:5d:4f:b5:72:8a:bb:2f:27:19:ed:c8:d2:d4:c9:18:
         8b:c6:87:15:ac:fb:4a:fa:a0:ae:4f:2b:66:14:01:e6:13:c4:
         61:82:c8:4e:36:92:7a:c5:b5:c3:c1:63:94:ad:31:01:61:86:
         7f:95:43:43:6d:1a:9b:9f:c9:47:88:6c:42:4a:84:da:06:d7:
         e0:e5:e4:5b:7a:6e:91:36:e9:5a:b0:64:23:6b:7e:6f:08:41:
         fc:ea:4f:39:d1:3a:d3:f7:d8:9d:37:29:f4:b6:6d:e1:30:b8:
         3e:16:98:81:fe:b2:a9:70:66:5a:22:d1:c9:ed:04:85:2e:17:
         23:6d:b3:9e:fd:00:f6:20:d6:16:38:c7:bb:15:64:92:70:7d:
         5d:f2:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:23:44 2026 by rpki-client