Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9af1a2fb-9097-3645-819b-93b39f14d075.roa
File:                     9af1a2fb-9097-3645-819b-93b39f14d075.roa (raw, json)
Hash identifier:          pPRUsPpLboFlSVB6uj0zTVh53CalePYnRbO3vGrPYEs=
Subject key identifier:   72:CF:37:A6:31:16:5B:CB:FC:A7:83:A8:CE:D9:5D:F9:DD:C5:5D:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1172646BDB764BCFE8206000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9af1a2fb-9097-3645-819b-93b39f14d075.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:1010:b360::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:64:6b:db:76:4b:cf:e8:20:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=a1a5937d-ff3d-4d7a-95fb-645e3328b490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:a2:b9:f2:97:f8:7c:f2:42:af:00:07:83:
                    04:5e:bb:85:9c:f2:7e:e1:23:63:42:1f:c0:10:08:
                    96:02:aa:02:ff:20:3e:37:04:ed:e6:ad:29:12:4f:
                    78:99:0f:0b:db:ad:c6:cd:36:a4:fc:a3:66:bb:af:
                    f3:d5:2e:d8:90:b0:18:cb:21:46:31:fc:51:f9:f8:
                    7e:90:3b:65:3d:20:ed:17:f7:fd:68:ba:c7:f0:9f:
                    8c:03:e2:a7:16:b6:68:f9:66:79:54:1d:03:b1:c5:
                    46:45:ed:f5:ba:f1:f5:9f:a1:c9:bf:e2:eb:93:6b:
                    00:93:8b:86:a9:bc:ae:14:2e:b0:1c:67:88:3b:05:
                    a9:86:f3:d7:32:81:f2:63:28:4f:ed:ca:66:1f:2f:
                    fb:25:83:a3:1b:a8:c8:c3:a4:b4:bd:4b:d1:8b:5f:
                    d8:8c:f0:0e:ce:d0:de:9c:c4:82:5b:61:cc:c6:76:
                    35:c4:4e:74:9e:a9:73:86:67:a5:8a:49:2a:75:e8:
                    68:19:4b:01:da:0e:ac:7e:d6:0a:ea:d9:21:62:e2:
                    39:7b:26:18:33:03:a1:e9:2b:d0:34:2b:11:ae:f9:
                    a1:02:f7:b6:a4:c8:7a:9c:68:0e:61:e6:05:37:f6:
                    58:fb:8e:d2:dc:5f:b6:e3:d2:e9:a8:6d:28:33:2a:
                    d5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CF:37:A6:31:16:5B:CB:FC:A7:83:A8:CE:D9:5D:F9:DD:C5:5D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9af1a2fb-9097-3645-819b-93b39f14d075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b360::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:45:37:25:92:0f:cb:28:86:1f:1c:4f:3d:a9:4d:17:7c:70:
         5f:da:b2:78:15:26:ee:87:dc:e5:2c:35:35:53:7e:25:58:d3:
         a2:75:d1:f0:a2:b6:48:05:a8:a9:87:a6:a7:54:7a:22:48:96:
         8d:9a:bc:5b:2a:3c:f3:18:07:46:92:e1:18:ec:d5:fd:54:0f:
         c6:59:ac:ef:0c:1c:ad:9c:73:2b:67:a2:6d:e2:8d:bc:fc:fb:
         b3:fd:59:e0:f4:c1:aa:80:e1:78:03:8d:91:57:f1:34:d9:9f:
         b8:1b:61:9f:f8:cb:00:b3:f8:13:04:50:b6:43:1a:25:e3:7a:
         7e:a5:5f:dd:46:29:af:18:2b:fc:9c:a6:eb:a9:35:ef:8b:b6:
         e1:71:97:a9:bc:18:67:64:12:ec:85:a5:3a:9c:bd:70:34:d0:
         5d:8e:8a:9d:fe:e2:db:ad:fe:4a:ea:fb:bd:57:45:dd:99:58:
         0a:f9:9d:01:92:f0:25:4c:0c:74:02:b9:e3:3e:40:f4:86:d3:
         0a:f2:d1:27:6d:a4:e4:5a:74:42:ad:ba:28:37:31:8a:4c:1a:
         33:64:b2:19:e0:15:d8:3d:04:49:54:bb:6e:38:e2:62:f7:90:
         3b:5d:25:27:f0:ed:93:7a:17:27:1c:c4:5c:e6:86:0d:7e:97:
         20:7d:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:03 2026 by rpki-client