Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70ce2b0c-45eb-32df-9492-73b866519972.roa
File:                     70ce2b0c-45eb-32df-9492-73b866519972.roa (raw, json)
Hash identifier:          NPC0AsqEB/lO7GkZnSez4TXjKx1mX0tneQsH3BtkQ8w=
Subject key identifier:   61:B3:04:B8:6D:85:84:9D:EA:7B:5D:6D:CB:AC:AC:2D:19:20:9F:EF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE047CD3CFC18BD78B0D200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70ce2b0c-45eb-32df-9492-73b866519972.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1015:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:47:cd:3c:fc:18:bd:78:b0:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=e1f056f0-63fb-4d70-89d5-db3f1dc7739c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:11:74:1c:fe:8a:9a:b8:eb:6a:05:32:91:
                    b3:76:be:80:33:65:16:84:16:3f:51:bd:db:59:52:
                    2e:d0:b1:aa:ff:ec:d7:c2:92:d1:b6:49:4d:e5:cb:
                    88:17:d1:60:38:38:df:68:be:13:64:83:3e:b7:c6:
                    11:e6:5c:55:33:bf:70:5b:a5:a8:13:e2:99:53:19:
                    e0:26:7f:29:09:2b:07:69:56:89:c5:cc:cb:38:33:
                    58:ed:de:fb:2c:f7:b0:70:8f:3f:c9:c6:47:18:cc:
                    ea:4c:d3:99:68:6e:82:9e:6f:be:3b:63:cc:e0:f9:
                    1e:68:e3:b7:42:e6:2c:cd:65:8e:4f:4e:b3:93:f2:
                    b4:0a:f9:eb:1e:b3:83:bb:34:7e:69:ef:75:3e:4d:
                    a8:9c:44:cf:02:fe:3a:98:b2:0c:92:ab:dd:fd:49:
                    9b:7a:76:0c:bc:1f:f8:0a:9c:fa:6f:b8:09:54:13:
                    a1:17:cf:16:d2:e8:71:72:62:8e:b7:1e:99:ee:43:
                    fd:5b:14:19:ed:45:fe:96:eb:b4:2f:38:ed:e4:39:
                    c6:f5:ec:77:b9:83:d0:cb:ef:b4:ae:6d:05:3d:86:
                    a0:b6:24:fd:41:0d:36:ea:75:29:9c:83:c2:0f:b1:
                    36:cd:10:bb:11:9d:37:7d:93:7d:89:7d:90:d9:18:
                    7f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B3:04:B8:6D:85:84:9D:EA:7B:5D:6D:CB:AC:AC:2D:19:20:9F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70ce2b0c-45eb-32df-9492-73b866519972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:94:c1:e7:14:f3:18:b5:ad:a0:e8:a3:f9:40:17:f2:3d:9c:
         dd:3e:8c:82:1f:ff:59:f5:ce:ca:23:2a:75:1a:f7:4d:e0:b7:
         c1:ca:8c:32:af:06:c0:56:e7:e0:fb:4a:d5:ea:c9:c3:55:c2:
         55:0f:ce:58:2b:69:03:b9:fd:6d:df:38:a6:0b:ef:34:0d:6e:
         c9:95:c7:36:4d:03:13:1a:ad:7b:49:4c:88:3e:42:f4:7c:28:
         c1:3f:74:b8:38:80:e2:b9:eb:d4:ad:d3:09:1c:d2:59:0b:81:
         d8:f1:48:16:be:d6:ed:76:14:c3:01:13:a1:14:1b:b9:16:85:
         b4:5f:6b:62:17:b4:02:9e:8f:7c:c2:8f:1d:9c:ee:9f:ce:b2:
         ca:c2:95:5a:82:eb:bb:46:7b:b2:09:f6:71:93:17:7e:66:c8:
         45:42:67:c6:03:7c:14:5c:fb:96:0e:df:97:32:82:44:1a:a2:
         2e:b8:24:bf:6a:ea:dc:8e:3b:2c:9b:73:e7:b6:df:09:73:38:
         b2:8d:57:8f:18:cb:4b:36:5a:24:75:dc:d9:32:a9:80:e1:d1:
         0f:5d:c2:05:64:51:f1:6c:ab:d5:b2:95:3f:84:da:88:91:14:
         48:bb:2b:ee:3f:19:0a:ed:72:ee:10:2d:ed:9d:56:37:5d:92:
         42:dd:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:26 2026 by rpki-client