Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a266b7ce-2920-3636-af57-590849a7355d.roa
File:                     a266b7ce-2920-3636-af57-590849a7355d.roa (raw, json)
Hash identifier:          gBJA3fGsoae1B5s4EwVne8JHRiuwhG+HmzlIQtKPam0=
Subject key identifier:   D5:EF:C6:29:E9:93:0D:63:59:CB:26:FD:57:11:42:E0:82:65:E0:74
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A33EE92693FEFBF972CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a266b7ce-2920-3636-af57-590849a7355d.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1012:a030::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:33:ee:92:69:3f:ef:bf:97:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=bb94855b-2021-4c0a-9c22-27d0f5595842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:f4:2c:66:9e:fb:78:a9:99:72:cd:17:6c:
                    be:5a:51:75:c1:8a:7f:66:4a:ec:5c:a2:ad:4d:7d:
                    0c:1d:0d:d5:af:5a:38:b5:58:95:c1:a1:47:5f:a5:
                    a3:d0:01:c2:89:dc:80:33:8a:3e:cc:18:9b:83:4c:
                    66:8f:f7:0c:fb:b7:74:0c:f8:d1:0b:dc:24:b2:56:
                    01:c4:dd:ee:d1:a8:90:95:41:de:f4:d6:e3:a1:30:
                    ab:22:8d:30:40:1b:03:56:d3:06:54:42:3f:91:cf:
                    f5:79:ab:76:ed:a0:89:5e:c2:69:aa:31:a0:18:73:
                    84:89:c4:f2:4f:36:e4:b5:59:fd:75:9a:48:a9:fc:
                    a6:00:9e:27:7a:7b:46:95:bf:c7:f0:68:4e:fa:0e:
                    f7:00:66:c4:17:30:ce:7d:84:a5:3d:09:e7:70:7b:
                    5f:4d:5a:a2:d6:a3:55:a0:ab:42:c9:6b:b5:ec:9a:
                    3e:cc:90:94:f5:73:63:41:56:50:ff:91:ec:cf:8f:
                    a9:e6:03:f5:92:70:57:ef:7f:ba:a3:f9:1e:9a:da:
                    b6:c0:38:7d:60:3c:5c:ca:bb:23:5e:80:f6:64:9e:
                    9e:bb:14:e8:a3:96:1c:b7:70:89:d5:69:e4:f5:95:
                    40:8d:b5:ee:49:33:b9:18:ec:9f:86:06:a8:42:26:
                    9c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:C6:29:E9:93:0D:63:59:CB:26:FD:57:11:42:E0:82:65:E0:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a266b7ce-2920-3636-af57-590849a7355d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a030::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:60:5a:b6:91:e6:6d:3a:8a:fc:60:62:13:78:b1:28:f4:
         10:6a:93:0b:e7:8e:bd:aa:06:7f:4b:d2:f6:91:bc:ff:83:a9:
         ee:12:69:25:cd:de:17:35:50:b2:8b:8b:8d:2d:b9:ee:9e:4c:
         d6:93:fb:47:a0:07:bd:5f:f8:62:4e:6e:58:f6:68:09:58:63:
         ea:5b:ca:29:24:bc:e1:ec:e3:f6:30:c0:e8:a7:af:0d:ad:b4:
         7d:67:55:5d:fd:41:12:93:39:23:0e:7c:28:d7:26:18:e3:7f:
         ac:a0:9f:cf:7e:56:6b:11:a8:4b:28:43:a4:fb:b2:94:c8:08:
         44:a5:c4:0a:e8:b3:5d:77:00:03:15:62:81:6d:45:70:53:36:
         6d:7b:e8:b3:78:34:3b:4f:c9:b9:24:b9:0a:34:87:37:dc:63:
         32:ff:9e:fc:81:99:e2:3d:91:f8:28:65:2a:60:f9:6c:dd:1f:
         a5:70:b2:09:3e:a9:db:56:5d:c8:c9:1e:ce:d5:3f:21:1f:58:
         79:e3:b1:b6:d0:5f:5e:42:fc:e0:41:ed:3a:a3:1b:7c:e4:01:
         4b:9e:8f:cd:76:84:52:ca:f9:0f:b4:d5:e1:35:95:3b:64:9b:
         ef:3c:8b:2f:64:df:93:59:34:05:3b:fc:0b:cc:de:7f:77:8c:
         50:45:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:59:34 2026 by rpki-client