Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f486310-7e25-3bf2-ab47-79ffa9c58b9b.roa
File:                     5f486310-7e25-3bf2-ab47-79ffa9c58b9b.roa (raw, json)
Hash identifier:          dc+SBuzixaWC/5EPhje0zzPsJNBSlpBba01ApGIOlmU=
Subject key identifier:   D6:A9:4E:8A:E9:72:E8:FB:48:58:23:E0:33:1A:1A:0B:99:B7:67:D1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A38ADF2B780B48AA829A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f486310-7e25-3bf2-ab47-79ffa9c58b9b.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:100b:a118::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:38:ad:f2:b7:80:b4:8a:a8:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=95e44691-0fc8-4eea-8850-9473e92e39d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:76:28:9e:70:f3:ad:f4:62:74:5c:06:4c:
                    2c:fd:a7:71:d4:16:97:fd:7b:e5:eb:63:95:fc:b3:
                    bf:d0:54:82:87:bf:e2:e7:a3:df:2d:0b:bd:9a:0e:
                    8f:76:ec:5b:41:c8:a2:3e:68:eb:e2:51:d1:92:87:
                    aa:21:8f:30:ab:fa:5e:94:72:aa:db:1b:4c:81:0a:
                    f1:a0:9a:b2:e0:7d:4c:bc:6f:03:eb:da:1b:0f:fb:
                    cf:8a:90:f1:bc:6c:ad:2a:17:ae:16:88:1d:db:2e:
                    02:fd:c0:e8:1d:11:ab:13:84:e5:ac:b4:b2:73:4f:
                    31:f0:c5:d8:b3:f1:a1:1d:bf:68:18:a9:4b:80:cb:
                    59:a0:1a:b6:f0:4f:28:0d:0d:05:59:56:15:c6:2e:
                    6a:3a:5f:40:c6:ae:bd:19:f6:17:07:a1:6f:5f:aa:
                    82:9f:1f:ad:7d:24:88:50:54:5a:3e:ec:c7:c6:5d:
                    94:52:3d:e6:86:2f:b3:1a:88:10:38:74:48:99:19:
                    5d:4f:ee:a5:cd:d5:3e:54:b7:49:7f:94:09:2d:05:
                    8b:49:13:38:d0:6c:e5:20:27:6d:d9:3d:ac:37:c8:
                    43:15:c4:8f:4b:52:25:68:bd:3c:47:37:a0:ba:0f:
                    76:5a:55:41:29:ec:69:88:01:74:e5:68:04:26:74:
                    4c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A9:4E:8A:E9:72:E8:FB:48:58:23:E0:33:1A:1A:0B:99:B7:67:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f486310-7e25-3bf2-ab47-79ffa9c58b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:a118::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2d:34:8b:2d:72:50:40:d0:5a:57:18:db:45:1f:ae:a0:73:
         f6:a9:60:ee:1e:81:ae:d3:46:57:c4:85:ef:e6:25:20:10:97:
         cf:f7:0b:33:76:da:b0:df:53:9a:ea:41:16:6a:65:9f:0e:cd:
         19:8a:4e:ed:23:8d:91:95:1a:eb:c5:3d:49:24:fb:78:ee:eb:
         f8:b4:fd:da:64:62:99:e1:0d:8d:8a:31:fe:81:ce:e6:9b:88:
         82:72:50:d2:58:f4:8a:80:4f:80:fa:82:de:32:58:e9:e3:17:
         0c:ba:0c:d9:16:8b:7a:17:56:b5:73:4f:5d:20:7a:b6:00:e8:
         83:49:9c:5c:33:f3:e1:a5:6f:96:5b:ca:e3:60:c8:08:81:bf:
         df:7c:29:eb:83:b0:52:80:e4:b3:62:03:7c:a4:90:1f:c2:2e:
         5b:0f:11:c7:77:6c:9b:3e:d9:8a:37:83:ba:53:5b:71:e7:2a:
         9d:28:8f:b9:b3:ae:68:f2:80:e6:9b:73:a4:72:99:57:9a:58:
         cd:45:5c:a6:7c:e0:4a:3f:26:4e:62:a0:ca:0d:0b:f4:24:f8:
         66:39:d9:86:24:fc:ce:c3:df:a5:e1:69:9f:31:dc:b1:3b:51:
         2b:aa:9a:99:32:e3:c6:c8:08:79:a2:50:9c:c6:8d:bf:6f:70:
         4d:e3:e3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:51 2026 by rpki-client