Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c461943-c88c-3ca2-a523-136583e79ba9.roa
File:                     8c461943-c88c-3ca2-a523-136583e79ba9.roa (raw, json)
Hash identifier:          FBkgvSwCn46Eu0gIM59ghW9HrnC5J6iiMKIpxKRf7sQ=
Subject key identifier:   09:33:44:C4:21:52:1C:37:0B:8C:C0:C7:9A:AE:3A:E2:B7:66:12:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE048506C2236CE2CFCD700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c461943-c88c-3ca2-a523-136583e79ba9.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1016:b030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:48:50:6c:22:36:ce:2c:fc:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=c9278179-1813-4b6c-96f2-adfffb7a8f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:45:a3:41:fe:e8:70:e4:9d:ee:95:7f:03:97:
                    b9:93:1e:59:64:00:be:77:28:e9:29:ae:ed:56:b7:
                    c9:a8:b7:a9:2e:eb:a2:49:23:7e:c6:92:4a:c3:b7:
                    39:ad:32:25:81:52:fb:fc:3a:cd:14:41:4c:51:5c:
                    7c:af:4a:76:d2:3d:f7:cb:02:61:58:c1:17:ad:eb:
                    3a:86:47:b2:15:7d:30:1f:a5:63:81:63:bf:a8:00:
                    27:16:bb:36:4a:6a:ae:b5:33:4b:8f:65:be:51:19:
                    08:25:88:c3:6d:3c:85:70:21:06:9f:ff:53:92:12:
                    e1:d2:3f:90:1e:fe:83:98:21:f3:97:f6:ca:a1:15:
                    b1:2f:f4:d4:1a:fd:1b:e3:8b:76:cf:b2:59:49:36:
                    b6:02:2c:10:4b:51:d2:cf:a1:00:47:3f:0a:05:56:
                    29:4a:cd:6d:32:84:8b:3b:3a:2b:ae:44:48:ac:f4:
                    d9:b5:ca:46:70:a6:bd:a7:a1:2f:bf:cf:87:bf:da:
                    f1:92:5c:e6:6c:82:a1:17:35:47:5d:7a:da:18:70:
                    a9:50:59:1d:0e:fa:ef:28:9c:83:d8:81:49:e2:70:
                    c4:bf:8b:0d:05:88:e3:01:5f:d3:e3:36:ba:96:e1:
                    45:77:76:7f:ef:eb:18:23:04:07:dc:98:24:36:0b:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:44:C4:21:52:1C:37:0B:8C:C0:C7:9A:AE:3A:E2:B7:66:12:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c461943-c88c-3ca2-a523-136583e79ba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:3a:7f:20:80:f7:9b:99:aa:ba:01:cf:36:fa:1b:45:b4:
         f3:f6:8f:f8:db:56:c3:0f:d1:46:03:d2:44:30:44:3f:9e:1d:
         a1:37:8c:c9:20:80:65:95:3e:9f:ec:c4:54:a0:a0:e6:f4:f6:
         ce:b0:6f:ee:19:40:f1:06:11:32:40:dc:17:a6:07:75:61:86:
         48:83:a9:eb:ec:38:49:59:2d:54:ae:a1:a4:6d:23:3f:f9:9b:
         f9:3f:f6:34:3d:ae:e1:f2:8e:09:39:4d:37:d0:d3:cc:64:d4:
         ae:b5:d7:bd:3c:c8:f7:38:de:78:9c:c2:6c:71:62:25:05:a8:
         e7:c4:14:a2:af:9e:9b:19:ac:76:09:93:75:2e:cb:5e:d3:39:
         6f:d2:1c:3d:22:0d:88:d1:3c:a6:80:ae:c6:1d:a9:ee:89:da:
         59:8a:eb:8c:2b:96:de:a9:5c:19:98:8f:8c:b8:38:3e:67:b0:
         6c:e3:43:2c:2a:f8:5c:fd:f2:bd:6e:20:d7:dd:42:ad:ef:2f:
         d5:48:60:ad:ea:68:54:a3:74:e1:d2:c8:89:a8:2f:90:f9:82:
         f3:bb:b9:d1:92:c3:a7:75:96:09:30:78:a6:81:2c:f6:a4:c8:
         25:aa:71:4f:b7:c9:c4:17:e3:65:1f:21:2d:b5:96:73:cc:84:
         a7:02:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:48:52 2026 by rpki-client