Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5506c379-7663-33a9-b526-84acba857c21.roa
File:                     5506c379-7663-33a9-b526-84acba857c21.roa (raw, json)
Hash identifier:          ZHAFeRccuCYASiPAGHgm6Tz1TPQu5HVaQLxAs3YhRv8=
Subject key identifier:   78:93:4F:1C:F9:72:89:8B:59:85:68:8C:DF:D7:E1:3A:17:64:42:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0422C4837F3B050705052
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5506c379-7663-33a9-b526-84acba857c21.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:b300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:42:2c:48:37:f3:b0:50:70:50:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=5dd52e12-0127-4103-87a6-5200b2c60463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9d:cb:cf:61:80:b3:59:32:e6:b0:6d:76:81:
                    91:96:38:16:68:d3:3e:73:37:f3:89:04:c2:b4:0b:
                    55:0e:55:6f:a1:5d:c5:3b:f3:44:a1:ad:37:af:68:
                    77:da:f8:16:72:95:01:d7:ba:ae:ae:66:71:3c:8c:
                    e0:ec:09:52:80:97:0c:7b:31:12:ca:4b:06:0a:e5:
                    51:bd:ad:07:76:b8:6e:c1:d9:f6:ba:0c:03:3c:4f:
                    9a:e4:2e:d2:ac:47:a0:aa:70:1d:2e:8d:80:18:68:
                    fb:62:32:a5:ea:0e:99:1b:d5:29:d7:dd:57:94:5e:
                    81:7a:56:a8:38:d7:ee:cd:51:64:71:1f:f2:3c:db:
                    45:b8:4d:c0:9a:9d:61:b8:98:31:48:f5:5d:a2:33:
                    9f:ce:37:fa:0d:a3:9b:07:11:1a:e8:c9:69:89:48:
                    aa:96:80:51:98:18:44:84:69:53:fc:32:8e:8f:3c:
                    d6:b0:bb:d1:59:bc:21:32:ca:5c:ec:cc:2b:29:e8:
                    1b:6e:78:b4:d5:9b:58:e3:37:3f:78:77:00:eb:f7:
                    eb:ab:3b:01:18:70:25:d4:dc:79:86:42:1e:21:b3:
                    2f:03:0a:2a:bb:6a:b4:64:4d:94:ce:36:de:ac:cb:
                    a9:f7:ac:a4:a2:18:76:b1:af:30:65:99:f6:f8:a8:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:4F:1C:F9:72:89:8B:59:85:68:8C:DF:D7:E1:3A:17:64:42:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5506c379-7663-33a9-b526-84acba857c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:a3:15:1e:4d:1d:43:87:be:a9:20:08:9e:91:a5:b3:b3:
         64:bd:41:aa:16:03:36:db:af:29:60:11:3f:52:5d:ed:ac:44:
         17:2c:94:bc:0c:10:ff:28:db:7b:19:9c:73:0d:d7:e9:57:4a:
         6e:95:c4:29:75:a5:7b:82:c9:bf:5f:f6:40:0c:79:0e:9a:82:
         c7:3b:39:b2:03:86:a9:04:de:8b:b3:a9:c7:d8:5b:0c:b0:1f:
         7f:9b:96:1b:93:90:14:db:6e:31:e7:0a:59:c2:ea:9f:d6:46:
         39:3e:69:9d:6b:07:70:f6:6e:fa:3d:39:91:86:60:e2:c8:42:
         5c:05:c8:0b:fb:d9:84:ac:27:75:5a:b8:ec:7b:58:53:b9:9b:
         c6:0c:cd:2d:8e:4c:15:2d:02:b0:55:35:ed:f9:f6:88:22:e3:
         c0:ed:ff:c0:34:8a:a0:97:31:ff:9c:69:ec:f9:76:15:14:61:
         5b:d6:ee:37:e1:a5:4b:25:d4:0d:2d:c6:d6:18:d7:8b:1e:92:
         1b:d7:f1:36:72:0e:48:db:3d:2e:c6:a7:e5:8f:07:6f:b5:fe:
         24:a3:70:c7:9c:3c:ab:df:97:da:39:95:24:41:0d:97:20:75:
         16:2e:36:6a:a1:4d:7d:e6:60:a1:86:9b:d3:54:40:8b:84:43:
         d3:bb:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:55 2026 by rpki-client