Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48ecd3c2-5997-3627-9a68-c5e820bd2128.roa
File:                     48ecd3c2-5997-3627-9a68-c5e820bd2128.roa (raw, json)
Hash identifier:          iCKD6fzo/m67DKs4mnTCCQLIqMVzZdG+h6TGmgoNmSg=
Subject key identifier:   6B:86:3C:7D:14:0F:90:53:13:D6:62:BE:9E:2D:5C:CD:BD:48:9D:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE04040992D2A49D16CB2D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48ecd3c2-5997-3627-9a68-c5e820bd2128.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1014:b300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:40:40:99:2d:2a:49:d1:6c:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=0e1c37f7-2521-4d81-b799-3a35e47d889c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:59:aa:07:cb:55:0d:09:30:0a:94:4e:a6:
                    2a:c4:c2:ac:91:b1:6e:d9:a6:53:cc:ac:f4:a2:12:
                    45:d8:df:64:0c:e7:4d:cd:fa:c1:73:be:73:4d:6e:
                    9e:74:f3:d1:43:aa:2d:dc:a1:c4:67:fe:e5:e0:24:
                    dc:aa:7f:88:93:37:d1:47:e7:ad:00:d6:6a:ba:0a:
                    f7:de:69:78:2c:39:a0:8f:54:18:84:a4:28:da:0b:
                    75:fd:d7:03:ae:2c:97:00:9a:de:33:57:ea:0d:62:
                    13:fd:11:55:93:85:66:7e:ec:12:ec:6e:91:6c:1c:
                    25:a5:cc:88:08:36:55:38:c0:2d:e2:66:10:f7:e3:
                    1c:93:d0:88:3b:d4:12:ab:5f:e0:e0:48:75:1a:62:
                    93:97:a1:40:ac:b4:70:19:75:7e:fa:92:7f:5b:8d:
                    5d:22:d7:12:e9:5a:f0:99:a0:6a:68:9a:36:c6:00:
                    32:36:d6:cc:2b:82:a7:57:b5:25:13:44:3a:e2:f3:
                    57:57:0f:3e:d9:1a:a5:ea:5a:95:8d:d7:66:0c:90:
                    7c:a2:3c:78:26:86:e6:25:ae:92:b7:be:63:dc:2c:
                    6e:cb:39:b4:17:19:44:9a:f0:ab:11:64:07:7c:80:
                    b5:36:15:0a:a7:e7:2f:18:4f:d5:57:e2:25:ab:e7:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:86:3C:7D:14:0F:90:53:13:D6:62:BE:9E:2D:5C:CD:BD:48:9D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/48ecd3c2-5997-3627-9a68-c5e820bd2128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:67:79:c5:76:37:ae:1c:da:4d:41:5a:ce:a3:5d:84:7d:f6:
         d2:16:09:da:7b:6c:2d:ba:7e:2b:e8:b5:e5:e3:04:08:af:2f:
         e1:b2:df:9e:46:d9:77:6d:5e:1f:52:25:06:de:e0:7b:d1:fa:
         52:37:fe:c9:a5:5b:5f:9f:00:e4:8a:3a:b6:4b:3a:22:7b:1c:
         9c:1c:31:f1:3c:20:b9:cc:15:21:0a:62:51:71:11:da:66:74:
         5b:48:31:80:9c:67:f7:f7:4b:d1:d8:72:5f:a7:ec:c5:42:1a:
         e8:d6:8a:1b:69:74:d7:53:0d:ad:43:86:64:f1:29:1f:16:d1:
         83:1d:51:21:08:be:e2:40:4b:3c:bf:77:67:e1:c2:97:74:f2:
         3a:f1:24:2a:bc:15:ac:3b:64:27:ae:eb:30:09:30:7a:32:1a:
         df:5e:88:ae:8b:d9:97:5d:be:cb:e5:c8:85:11:2b:b5:e8:21:
         2c:89:87:f2:5e:08:09:18:e1:34:38:64:77:38:7c:93:78:8d:
         a4:0b:e1:49:a5:bd:2c:aa:4d:e5:b3:28:a7:dd:69:71:8d:d1:
         9a:ef:8f:a8:ce:d5:60:7b:43:ce:ea:47:e4:56:20:1f:39:74:
         e7:40:49:1d:1c:67:7b:92:71:f4:f9:23:78:3b:fa:9b:6f:8a:
         4c:f5:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:19:07 2026 by rpki-client