Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8735e4b7-18d1-3f7d-b8ea-001500d4cf3c.roa
File:                     8735e4b7-18d1-3f7d-b8ea-001500d4cf3c.roa (raw, json)
Hash identifier:          x+Jm8ddlj9+DMx60xPcKroIrW0d6IQHzxhK15hG/Ni0=
Subject key identifier:   98:BC:5C:CF:23:D1:55:F6:80:65:81:0B:7C:6E:33:EF:A3:C9:94:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE04ABAECDCE4D7B0521BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8735e4b7-18d1-3f7d-b8ea-001500d4cf3c.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1017:b4a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4a:ba:ec:dc:e4:d7:b0:52:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=12d6c5e5-ecd4-4c22-bcc0-48a43beaf604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3b:63:9f:87:20:bf:3d:d4:3b:69:ee:50:02:
                    c7:d1:0c:7d:ad:b2:c9:1b:64:fd:02:28:9b:ad:9e:
                    0a:f0:a0:55:a2:f1:af:19:31:6f:7e:16:8a:54:1d:
                    2f:5e:f2:f5:da:32:8c:4d:86:e9:20:86:98:32:15:
                    07:8e:76:41:b4:24:13:28:08:69:17:29:25:32:a5:
                    27:88:38:0f:39:f9:7a:bc:56:73:a7:3f:4a:d5:65:
                    74:23:62:cf:28:33:01:7f:19:a1:23:f4:ff:85:64:
                    be:73:b1:2c:fd:05:e5:78:2a:b8:fd:e8:67:bd:10:
                    9b:db:af:0e:e2:cd:65:bc:41:62:35:e3:4d:15:b5:
                    de:87:94:dc:5c:19:ec:4f:52:80:f1:96:e2:51:bc:
                    0f:1f:a0:09:da:c9:1f:94:51:8c:a7:c6:37:b3:6c:
                    89:f8:0f:97:49:59:47:28:79:50:1b:55:cd:55:4f:
                    4f:bc:1a:51:63:9f:06:c7:4a:22:be:55:ee:c0:64:
                    4b:50:7a:64:ce:94:ac:97:07:bf:2c:96:db:d6:76:
                    98:9a:f5:89:32:d7:36:29:b9:1d:d2:2a:43:a4:d8:
                    5f:d0:ae:13:f8:f1:2b:3c:83:8e:b8:26:2e:ba:d0:
                    ae:6b:23:b5:3b:9a:c8:bb:1f:ca:a0:27:5c:2b:64:
                    0f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BC:5C:CF:23:D1:55:F6:80:65:81:0B:7C:6E:33:EF:A3:C9:94:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8735e4b7-18d1-3f7d-b8ea-001500d4cf3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b4a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:84:3a:9c:56:5a:e3:d2:13:14:17:d9:0d:97:22:50:6a:b2:
         d7:cb:be:10:e2:2e:8f:ad:d3:5f:32:ed:a3:3e:12:43:93:3a:
         f0:0c:74:5c:45:b2:7b:c6:92:c2:68:a7:d6:37:3d:87:e5:4e:
         0e:16:06:99:61:59:ed:44:03:0d:cb:b0:cd:02:91:9b:a4:39:
         66:22:07:00:06:c8:b4:c4:da:7b:73:cd:55:5f:6a:3a:a9:af:
         01:7d:96:26:18:e7:dd:3e:d9:18:d3:ce:99:6d:89:a4:c3:94:
         29:6c:fa:7f:47:77:d6:5b:0a:3d:ea:67:2e:67:b8:98:ca:54:
         00:87:92:4b:cf:3b:7a:bf:68:d6:6d:2c:45:49:c7:53:71:05:
         cf:e5:4d:a2:89:76:54:0e:e8:0c:c0:2a:5b:49:b3:cc:51:62:
         ad:26:dc:fd:a2:9b:f0:c0:ba:eb:78:a5:a0:23:ee:b2:a8:82:
         81:e2:0b:12:c1:74:70:8f:a9:0a:cb:7a:40:b8:67:8a:e0:f9:
         1e:10:15:0b:fe:7d:6d:61:b8:e8:78:56:49:d1:30:1c:a1:1d:
         19:93:20:d3:0c:8f:04:86:dc:83:96:7a:18:ad:9a:d6:70:8c:
         de:f5:a8:6a:06:b0:e8:c8:80:7d:49:0a:b3:97:32:ef:29:59:
         09:8b:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:21 2026 by rpki-client