Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fd1045-d430-3a38-bf08-1b0d3a484f84.roa
File:                     36fd1045-d430-3a38-bf08-1b0d3a484f84.roa (raw, json)
Hash identifier:          QdONQX7c5Oiw1TbOEDF/4WabQNrWeP5Qcfa08+tW4rI=
Subject key identifier:   8D:34:54:46:F1:7F:65:FB:FE:A2:08:EA:AF:15:9F:32:41:94:AD:89
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D2644BB8B0A2931B603D3C570
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fd1045-d430-3a38-bf08-1b0d3a484f84.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     6167
IP address blocks:        2600:1017:a8fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:bb:8b:0a:29:31:b6:03:d3:c5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=db2fc286-af84-42c3-8744-bfce0212938f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:5d:a9:67:35:9e:16:c1:d4:c7:c5:35:c7:
                    8c:14:03:f7:ab:47:b6:2b:09:5d:e2:96:4c:8e:8d:
                    b5:7e:59:16:ff:22:20:62:17:64:c5:44:a2:a9:94:
                    58:5e:5f:01:82:3e:d4:66:0b:5a:fa:ec:e5:03:81:
                    2b:12:88:ad:aa:2f:e6:82:bf:06:b0:cb:86:7d:25:
                    a1:68:1f:7e:3f:42:3b:1b:1d:61:2e:d1:05:1f:b4:
                    e8:06:d8:5b:77:6e:c5:56:95:fc:24:c7:49:d0:26:
                    f9:8d:ad:e1:b2:37:8c:61:45:da:f8:30:d8:18:f0:
                    b4:ef:a4:2f:4c:3a:76:c7:28:89:42:90:db:a3:56:
                    4d:5a:13:e8:51:e3:6a:10:62:1c:c9:0f:b5:aa:8d:
                    21:31:5b:70:59:46:5d:7e:ca:11:b1:15:62:7b:aa:
                    76:e7:4a:0b:bc:f6:82:35:90:d7:37:1c:46:53:2c:
                    7a:3c:26:5f:d2:0e:b6:8c:47:31:8f:03:4a:33:d8:
                    32:89:91:6e:69:da:c7:fb:97:80:f6:5e:bd:cb:b5:
                    78:1f:25:4c:01:f3:03:9f:3b:d2:34:ed:36:07:26:
                    15:b8:96:12:c2:1d:14:83:2f:92:c0:9c:33:17:46:
                    5b:8a:45:fd:8f:e9:1a:27:aa:50:58:9f:82:90:e2:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:34:54:46:F1:7F:65:FB:FE:A2:08:EA:AF:15:9F:32:41:94:AD:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fd1045-d430-3a38-bf08-1b0d3a484f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a8fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:af:a6:85:13:09:ef:be:58:d0:a6:31:7a:5d:e6:fd:29:96:
         b8:d9:00:22:45:91:f5:fe:79:89:8e:20:4e:d2:dd:a4:6a:3f:
         ae:a3:2c:12:04:48:27:13:51:09:1f:e2:26:a7:76:a2:54:e0:
         0a:20:5f:38:03:5b:ab:d5:cd:4d:4e:78:1d:ae:89:8b:55:51:
         10:98:f7:76:d6:3c:97:b9:72:9b:6b:e8:fe:00:6a:d3:4f:ad:
         65:97:b2:15:37:fb:c3:5d:cc:3b:ce:c6:dd:a0:53:d0:0d:e2:
         b2:7c:48:4e:bd:a7:5e:69:9c:f9:49:d4:b6:e1:98:79:32:40:
         fc:9b:84:01:65:90:51:15:b5:bf:03:0e:ad:71:02:99:28:06:
         06:a7:ce:7b:0c:53:0a:43:76:e9:8c:c4:8e:74:52:0e:db:1f:
         38:8a:10:f1:53:02:14:2a:ce:e8:b5:f1:b1:f9:c8:ef:b1:4a:
         03:a6:cc:9b:ea:44:41:0f:53:2e:c2:de:cc:84:63:5a:3f:fb:
         32:38:d2:15:78:54:26:34:6b:37:06:ae:3e:dc:3c:b9:84:fa:
         85:be:25:62:41:64:57:d0:65:17:ab:10:4d:cd:92:d4:cb:38:
         8c:c0:e1:1f:6f:d7:ae:57:81:99:21:8e:1c:02:44:f9:ce:01:
         8d:a1:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:00 2026 by rpki-client