Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4882d797-1aa7-36ae-90f1-55a5674ce96b.roa
File:                     4882d797-1aa7-36ae-90f1-55a5674ce96b.roa (raw, json)
Hash identifier:          71qXoHIAN3D0UiKFnYAEkhp/EcQ105UVXcx1VWZJ3xQ=
Subject key identifier:   3C:E0:54:BA:AD:E5:E9:EB:9C:8D:C0:B2:4D:09:9B:52:22:C4:FA:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05C978220E69A2163CE100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4882d797-1aa7-36ae-90f1-55a5674ce96b.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        2600:4040:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:c9:78:22:0e:69:a2:16:3c:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=5a6ccfc8-6624-4f21-905e-1cf0abd67393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:c7:c1:03:99:54:62:fe:b4:99:ac:14:08:
                    e2:80:ec:7e:76:f6:9c:7a:03:66:24:44:41:0f:ba:
                    d4:83:57:5b:61:ab:7f:b1:14:98:d2:cf:ae:43:09:
                    0d:b1:e4:a0:2f:36:33:e6:f8:aa:4f:e0:61:2a:64:
                    c6:8c:07:b6:54:51:f6:b8:cc:57:49:20:8f:88:9a:
                    d4:f7:59:59:7c:d9:d2:de:53:81:a3:cf:38:7e:2c:
                    f2:ed:4a:dd:20:48:b0:7f:f5:92:61:f3:22:c6:87:
                    ca:23:70:53:fa:88:96:7f:0d:26:75:a0:8f:d6:9f:
                    6c:95:c2:9e:a5:04:1b:da:3e:6c:02:1c:00:9a:41:
                    42:c1:f3:a5:f4:7d:a4:ca:a7:2b:6d:31:79:58:e7:
                    26:28:4e:7f:30:23:f6:35:6e:08:71:58:d5:d6:46:
                    b4:1d:00:23:4a:93:d1:7c:b8:be:6b:f0:99:16:1d:
                    9c:d8:f0:c4:d5:5c:52:e5:e2:b2:81:45:14:51:38:
                    2b:23:0e:2d:39:e3:00:21:79:63:f6:2f:b9:28:5e:
                    18:5c:fc:16:88:85:55:ce:6b:38:9b:39:17:b1:26:
                    c7:7f:24:f8:b2:c0:0e:de:49:62:2b:30:41:1e:05:
                    81:c9:c3:ca:8c:a2:7a:63:e0:4b:64:52:04:dd:92:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E0:54:BA:AD:E5:E9:EB:9C:8D:C0:B2:4D:09:9B:52:22:C4:FA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4882d797-1aa7-36ae-90f1-55a5674ce96b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:45:08:b0:17:ae:08:a6:57:2e:0f:d3:48:56:8e:03:ec:4f:
         6e:9c:a8:e2:42:27:8a:a8:87:a8:52:d4:1d:76:de:fe:7b:15:
         f0:ad:05:cb:9d:aa:a6:0a:05:f6:24:5c:9f:bd:a0:ad:cc:e9:
         83:ac:5f:5b:61:48:a8:21:15:5e:36:86:63:64:fe:38:5e:27:
         44:fd:1a:6e:09:5f:20:f1:c4:49:e1:20:dd:a3:c0:bd:6e:e0:
         2a:60:2e:38:81:37:01:61:b5:10:e8:ca:5a:73:b0:49:56:d4:
         3e:bd:53:f6:2a:83:29:b1:a4:b2:79:38:e2:93:d1:5f:47:90:
         c5:90:78:6a:3f:4a:5b:d6:3c:b8:40:17:ba:d0:12:55:46:24:
         2f:6c:79:58:7b:db:90:a0:fa:ee:a6:dd:7c:cc:43:02:96:1f:
         c8:a7:06:25:b7:c1:e3:f1:ef:ed:3e:e7:97:63:e1:40:e2:8d:
         8e:df:40:ad:85:9f:36:9a:78:81:fe:5b:ae:db:82:5b:94:5c:
         96:f2:aa:1d:9a:f0:67:b4:1f:99:4c:22:f2:4c:93:06:cf:ce:
         af:8d:50:dd:e3:ea:fb:23:9b:ac:9c:f0:49:f6:c5:e7:32:76:
         30:df:9e:13:c3:0e:9f:8d:cf:f9:c6:e6:80:23:b4:47:df:09:
         19:a0:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:23:30 2026 by rpki-client