Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8cc96758-69fc-3307-b197-77dad4848502.roa
File:                     8cc96758-69fc-3307-b197-77dad4848502.roa (raw, json)
Hash identifier:          FB9QVg52sg/YTnwEMUKUUKBVSF5d3NhORvVSmVfed70=
Subject key identifier:   23:FE:59:5C:F2:9C:09:83:41:5F:69:C8:F7:6B:88:E8:F5:2F:7E:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE04A7506CBDD5C34171600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8cc96758-69fc-3307-b197-77dad4848502.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1017:b1d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4a:75:06:cb:dd:5c:34:17:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=39c9c391-75fa-410d-8423-ca47397afa48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:e9:96:4c:11:17:e2:92:9e:f4:f5:86:92:
                    36:62:52:a5:b5:de:7e:79:18:8b:c7:f5:75:a2:f8:
                    53:33:a5:2d:73:ca:8e:14:43:7b:4d:8b:47:42:72:
                    0d:65:3d:67:df:7c:01:ac:24:90:23:9f:72:4e:27:
                    6a:16:bc:4a:59:14:09:85:e0:07:6e:11:63:ad:3b:
                    e8:fb:7a:2d:08:5c:20:0d:14:84:ef:7f:cb:99:d5:
                    ef:fd:8b:f6:92:a6:0b:e6:3a:cc:d9:92:24:28:23:
                    5e:62:22:9d:18:f2:93:55:87:97:0e:5b:aa:e4:bc:
                    15:22:ec:62:07:14:bf:7b:43:f0:38:9c:c5:d5:5d:
                    0f:7f:27:52:8d:d5:74:c7:32:c0:0e:91:a2:8e:87:
                    52:f2:05:76:62:3b:c8:b3:bf:ea:43:47:0c:17:48:
                    92:ad:15:e2:cb:ba:9e:f0:70:3a:f9:d9:1d:8c:e0:
                    bf:3b:0a:7c:45:fb:e1:99:aa:84:77:b2:d2:42:a7:
                    4b:1d:26:a3:15:51:34:c0:8c:47:3f:93:e1:c1:74:
                    3b:08:44:c7:68:2b:a6:66:7b:f4:6d:fc:7e:2a:93:
                    0d:bd:cc:2d:bb:a2:f5:c1:da:0e:c6:54:27:93:5b:
                    c2:99:a1:76:a7:39:15:8d:7f:4d:57:6e:fb:5f:67:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FE:59:5C:F2:9C:09:83:41:5F:69:C8:F7:6B:88:E8:F5:2F:7E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8cc96758-69fc-3307-b197-77dad4848502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:1a:52:78:19:98:71:d6:b9:67:97:67:9d:39:bd:f2:76:
         b7:20:7c:0e:49:d1:db:d8:ef:1b:b8:bf:49:d2:03:98:05:52:
         6d:66:65:ae:07:2d:99:a3:47:b2:4b:a0:de:b8:c9:50:73:06:
         2b:0b:d7:9a:15:63:68:f8:9f:aa:08:bd:77:c4:2f:b4:ef:f4:
         77:ee:eb:39:8e:18:3b:8d:eb:9b:98:23:4e:f5:9e:e0:95:06:
         3d:86:64:ef:ea:0e:8b:e6:f2:98:09:33:36:5c:72:03:54:ac:
         94:c2:07:5e:0b:8c:50:b5:f0:47:45:07:4e:5b:98:17:07:1d:
         25:12:b7:f9:32:ae:27:c7:10:df:52:bf:32:7e:97:fa:70:4e:
         eb:f6:f7:ad:b7:3e:af:62:d6:c4:02:bd:a2:4f:17:4a:14:23:
         c0:e3:50:e4:46:a9:99:7b:e4:cc:c3:96:7d:8f:6e:bd:ca:2f:
         4e:b4:42:0f:3c:71:da:1d:50:00:63:da:46:0f:84:39:3c:64:
         af:e2:e7:f1:31:0f:c2:1b:c5:bb:f3:af:20:11:ee:1f:37:a1:
         ee:b8:fa:0d:16:d9:bd:08:ef:94:8d:59:2e:4c:64:2b:ca:77:
         49:7c:3b:3c:39:81:cd:f6:fd:c0:e8:e8:d2:00:b8:1d:9b:f7:
         d8:db:a3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:30:11 2026 by rpki-client