Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95c1ab28-4d5c-3c60-8c09-25f816d04350.roa
File:                     95c1ab28-4d5c-3c60-8c09-25f816d04350.roa (raw, json)
Hash identifier:          duFdwqFejoo/58HBIjvtqRbq3r2tpAvC2YDKZlSzgns=
Subject key identifier:   EE:9E:2E:B9:09:1E:3F:DD:27:02:64:11:4C:BB:B0:71:1F:D4:6C:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A0307DA096A1E3B39DB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95c1ab28-4d5c-3c60-8c09-25f816d04350.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:a818::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:03:07:da:09:6a:1e:3b:39:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=bdbbde17-e6c6-48e0-b30d-56dc7ab04138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a5:88:c2:72:1a:36:66:4d:56:9d:41:13:07:
                    71:8a:b6:64:17:1c:cc:f5:09:01:fc:4d:73:b8:af:
                    30:6f:05:db:ec:0d:e5:a1:93:ea:dc:b6:c1:ff:50:
                    a4:6d:f9:90:98:a4:aa:e3:84:e4:36:26:b3:41:97:
                    28:3c:b3:a6:18:55:d8:0c:3e:e2:77:af:81:e0:62:
                    f6:95:8e:82:64:13:61:79:a9:14:00:ea:33:82:c1:
                    a4:55:b1:72:80:4b:e5:29:f1:dd:9f:18:56:d5:6c:
                    6a:7d:9d:96:0e:f8:37:63:ea:33:99:65:90:02:4c:
                    69:f6:32:77:ee:ec:e0:c7:ed:09:a5:5b:28:e0:70:
                    c9:bd:af:4c:69:db:4b:10:94:cd:d2:71:df:7e:f9:
                    98:71:a4:17:10:20:18:4a:f3:b3:dc:e1:e1:85:44:
                    16:35:69:e2:39:c6:f2:58:d0:d0:0e:da:32:96:a8:
                    e4:94:c9:13:a6:b8:90:ff:5e:8a:66:3e:f4:c6:4c:
                    09:b2:c3:fd:eb:f2:f7:9c:8b:33:fb:68:e0:22:16:
                    13:3b:3f:5e:69:07:33:b1:3b:73:55:da:d5:e4:58:
                    92:68:25:22:9d:12:18:7d:f5:ff:b4:cb:67:5a:d5:
                    39:07:50:e9:ab:72:89:88:9f:5b:25:3f:1e:1a:ff:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:2E:B9:09:1E:3F:DD:27:02:64:11:4C:BB:B0:71:1F:D4:6C:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95c1ab28-4d5c-3c60-8c09-25f816d04350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a818::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:45:2a:d3:32:2b:4f:42:ee:f2:7b:14:73:79:55:be:d5:3b:
         53:99:df:a6:61:15:f7:04:eb:33:24:c9:7a:cc:0d:81:10:62:
         a5:34:5f:9a:69:47:63:5e:cf:de:cd:3c:10:1c:61:11:c8:2d:
         d6:51:83:20:a2:59:64:97:ff:31:54:d8:4e:31:f7:ed:8e:b1:
         d2:9b:45:10:dd:f4:41:18:24:c9:d3:aa:e5:c6:98:ca:a2:61:
         1f:33:cf:ae:54:d2:d5:dc:6c:1b:56:95:20:bc:2b:a5:f6:f4:
         bb:57:a8:9d:bb:59:b9:b5:da:62:2c:69:a3:c1:b5:6e:66:36:
         fc:bf:ab:f0:b5:60:d8:67:64:55:54:6d:aa:ce:79:ba:47:56:
         50:47:f9:af:c1:90:35:24:94:75:c5:91:e5:0e:5d:2d:3b:17:
         e5:26:d7:f4:18:55:c5:3e:9c:ce:7d:6a:59:30:88:1d:cf:e7:
         cf:42:3d:87:75:99:05:3a:3e:d0:d2:02:9a:2d:bd:de:8a:3e:
         3d:87:3b:37:67:49:b4:52:a4:51:02:15:9a:3a:3a:5b:14:2f:
         48:7a:ed:fa:55:4e:6b:02:8f:71:ce:7b:f6:1b:ef:93:72:4f:
         1a:f8:07:36:d7:1a:4b:23:06:ba:14:83:db:ec:b3:d3:7f:98:
         a9:5e:f4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:28:19 2026 by rpki-client