Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f2c594c-bc65-38b9-9a6f-91d354fc7441.roa
File:                     8f2c594c-bc65-38b9-9a6f-91d354fc7441.roa (raw, json)
Hash identifier:          4Gzdcu+uNZih/TijfNNfEpOuT0Y0OBC2FlKbhRH9G0E=
Subject key identifier:   30:1B:03:AC:F0:4A:F5:B7:13:A5:C0:A8:A6:91:9A:0C:70:29:7A:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE03F2FEC5211ACF380B190
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f2c594c-bc65-38b9-9a6f-91d354fc7441.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1014:b098::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:3f:2f:ec:52:11:ac:f3:80:b1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=dcae8e2b-8456-4b4a-8d5a-df272f69e4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:08:d0:f2:70:18:65:3b:26:af:db:d6:9b:
                    29:3e:f8:b5:0c:e9:52:07:41:89:f4:78:6b:78:45:
                    73:27:a4:12:7a:8a:fc:50:aa:b6:45:73:94:83:3e:
                    fd:86:4e:56:48:2a:4a:0f:43:0d:1a:97:7e:b3:4c:
                    82:8b:c3:dd:66:ed:fe:3e:86:9f:79:bb:ff:56:d4:
                    e9:bb:1a:8e:14:7c:ed:61:85:ba:07:b9:dc:09:36:
                    65:fd:df:6e:6d:4d:9e:5f:a8:54:e4:9f:84:6a:11:
                    4c:bd:a0:b5:1b:b7:89:a3:43:ef:70:32:bc:2f:d9:
                    e7:de:47:9f:ac:e0:8a:bf:31:84:65:a6:6f:01:47:
                    e4:01:ec:f6:5c:3a:56:34:f0:15:67:b2:2f:87:f5:
                    fd:95:0b:3f:a5:0c:62:10:ce:e0:84:cc:76:f4:70:
                    7d:d8:0d:33:f4:ff:8d:e6:20:31:af:68:9b:bb:8b:
                    f9:5c:3c:6d:35:62:b1:a3:8f:ba:bb:03:61:6e:54:
                    31:cd:a7:cc:34:9c:3a:b6:bf:a6:91:3b:32:9a:fc:
                    be:e8:16:af:1a:47:6f:dd:3f:49:53:90:bb:5b:cb:
                    f8:7e:7c:1d:17:76:50:fd:1c:e8:40:8c:8f:2d:55:
                    5d:b5:b5:73:1d:3a:0a:dc:7a:9d:e5:fe:c4:75:75:
                    38:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1B:03:AC:F0:4A:F5:B7:13:A5:C0:A8:A6:91:9A:0C:70:29:7A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f2c594c-bc65-38b9-9a6f-91d354fc7441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b098::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0a:1b:f1:20:cd:1b:2d:27:57:f8:26:e9:41:cf:ff:3c:e3:
         36:a8:ab:34:09:79:f7:c3:72:c7:ad:f1:65:8a:69:95:ed:37:
         ee:14:75:8e:74:03:8c:dd:4b:6f:a6:f1:9c:e4:41:ee:b2:f5:
         1f:3f:3a:06:5d:d9:bf:4e:be:48:66:14:9e:7f:db:b9:7f:3f:
         40:70:df:0f:99:a9:ea:c2:dc:a5:92:46:6d:ef:2c:76:b7:93:
         82:ca:67:80:1d:c9:1e:50:b5:6b:47:e8:bc:65:e6:c4:64:c4:
         3c:84:e8:e5:69:f8:76:31:1d:5a:e1:95:8c:02:1d:18:1f:f0:
         cc:7b:26:4f:f6:21:e8:cb:61:ad:49:76:78:86:a3:46:fe:b5:
         08:9e:70:78:34:43:cc:84:c4:f2:9c:4b:8d:96:c6:7f:46:5f:
         5b:37:3c:46:f2:24:21:c6:14:6f:c5:0c:7b:be:76:a8:38:51:
         de:76:11:17:51:a1:de:d2:9c:66:da:58:3c:e8:ff:8d:db:59:
         0b:cd:78:f6:26:ff:49:6e:51:4d:d4:4c:36:1e:f0:94:cb:79:
         f2:86:8b:13:5c:3d:d7:bd:d3:3b:53:ac:ff:71:5b:18:28:30:
         82:53:16:82:34:eb:8e:48:1a:8f:11:87:79:45:b5:9b:41:10:
         f8:a1:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:30:09 2026 by rpki-client