Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65a1c865-a34c-3cf5-9f74-65a712252da5.roa
File:                     65a1c865-a34c-3cf5-9f74-65a712252da5.roa (raw, json)
Hash identifier:          qol4Rnb+4iVLUkTP8VdmDXpPPH2eCFRpMjsTkcOKZ20=
Subject key identifier:   6E:17:72:9F:B3:3B:18:BA:F8:F5:AA:26:E9:DB:A2:0F:16:C2:B4:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE046D3D66FABECA0D33A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65a1c865-a34c-3cf5-9f74-65a712252da5.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1015:b0c2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:46:d3:d6:6f:ab:ec:a0:d3:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=f892231a-2359-477f-9f77-6f1a742bc86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a4:63:52:3b:1e:c9:69:cb:7a:4a:f7:a4:7f:
                    1c:75:76:a2:da:f2:f6:df:85:1b:23:1c:30:90:76:
                    c0:a2:d2:96:71:5a:06:3c:16:9a:24:98:b2:24:91:
                    90:8f:91:53:5a:28:f4:c3:be:98:88:58:d1:d3:f9:
                    f2:9b:4b:91:34:7d:de:55:67:37:d7:0e:a0:37:57:
                    5a:7d:7e:1c:21:6d:8b:1a:f7:3a:90:2d:21:d8:74:
                    a4:9e:a4:02:dd:53:f3:e5:f7:56:6e:42:b3:65:8c:
                    73:3a:db:84:71:40:82:13:f8:d2:b8:3b:11:90:15:
                    91:c9:4a:dc:52:c4:db:0d:19:9f:64:f3:8f:25:da:
                    96:58:e1:77:01:4d:59:87:99:26:6b:dc:af:32:df:
                    9f:7d:44:54:e2:18:b7:84:89:53:76:78:1f:db:b0:
                    12:31:33:7f:97:b4:f0:03:2d:24:d8:9f:a2:90:64:
                    a9:51:51:03:5f:83:45:c9:1e:2a:31:ac:fc:fb:08:
                    bc:e4:eb:ef:47:e3:26:c9:55:53:2d:5d:09:ac:2e:
                    3d:b4:6c:0e:7b:d7:4a:f2:f0:58:bf:24:3c:c7:1a:
                    00:67:86:99:6a:62:91:3a:13:e2:82:ee:c2:de:ca:
                    fe:ac:c6:cc:c4:d8:cc:d4:02:28:6c:0a:2e:f1:9f:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:72:9F:B3:3B:18:BA:F8:F5:AA:26:E9:DB:A2:0F:16:C2:B4:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/65a1c865-a34c-3cf5-9f74-65a712252da5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b0c2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:16:52:80:ee:1e:a8:e8:12:8f:ab:e8:9c:4a:b4:ec:e9:
         4e:4f:30:3a:a3:cf:e9:73:07:e9:1c:7c:85:d7:7f:30:e0:5f:
         8a:92:2f:63:68:85:56:c2:9a:11:19:1b:32:39:79:47:04:39:
         d3:1c:b9:17:c0:a7:24:2d:9a:be:d4:3a:6f:1c:fb:dd:a0:dd:
         2c:09:4a:b4:53:f7:4b:7d:74:91:e8:34:89:75:25:64:ac:f7:
         8a:22:1f:d4:42:03:37:ca:b4:99:81:d2:b4:9b:c1:ca:60:8a:
         99:58:a0:94:dc:bf:8a:99:6f:f1:72:b7:08:ab:e7:0b:25:c1:
         f3:22:14:17:90:dc:24:b5:39:de:e5:7a:d0:a5:4c:1a:0c:cf:
         97:a2:03:da:11:89:6e:35:87:b5:a9:a3:73:2e:3b:44:69:e6:
         e7:7e:4f:fa:89:f9:00:21:92:62:a8:cf:77:b3:93:e5:a6:ba:
         75:a1:4a:56:21:a0:52:44:0c:83:45:1d:bc:c6:2d:fc:52:af:
         57:51:1d:81:7b:e7:4b:bd:68:11:8c:60:ca:af:0b:27:11:45:
         44:7f:d3:9e:dc:7f:9f:42:0e:de:d2:0c:d5:ea:20:eb:3e:4b:
         e0:6e:5a:8f:40:7f:bc:ff:19:f2:c6:b2:2a:1c:35:48:77:2d:
         f1:a0:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:13:02 2026 by rpki-client