Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45afecda-fae8-31f2-b27b-8c7b66b4f81a.roa
File:                     45afecda-fae8-31f2-b27b-8c7b66b4f81a.roa (raw, json)
Hash identifier:          dvOuE7aY24l4Xw+/EDs1hN64wURCB1y60hHSqT11gnY=
Subject key identifier:   28:73:6A:0C:FE:85:2F:66:EE:D8:65:C8:7D:6A:10:66:18:8F:EA:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DB4A5B4447492DAE3FB75BA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45afecda-fae8-31f2-b27b-8c7b66b4f81a.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        2600:1008:a040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b4:44:74:92:da:e3:fb:75:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=9f621f89-35eb-4711-913c-5e1c01de91e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:25:97:57:ff:be:cb:e9:73:10:63:a9:5a:ec:
                    f8:30:65:30:8a:08:54:78:0f:6c:9c:dd:55:1a:de:
                    57:2f:33:2e:af:ea:85:c1:33:a5:5e:11:6d:71:c3:
                    d8:6e:d0:b8:b9:b3:83:ef:2c:82:a4:77:45:24:fd:
                    c2:82:0d:12:b9:77:52:f2:53:cb:69:96:3e:58:d9:
                    80:74:d6:0f:f1:6a:df:5a:80:8b:fe:0a:22:59:83:
                    e2:84:c3:d1:55:2e:1b:8b:59:fb:66:25:18:3e:df:
                    5c:ce:61:c4:d7:a6:b8:05:30:16:81:7e:8d:58:86:
                    3a:3f:0f:4c:4c:a9:68:8a:d7:6e:32:68:70:38:18:
                    30:ce:1d:20:3b:a2:00:1e:09:a6:b2:bb:fe:09:c1:
                    b7:43:c0:7b:12:82:29:e8:46:84:4d:f4:b3:33:22:
                    19:b2:00:73:5a:cd:93:64:a6:db:11:57:22:49:c7:
                    39:97:f1:c8:3e:60:d3:1c:9f:7e:fd:71:5e:d6:e3:
                    ea:f2:fa:d4:1c:1b:78:2d:49:d8:94:6b:5a:d1:22:
                    a4:94:10:27:bd:57:ec:ab:f6:92:22:d5:9b:c2:3c:
                    2e:db:ef:e3:f8:48:be:f8:bf:e8:8e:37:bb:da:d3:
                    30:10:0e:f0:2d:d0:c9:fb:fd:bb:2b:d3:aa:c3:35:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:73:6A:0C:FE:85:2F:66:EE:D8:65:C8:7D:6A:10:66:18:8F:EA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45afecda-fae8-31f2-b27b-8c7b66b4f81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:a040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:63:2f:64:47:e3:84:da:40:bd:b1:b8:04:4f:c1:1f:0d:93:
         97:91:48:88:c4:18:42:4a:83:c0:94:52:14:4c:e3:78:0a:6a:
         e7:95:9a:bf:52:e3:35:63:a2:04:4a:35:83:c6:bd:0b:e2:35:
         5f:6c:8d:2d:92:b6:f2:05:96:f7:98:2d:b5:32:51:0f:a2:a5:
         d3:91:34:c6:05:37:14:ad:dd:d4:42:6a:df:c3:f4:ae:67:49:
         07:16:cf:94:b2:e5:28:00:c6:23:7c:81:b5:10:a9:b8:29:90:
         75:90:c7:07:cc:5c:72:ec:59:cb:1c:bb:18:f2:a9:9b:4a:42:
         b1:6b:ac:63:b5:9c:df:53:4c:da:a0:c1:31:b8:3e:8b:5b:fc:
         e8:92:f4:33:0a:ca:d8:9b:39:57:c9:e9:ef:0d:64:5f:d0:ab:
         88:51:ea:f9:83:b4:13:0d:3c:2a:7b:f2:a2:58:8f:03:26:fb:
         b9:73:3a:fc:f0:b0:5f:f9:d7:57:df:c8:21:12:03:d8:16:84:
         55:54:60:10:42:1c:c4:14:57:da:8a:e0:bd:ec:47:c4:3c:5b:
         4b:3e:a2:fa:a2:d3:22:00:25:8f:43:00:fa:27:89:b4:be:0b:
         f1:6e:a2:3e:f8:d2:9d:cc:80:ce:17:eb:be:70:b9:bc:5d:e9:
         4a:e8:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:19:40 2026 by rpki-client