Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321c3a73-68b7-3d9a-8b0b-cc9d1d0520f0.roa
File:                     321c3a73-68b7-3d9a-8b0b-cc9d1d0520f0.roa (raw, json)
Hash identifier:          uiYVXmVkYfS9LV10cAtHuTtEN5uS1AGbvja3Dih8TEE=
Subject key identifier:   0A:62:EF:43:4F:6E:75:07:19:6D:7C:F9:92:85:55:5A:13:ED:3C:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A370839740BC8DB102E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321c3a73-68b7-3d9a-8b0b-cc9d1d0520f0.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1007:a118::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:37:08:39:74:0b:c8:db:10:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=d9b7aa01-3eb9-43ba-9d15-c370dda14a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4c:61:94:5e:09:98:bb:60:55:57:0b:0d:66:
                    8a:de:e8:46:48:f7:5b:2f:f4:4a:dd:6a:e7:e8:0f:
                    46:c8:6a:b7:8a:5b:8c:31:20:fe:1d:ec:ac:f0:b0:
                    c6:c7:dc:d7:8e:62:ad:0e:d0:a6:de:31:b7:56:95:
                    26:09:2c:66:2d:73:3c:87:80:0a:46:e3:6b:30:79:
                    40:4b:3e:14:ef:c9:7b:48:44:10:5e:c0:8a:e9:57:
                    f5:f1:72:7f:c8:98:f8:af:ea:e6:ce:82:fd:fa:8e:
                    b0:b2:c5:54:41:8d:95:88:72:fc:fc:46:d8:b0:2f:
                    01:0e:9a:45:50:75:3c:f9:e1:02:ec:9c:1c:fa:81:
                    28:bc:5f:53:13:06:b7:81:c5:6e:9a:8f:7e:0f:cf:
                    24:ce:19:87:e9:48:dc:eb:0a:e1:8a:b4:bf:fa:e4:
                    38:7c:24:28:30:d5:69:ae:4b:28:4b:6d:41:9c:cb:
                    fe:c6:39:76:8c:35:21:a1:7e:91:04:f2:4a:2c:82:
                    90:f4:82:32:fa:5b:93:51:96:f4:d7:9d:0f:7d:b9:
                    0e:28:2b:b9:1a:37:5c:e8:23:ab:ee:7a:f1:55:2f:
                    8e:a1:5b:74:46:0d:52:33:60:3b:65:cd:8c:f9:b3:
                    07:71:39:b1:d3:34:ea:56:47:81:3d:37:f2:8f:c9:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:62:EF:43:4F:6E:75:07:19:6D:7C:F9:92:85:55:5A:13:ED:3C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321c3a73-68b7-3d9a-8b0b-cc9d1d0520f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:a118::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d0:55:e7:08:41:d3:d0:18:5e:7b:a2:9a:b5:dd:fe:17:a4:
         18:41:d0:28:03:ae:02:a5:c5:3b:73:ce:41:e4:14:7b:cd:14:
         45:cf:30:f3:d9:8a:c4:03:4b:05:9e:e1:04:83:4b:eb:16:65:
         fa:cb:cc:fd:83:3e:95:de:9c:67:91:4f:f3:5c:8b:6e:61:a7:
         4d:6d:46:e8:37:48:bb:b1:66:f0:9e:58:87:a5:9d:33:98:01:
         49:4c:9e:01:44:c9:f3:23:94:1a:cb:d3:28:16:42:95:80:6f:
         b2:8b:94:f1:7f:fd:3a:71:fb:15:b0:4a:cd:1c:03:4d:1e:ee:
         90:4b:cc:46:e7:e9:de:de:3f:a8:82:d7:64:e9:c8:53:ba:70:
         4b:68:ba:fb:17:77:68:57:26:2f:3f:8d:36:5d:63:ed:fb:e3:
         d7:ca:a3:6c:71:de:dc:be:8e:95:9b:2a:e5:8e:e0:ae:f7:d3:
         e2:a3:b2:00:35:4b:67:04:41:e5:e9:ce:a0:1a:20:81:f2:b5:
         db:db:a3:93:31:5d:a7:af:b1:73:de:f9:84:6a:07:e8:6e:6f:
         2d:1b:42:40:13:e7:98:4b:f0:15:57:96:bb:fc:37:73:14:60:
         2d:42:cf:62:2e:4a:4b:4a:19:74:28:bb:73:f2:1a:ba:1e:a3:
         cf:37:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:03 2026 by rpki-client