Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25368996-a974-392b-96b3-fd61bd821b0e.roa
File:                     25368996-a974-392b-96b3-fd61bd821b0e.roa (raw, json)
Hash identifier:          HHJb6pLAtZ2ZKQ1QhEvYVhDwiEgGyzHGP5g8eBQCN0g=
Subject key identifier:   26:DD:E4:7A:00:7B:A1:EA:02:E8:FF:16:A0:B7:CC:F5:93:47:FB:A2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0425B73FC2D2669D40360
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25368996-a974-392b-96b3-fd61bd821b0e.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:b338::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:42:5b:73:fc:2d:26:69:d4:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=af4a5c50-96ae-4d35-8ce6-5a68819c91ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:09:cc:4e:18:34:1a:61:be:75:12:fe:0f:
                    10:6d:15:7f:aa:73:10:de:b2:b6:41:95:4c:17:2d:
                    0f:b6:2f:f0:f9:15:98:39:fb:4c:a6:6e:3c:8a:14:
                    01:94:8d:d2:6b:4d:0c:0f:ee:aa:42:0b:e8:24:a7:
                    e0:77:88:a5:4b:fb:a5:6b:41:7c:9d:d9:81:a2:a9:
                    7e:92:af:1b:be:a8:1c:5d:e7:dd:94:07:d7:4c:8f:
                    69:2c:46:b5:7c:1e:00:6d:9b:af:bf:ed:b5:c1:31:
                    9f:08:cc:96:81:30:03:54:2f:ae:7b:f3:c3:35:ec:
                    91:e2:51:df:2b:04:ab:69:04:75:e7:ef:28:09:5c:
                    94:cc:56:21:0c:12:5a:7e:00:83:82:ab:06:f3:7f:
                    47:a9:0a:7b:f2:fe:2c:98:72:c5:05:cc:eb:2c:cd:
                    63:60:77:4b:d3:87:21:3a:d3:ad:37:71:dc:e2:15:
                    a5:3b:94:7f:db:5f:ef:0d:b7:0e:95:04:f6:35:e3:
                    53:d3:b2:8f:f2:1a:4c:d5:09:07:79:92:a2:e7:d4:
                    8f:a8:3f:71:cd:a1:f6:56:16:19:21:51:e1:aa:7a:
                    b0:25:99:5a:55:77:e1:9a:40:76:6f:a4:92:9f:dd:
                    9d:a5:a2:e6:f7:31:83:1d:6a:c7:39:28:ae:a4:52:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DD:E4:7A:00:7B:A1:EA:02:E8:FF:16:A0:B7:CC:F5:93:47:FB:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25368996-a974-392b-96b3-fd61bd821b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b338::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f8:21:99:a3:a9:36:6b:b8:83:92:e0:eb:08:93:f4:f3:3e:
         92:15:81:b5:fe:0a:47:77:4e:7e:6a:6c:9f:33:ce:ec:4c:1a:
         73:17:33:f5:8a:af:3f:b7:01:7b:3b:b5:99:2f:da:30:5f:9b:
         7b:ec:dd:5f:f2:16:b2:ba:fd:03:e3:6a:b2:ef:20:ff:32:c8:
         d4:be:59:df:17:d4:f7:a9:21:4c:dd:02:bf:ab:c0:26:39:85:
         71:e6:99:2a:7e:49:94:cb:4e:e1:0e:3d:7a:11:86:71:6f:9b:
         c2:7c:c4:8c:9b:85:9b:b1:05:a3:bd:56:9d:9d:43:d9:71:64:
         87:10:30:30:ed:08:97:ed:39:b7:8a:97:ad:8e:14:f6:d6:23:
         ed:96:f4:fc:74:5b:e0:0e:06:6b:11:df:e6:b8:01:f8:88:07:
         37:54:d3:8c:7c:2d:32:a2:f8:c7:fc:cd:57:2b:b6:9c:9e:b5:
         de:c7:4b:2e:a2:9c:7a:86:87:be:c6:70:9b:ea:57:d7:28:92:
         73:62:ab:86:3a:6a:3c:25:90:99:1e:44:6f:f1:e2:0a:eb:51:
         1e:4d:0b:a1:5c:54:8d:61:e4:d7:1b:32:54:3e:89:1e:4e:90:
         f3:d6:73:f4:a1:50:d4:9d:4f:70:b8:94:a4:e7:a6:7d:93:0a:
         e4:4e:a6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:28:35 2026 by rpki-client