Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82810207-141b-3054-bb89-7dacbdc58097.roa
File:                     82810207-141b-3054-bb89-7dacbdc58097.roa (raw, json)
Hash identifier:          /sLXJDOIeDbgHP2tWw/rR+7lyGtPwO/8QLakRVaLcLM=
Subject key identifier:   6E:9D:77:E6:89:0D:8E:1B:F2:41:3D:7A:9A:11:E5:CA:00:01:7E:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D49E1718FD008D396A231BC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82810207-141b-3054-bb89-7dacbdc58097.roa
Signing time:             Wed 25 Mar 2026 19:09:50 +0000
ROA not before:           Wed 25 Mar 2026 19:09:50 +0000
ROA not after:            Tue 23 Jun 2026 19:09:50 +0000
asID:                     6167
IP address blocks:        2600:1002:a014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:e1:71:8f:d0:08:d3:96:a2:31:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 25 19:09:50 2026 GMT
            Not After : Jun 23 19:09:50 2026 GMT
        Subject: CN=118a89a0-04aa-426f-83a9-972d376005d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:0c:61:b1:89:c3:8f:37:fa:8c:3c:8f:5f:
                    29:b9:76:ed:6a:7f:3b:44:f2:d9:e0:84:a7:44:37:
                    ed:36:27:37:b7:d8:7f:18:d4:ad:76:26:c1:75:49:
                    90:11:77:51:fa:92:bd:eb:7c:72:c0:e0:27:3e:0b:
                    f9:83:17:b4:df:e9:d7:d8:0b:14:ea:0a:34:21:37:
                    37:d4:b7:bf:86:9a:57:76:2d:d1:5d:5f:f3:dc:40:
                    d9:2f:df:68:3b:d2:3c:b1:8a:6d:b1:02:71:9a:ca:
                    e3:f8:a6:43:68:ae:d9:37:62:33:91:d0:a7:c0:6d:
                    04:c1:a9:4d:1d:60:08:01:4b:64:53:9f:e1:ac:4b:
                    32:bf:78:2b:ac:06:e3:85:fc:7e:9f:64:9a:b3:33:
                    24:92:a5:e0:2d:96:b7:78:1b:85:e8:94:ee:7e:29:
                    00:65:f3:b5:5f:54:eb:45:01:16:80:26:bc:b7:ca:
                    18:a3:8e:78:85:5b:0c:76:8f:13:50:9d:13:92:c6:
                    3f:2d:bb:d4:ac:f1:86:16:f5:28:46:6a:33:c1:a5:
                    79:27:10:59:4c:f3:75:1f:09:2b:3d:5d:5a:14:68:
                    6f:1f:26:e5:d2:10:8f:97:09:7a:a5:57:5e:83:51:
                    7d:e8:71:20:04:93:c7:65:46:50:89:cd:85:3e:b8:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9D:77:E6:89:0D:8E:1B:F2:41:3D:7A:9A:11:E5:CA:00:01:7E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82810207-141b-3054-bb89-7dacbdc58097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ba:12:4f:40:b0:cb:44:90:13:c0:b3:51:37:4f:36:2c:f3:
         56:30:d3:96:21:d7:a0:32:06:6c:c3:6e:5f:78:53:38:43:59:
         96:17:86:ea:9d:e3:84:eb:98:ff:16:84:a6:29:e0:37:4a:bb:
         ce:b2:7a:06:9b:8b:7a:6b:e3:af:39:f9:ef:a3:75:d5:8b:9d:
         8f:e7:ae:e6:69:4d:76:83:a6:0e:32:6d:a8:0e:1f:b1:fb:10:
         c5:3b:4a:c2:39:52:9d:ea:51:04:f4:c9:4d:18:f0:ef:cb:94:
         14:71:4b:f1:7f:41:3b:74:a0:5a:d7:e1:9e:95:9d:46:ed:a2:
         ef:18:98:3e:22:36:79:0d:89:5f:49:f6:b2:36:56:b8:12:85:
         af:c3:c6:43:48:86:29:ff:09:fd:84:32:96:7c:ce:7d:48:cf:
         af:41:d0:39:2b:c3:e8:92:f8:8c:c2:88:5c:d8:dc:92:b3:d1:
         84:02:df:db:21:16:ba:a6:17:07:6a:a9:cc:f3:f0:66:5b:3e:
         6c:35:c0:32:c3:f0:af:45:c8:03:7d:05:2b:1d:d2:e5:9c:76:
         39:75:95:aa:88:d3:be:80:7b:fc:ed:cd:87:a0:6c:83:d8:9d:
         1e:05:37:d6:e0:01:d2:73:e3:25:9a:24:6c:d8:cb:f4:86:65:
         9c:be:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:06:24 2026 by rpki-client