Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ba72af-afca-3860-a167-b1db4eaf6655.roa
File:                     66ba72af-afca-3860-a167-b1db4eaf6655.roa (raw, json)
Hash identifier:          A02oSA+W/C4piCMJas0NVwJuTc66JPz9wRbdWGNiwBc=
Subject key identifier:   33:24:E5:8A:2D:5D:84:4D:83:7B:44:E3:D2:0C:38:A8:55:58:9E:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE04069478201CC63A89EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ba72af-afca-3860-a167-b1db4eaf6655.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     22394
IP address blocks:        2600:1012::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:40:69:47:82:01:cc:63:a8:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=88ebae36-b430-4245-a741-accd7ef7d164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:5a:5e:72:30:a8:ce:f3:83:8c:e6:bb:3d:
                    77:0a:f3:ed:e7:e4:86:38:14:38:1f:17:f4:da:8c:
                    65:a2:e6:70:65:53:06:49:65:3b:1c:24:0e:20:28:
                    6a:2b:08:79:52:b5:fc:aa:64:1f:43:f2:30:4b:97:
                    b3:f3:59:0d:93:e9:3f:c9:f1:0e:a7:1c:ae:a0:07:
                    06:b6:f2:c5:e2:72:45:90:57:d2:02:52:f9:78:83:
                    b4:38:1b:31:60:fd:c9:00:5d:09:f1:e8:40:68:9a:
                    36:03:0d:e6:82:46:e7:8e:4b:18:b5:cb:9f:b7:a0:
                    a3:b3:82:81:f6:0b:f9:34:3a:c8:71:d8:71:b0:1e:
                    bb:e8:f5:14:6d:61:83:81:2b:82:c2:00:84:ea:db:
                    0c:5f:e2:61:89:23:2b:11:3d:e5:7e:6c:4d:a7:78:
                    48:f9:c3:02:3f:dd:bc:d4:27:ad:9f:d8:2a:7f:d8:
                    e2:4e:25:75:8c:56:78:3d:01:ca:b2:cd:f3:97:20:
                    94:da:f2:a3:5d:80:cf:a5:ce:0c:1b:ef:63:15:8c:
                    ff:4c:e4:dd:1f:cd:3f:68:96:14:4d:d8:85:a1:de:
                    b6:bd:f4:62:66:36:ee:eb:0b:52:63:17:76:fe:cd:
                    06:82:ac:b0:e5:58:fc:5d:8a:fd:9e:23:b2:89:61:
                    ee:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:24:E5:8A:2D:5D:84:4D:83:7B:44:E3:D2:0C:38:A8:55:58:9E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/66ba72af-afca-3860-a167-b1db4eaf6655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:20:fc:79:3e:08:4c:28:17:44:04:99:de:28:11:28:df:42:
         b6:c0:1b:32:8f:aa:c4:d9:39:9e:0e:ee:e7:1e:93:3f:76:82:
         9a:6e:88:c3:c6:1b:e5:a0:b2:96:35:f3:11:5a:cf:71:cc:62:
         94:c1:ee:04:8d:5f:c7:f1:cb:74:27:5d:c4:f1:d2:da:3e:1c:
         32:8f:f4:70:f8:dd:5c:64:01:6f:de:3e:2e:14:c2:eb:18:78:
         84:8f:02:5b:ac:34:81:34:1d:3b:3d:ae:b9:df:01:2e:76:33:
         85:48:ec:4d:e3:52:f7:7b:14:3e:bf:1a:6d:a5:6c:1a:76:d6:
         5e:9e:1d:67:50:c8:05:28:55:05:e3:a2:f2:55:c3:ab:22:f5:
         12:74:c0:c6:51:af:2c:d1:bd:3a:8d:bc:1e:c9:4b:9f:7f:da:
         11:84:a4:01:99:20:55:bf:bc:42:26:6d:79:5b:d9:bd:02:48:
         6b:b2:a0:8b:58:c6:dc:0b:e6:13:1e:00:6c:51:d2:c0:77:d2:
         7e:66:bf:8c:b4:7b:61:10:0d:e4:08:dd:29:85:a1:f8:5a:5a:
         93:35:c2:b1:88:97:17:23:19:80:7f:62:67:80:b5:32:18:2a:
         d3:cf:a5:65:b4:0d:66:d4:8d:b3:88:15:3e:31:88:bd:22:a4:
         3f:be:36:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:26:52 2026 by rpki-client