Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0eeaa64-8318-3f47-9215-091ed186df18.roa
File:                     b0eeaa64-8318-3f47-9215-091ed186df18.roa (raw, json)
Hash identifier:          +Qo3dNjIOPBGFIdcbdLqdJ5o5ZgJkx9NMws1Z4LpV1E=
Subject key identifier:   F1:6C:72:C2:08:89:22:65:2E:9B:FB:E4:D6:AA:58:FE:C5:D8:55:DD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE03EB5F2FFE5569DD24948
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0eeaa64-8318-3f47-9215-091ed186df18.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1014:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:3e:b5:f2:ff:e5:56:9d:d2:49:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=dde4bf89-df72-4ae3-baf9-2113d1c2f29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c5:62:d5:62:79:1b:76:c7:31:55:7d:33:83:
                    52:da:d9:43:a5:fc:2b:df:8f:9f:df:51:68:5f:33:
                    6e:a0:b4:85:32:75:39:00:bc:0f:d4:54:4e:ab:32:
                    5b:9b:b8:7d:bc:ac:d1:d7:52:13:e5:15:8a:7f:3a:
                    44:f0:04:82:c4:69:eb:22:cb:17:92:5f:db:f2:3c:
                    fe:8e:3c:61:be:32:0a:60:08:e7:44:8f:a0:1c:a8:
                    fd:bf:1d:c0:40:c6:d8:d9:ca:11:8d:28:78:27:49:
                    59:9a:27:a1:14:85:8c:ce:5a:19:9e:d2:5c:da:6f:
                    a5:f0:5d:2e:67:db:28:5f:f7:0d:dc:36:39:47:34:
                    a6:9c:21:ac:49:8d:8e:67:c3:47:aa:29:19:80:6e:
                    2f:4f:fe:9a:62:38:f1:ff:1b:e1:e8:6e:73:c4:20:
                    f8:2e:c1:19:be:4a:23:c1:57:9a:88:03:92:a9:79:
                    96:df:b7:b2:dc:d2:8f:2e:d9:c8:1b:29:5c:93:c2:
                    ad:5f:ef:64:e3:cf:35:1f:5a:a7:5a:2a:61:93:58:
                    01:a5:ed:3a:7f:ba:d6:6e:bf:a2:82:77:56:7f:99:
                    f5:e3:f6:1c:8a:ce:51:03:de:6c:b7:ad:4f:db:97:
                    97:8f:31:cf:1b:8a:db:0f:e1:bb:22:49:2b:0e:7b:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6C:72:C2:08:89:22:65:2E:9B:FB:E4:D6:AA:58:FE:C5:D8:55:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0eeaa64-8318-3f47-9215-091ed186df18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a1:b0:ca:a5:16:0a:a6:7e:c0:2f:81:f1:c1:bf:08:0b:0e:
         fc:a6:b0:84:55:5a:b5:32:de:14:9a:50:d3:e7:eb:c0:ff:62:
         85:bd:a8:94:1a:27:d4:f5:09:77:40:14:86:6c:7f:56:0a:a1:
         ca:54:60:f9:c1:4c:81:e8:c7:6c:9e:3b:02:ad:9d:76:13:11:
         0a:18:98:ae:85:e6:98:0a:fc:28:63:07:c1:c1:ca:2c:94:76:
         f1:20:8e:5a:f1:39:60:5a:1d:2f:7a:d2:01:de:b4:06:84:9d:
         6d:53:7c:8b:f8:4f:a0:f7:77:49:db:7d:bd:2f:67:00:fd:9c:
         1a:28:78:ec:61:d1:53:14:04:b5:42:81:a0:35:89:5b:f1:5a:
         d0:a2:9b:93:c9:c6:0c:54:db:99:09:5e:e9:72:89:c0:2f:c8:
         65:a3:7f:a0:84:26:a0:42:c1:54:c2:d8:f6:66:89:cf:b3:73:
         38:70:10:5d:b8:21:69:80:5a:25:0a:f1:c6:3c:0f:66:d2:6d:
         26:af:6f:d3:08:3a:f0:2c:5d:8f:f5:95:38:b5:53:d9:a7:10:
         81:f1:cb:2e:e7:f4:cd:00:31:f3:5f:fa:7d:8b:16:45:8c:14:
         4b:d6:41:e9:b4:d4:b9:5a:9f:e0:d6:fc:47:82:0a:af:5e:f7:
         2b:51:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:22 2026 by rpki-client