Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b920cd6-56ef-36e5-b6e9-8b1dd5910441.roa
File:                     9b920cd6-56ef-36e5-b6e9-8b1dd5910441.roa (raw, json)
Hash identifier:          fZ3M2Sw93Svy0TzxvxF+c9OL3rcXR3gg375Dr5zU+H8=
Subject key identifier:   92:95:A3:15:2A:CC:7E:03:70:F6:A6:68:85:E9:5C:F6:8C:3B:65:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE0440DAABD4B10C87F4880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b920cd6-56ef-36e5-b6e9-8b1dd5910441.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1012:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:44:0d:aa:bd:4b:10:c8:7f:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=667b8edf-8427-4dc1-9aef-ef9c7427ce0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:d0:35:38:f1:88:c2:9b:75:a1:1b:37:7d:
                    95:23:f0:9d:50:c3:3a:3f:ad:4e:15:be:d3:56:1a:
                    94:45:bf:12:0e:e5:28:c1:9f:e4:9a:3f:59:4a:76:
                    f1:ed:22:07:ba:91:a8:a5:99:f9:d3:51:a8:42:e4:
                    ea:94:4a:6e:22:0c:4d:05:99:4f:15:b7:ee:51:06:
                    42:1c:0b:f1:69:0e:87:06:e3:73:0e:86:07:81:3a:
                    c3:c8:46:87:14:25:1d:30:e9:50:b2:82:ed:10:46:
                    38:f3:34:fa:b8:aa:4c:aa:b4:1c:61:2a:c5:1e:43:
                    06:5e:83:43:14:05:ed:03:bf:3c:ab:95:8e:d4:e8:
                    cd:12:1f:e6:c4:28:87:00:b0:82:23:66:cf:2a:02:
                    57:33:f4:94:41:fa:91:32:20:e6:42:28:c4:c5:e0:
                    43:e3:03:9b:d6:74:03:b0:8f:97:40:ac:8e:3d:70:
                    69:3b:2c:8f:12:db:be:7f:55:d1:80:2d:6d:eb:a4:
                    02:2e:33:27:bf:de:d5:0a:27:3d:bc:f8:8b:a5:19:
                    3a:c9:4b:95:e9:74:90:26:77:70:c7:9a:2b:39:cd:
                    b9:3b:04:f5:1f:49:03:69:4c:2d:b6:28:39:54:d8:
                    65:be:fe:54:79:ad:83:26:92:bb:58:6c:cd:cd:38:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:95:A3:15:2A:CC:7E:03:70:F6:A6:68:85:E9:5C:F6:8C:3B:65:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b920cd6-56ef-36e5-b6e9-8b1dd5910441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:0f:b8:61:9b:63:8a:62:e8:0d:43:7e:58:b7:ea:02:bc:15:
         1f:4c:ee:12:fa:23:65:44:13:ee:34:5a:d4:0f:ff:c3:a3:d1:
         fd:9f:24:73:54:c1:9e:7e:f7:36:1e:4b:d4:73:0d:c7:0f:72:
         c5:f6:3d:fa:8e:21:bb:40:e1:3a:9a:32:d2:73:dc:4b:bd:34:
         2e:46:a0:a1:f1:12:a5:e6:9d:e3:19:94:9f:67:89:62:3e:1b:
         cc:d4:04:71:40:fb:83:83:3f:dd:0d:bc:67:05:09:16:98:40:
         ce:d4:d3:0f:18:97:4d:3a:33:9a:11:df:75:65:58:01:9e:ae:
         82:be:f1:61:64:0b:f8:eb:20:a2:84:1b:1f:bb:30:30:bd:20:
         bf:5a:d4:9a:d3:12:c3:a0:e3:ce:52:3e:6c:6b:73:b8:c0:a2:
         53:8e:1f:82:3a:69:fb:2d:c8:5a:f2:01:87:bb:e1:69:aa:5e:
         64:cf:c5:86:a7:29:9e:e7:45:bf:c6:21:e3:12:9d:61:ff:2e:
         a4:39:ce:9f:4e:4e:4f:e3:e9:9e:35:f8:33:22:ab:b5:6d:4a:
         cf:07:12:f9:9b:1c:d4:d0:61:b9:07:70:c5:53:b7:b2:7d:35:
         5d:d6:a2:2d:06:6c:a6:e4:75:d9:9c:34:50:8d:36:4b:c0:a4:
         03:9b:61:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:21 2026 by rpki-client