Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3bd7fb-dabc-338a-a5fe-ae66c15f9e27.roa
File:                     ae3bd7fb-dabc-338a-a5fe-ae66c15f9e27.roa (raw, json)
Hash identifier:          wITmgxsL/yA1IKgjIJWIF5d8Vun2NrFF1bFXSgXHQq8=
Subject key identifier:   6E:6B:1F:DB:2B:19:68:F9:52:80:7A:3A:72:C0:96:CE:8C:51:54:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE04ADDA18ED6B5923F3E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3bd7fb-dabc-338a-a5fe-ae66c15f9e27.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1017:b4c8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4a:dd:a1:8e:d6:b5:92:3f:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=72ab8192-0237-4f6b-a126-0bab5149aa89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:30:34:3d:bd:bd:af:88:11:2b:0a:ad:05:
                    26:8f:e2:48:dc:47:87:9d:d9:11:89:3e:8a:41:28:
                    48:5a:04:e8:cd:57:12:19:ad:e5:9f:a8:18:f6:c7:
                    43:b7:84:ab:0a:8e:31:bc:5a:7d:c7:35:68:65:57:
                    43:73:63:9f:d5:b6:55:82:21:bb:c7:2f:73:4b:66:
                    3a:8f:fb:dc:39:62:3a:35:eb:7f:ec:b6:84:83:16:
                    47:60:d6:60:a1:c7:13:9f:86:af:0f:db:75:24:1a:
                    e9:5a:65:72:c5:10:b0:bb:11:26:da:0c:d5:25:ee:
                    d8:54:de:3a:23:7f:c6:c2:4e:80:dd:e9:cd:b7:94:
                    19:c1:14:67:62:45:3d:ae:16:48:ef:56:f5:66:5a:
                    62:d2:50:09:1c:de:ac:e8:64:ce:9e:e3:30:f6:90:
                    ac:1c:12:33:ad:1c:2e:1f:14:7f:fe:3a:a2:1f:e6:
                    e4:52:2e:88:cd:ca:ed:f5:cb:1b:f0:eb:69:c8:ad:
                    91:ac:c7:af:fb:de:22:52:55:45:ed:11:65:77:5d:
                    11:2d:4b:ef:35:7f:0e:8c:3e:df:8b:73:fc:68:a7:
                    7c:c6:77:a9:70:84:f9:53:a3:59:70:aa:69:3c:b0:
                    77:8b:56:15:bc:0d:66:f3:2c:7e:c0:bf:40:7f:46:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6B:1F:DB:2B:19:68:F9:52:80:7A:3A:72:C0:96:CE:8C:51:54:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae3bd7fb-dabc-338a-a5fe-ae66c15f9e27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b4c8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:79:9a:04:3f:d3:b5:ca:5c:23:dd:92:06:78:e3:24:3e:25:
         af:bc:94:0d:e1:23:be:62:a9:3a:ff:5c:9e:75:06:9c:4e:bf:
         8d:77:1f:52:c2:2d:6a:22:3e:51:95:26:53:c2:fd:a8:ab:9c:
         a7:c5:37:10:0a:54:ff:33:39:6a:4f:de:35:04:df:54:86:27:
         af:82:2e:aa:26:fa:31:31:af:ec:e0:95:8a:e5:6b:cc:cb:56:
         15:a2:91:b0:eb:46:8e:c6:f7:9b:2b:61:b1:a3:44:28:0b:1b:
         25:7a:c7:60:d8:67:06:ee:2d:89:ca:8a:38:bb:c6:dd:a7:ee:
         59:32:3b:b5:86:45:93:9c:ad:f7:22:b8:b0:93:d1:63:58:04:
         d7:e3:97:7c:d8:d2:1e:2e:18:c5:2a:4e:50:de:76:b8:78:53:
         37:75:d5:1e:ef:c5:a7:7e:fc:ac:2b:09:41:fe:13:46:e8:bb:
         e4:67:95:b7:d3:9d:cd:8c:6c:97:c7:8a:ae:6a:12:73:45:10:
         fa:7d:97:c6:e9:84:13:1f:c1:48:23:bb:3e:77:cb:bb:65:9f:
         39:41:ca:4a:b8:f5:c6:3a:84:8f:b3:d5:3b:6f:2a:85:e3:15:
         48:bf:c1:03:96:75:f3:95:ec:05:34:09:d2:35:28:90:47:00:
         0c:70:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:11 2026 by rpki-client