Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1af4dfb-5275-3a8f-a51e-bc4bfc1ad4c9.roa
File:                     a1af4dfb-5275-3a8f-a51e-bc4bfc1ad4c9.roa (raw, json)
Hash identifier:          5qSlmR70M6DINL3NJMPA2iSCQaERXv9EdvMFcxJb0XE=
Subject key identifier:   F0:7A:3D:9F:1B:79:92:D7:8E:85:96:BD:70:4B:41:93:9D:D9:A1:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05DCFDBF5365AE0B663A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1af4dfb-5275-3a8f-a51e-bc4bfc1ad4c9.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1008:d030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:dc:fd:bf:53:65:ae:0b:66:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=a75d5eab-2af3-4040-b99e-d2e6136ee89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:07:ba:ba:9f:80:90:9c:5e:05:ad:f9:69:a9:
                    01:29:92:c8:b4:f0:33:85:1b:d9:79:96:c1:4d:79:
                    38:1d:de:1d:f5:ca:07:d6:58:6b:f3:7f:d5:a3:94:
                    3d:40:2d:6f:4a:cc:0b:9b:ba:03:6f:74:ae:29:b9:
                    ce:41:43:95:55:a9:37:03:a7:09:3a:cc:14:3c:ec:
                    03:b5:32:d7:77:ae:c2:a8:80:9e:38:9c:9f:10:b5:
                    12:db:02:be:28:ee:1a:a8:72:2d:49:e7:55:78:2a:
                    c8:05:11:7a:87:0b:20:a4:3e:ac:da:3a:30:ae:bf:
                    26:94:59:c2:5e:04:f3:91:cb:85:c7:d4:7f:3b:6b:
                    86:09:fe:fc:c1:ea:e6:a3:88:72:81:cf:dc:bb:51:
                    17:c1:89:21:05:5f:04:96:69:67:3e:c6:b3:0d:9d:
                    d1:88:d1:e2:26:21:0d:67:11:83:e0:f0:fe:1a:5d:
                    69:a9:bd:c2:b4:48:c9:c3:26:75:8a:9f:3b:0d:0a:
                    f1:22:91:8f:5b:6d:fa:02:d1:b1:f1:e6:57:8b:1d:
                    99:b6:b8:c8:b8:f2:3d:6a:62:48:dc:de:70:1c:e5:
                    73:ab:64:4c:9f:ef:62:a4:f7:6d:0d:d4:89:3a:02:
                    2e:fd:71:8b:8f:c2:63:b0:1a:eb:dd:29:5a:60:93:
                    23:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7A:3D:9F:1B:79:92:D7:8E:85:96:BD:70:4B:41:93:9D:D9:A1:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1af4dfb-5275-3a8f-a51e-bc4bfc1ad4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:d030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:68:8f:5f:eb:86:8d:6b:c1:97:40:bc:6f:6e:38:cb:ca:f6:
         e5:71:7d:fa:4c:26:3a:e8:d5:9e:f8:a4:08:c4:e6:41:d9:99:
         2f:d9:21:b0:5a:b0:9a:8e:ef:56:7c:b7:af:18:e1:2a:e7:f7:
         23:c4:67:dc:4b:34:c2:5f:8e:15:9a:3b:79:51:b5:3e:a7:87:
         a1:73:1f:a9:10:51:0e:a0:79:9e:23:00:23:a9:8c:bb:6d:68:
         23:5f:3d:79:e9:c7:b8:0f:7c:af:a3:cd:cd:05:b4:8c:05:7b:
         0a:30:a4:71:29:66:d7:04:51:b3:44:4c:52:e4:ef:84:77:5d:
         71:0b:50:b9:10:f3:cb:46:81:fb:63:14:65:4c:31:fb:cf:8c:
         dd:14:f9:85:91:b9:5b:73:07:a7:f8:c3:00:dc:a7:1c:a7:e9:
         41:1d:75:89:ef:63:23:18:a9:0c:91:b1:10:2e:5a:fe:2c:60:
         68:23:01:bd:55:ad:61:3b:42:f1:b9:b2:e7:7d:01:f1:ca:4b:
         b0:f4:63:4c:1a:f3:e0:11:80:10:85:dd:29:d6:09:cb:b7:98:
         f8:4b:4a:43:d0:5d:5b:48:cd:06:f9:76:d8:e8:d7:ba:92:79:
         09:46:d3:a0:1c:73:69:c9:ab:15:9c:d8:c9:83:16:a8:de:bd:
         25:96:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:00:26 2026 by rpki-client