Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd729f6a-1f8b-3138-a64e-1fbcf2900839.roa
File:                     bd729f6a-1f8b-3138-a64e-1fbcf2900839.roa (raw, json)
Hash identifier:          Qy3JX/oajHx0A5K/WRs8g2WSMTOHR/MNY7g4O38/+tA=
Subject key identifier:   8D:67:B3:74:BE:64:C7:C6:BF:F9:10:4F:9C:B8:22:D4:57:33:D3:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE042B1256742295042B600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd729f6a-1f8b-3138-a64e-1fbcf2900839.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1012:9010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:42:b1:25:67:42:29:50:42:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=b7bcd6eb-d6c9-4d99-bcbf-0b321803a801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:58:08:37:17:60:49:18:ac:4b:a9:34:c3:
                    f6:33:6d:9c:92:0c:b8:a0:f3:cc:c6:3f:f7:37:66:
                    71:1f:5b:60:a4:a8:e6:53:b6:e8:5e:a1:78:13:68:
                    cd:dd:f6:3d:a9:af:88:6e:a8:2b:8f:06:d5:30:cd:
                    b2:90:08:10:f0:85:0b:e0:ae:13:46:62:51:d8:c3:
                    a8:98:c3:43:6f:3e:ca:9f:c1:d1:92:81:9d:bf:94:
                    0c:4a:1a:6d:dc:84:68:ab:8d:fe:1e:8d:69:fd:c7:
                    fe:53:03:b6:ee:01:26:fa:e6:ba:6b:62:23:f5:36:
                    1e:5a:57:4c:43:6f:54:81:54:2b:51:fc:68:3d:73:
                    6b:a7:73:fc:61:b2:c4:b6:2e:60:04:a4:75:27:86:
                    50:54:21:2d:44:4d:bc:f4:96:a5:45:5c:1f:3b:8c:
                    fd:e7:33:8e:65:39:5f:a5:0f:dc:83:82:fa:cd:28:
                    d0:f6:76:7d:e5:03:a7:65:f7:b7:66:09:4f:36:49:
                    55:24:8e:aa:03:02:91:18:82:7e:ea:c0:39:9e:6b:
                    c2:18:aa:0c:25:59:8d:54:4f:97:18:8d:1a:c1:ca:
                    19:e2:2b:51:48:26:ad:27:98:49:77:be:61:e0:25:
                    88:55:f4:2d:e3:36:f4:f4:77:76:70:b7:85:aa:41:
                    98:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:67:B3:74:BE:64:C7:C6:BF:F9:10:4F:9C:B8:22:D4:57:33:D3:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd729f6a-1f8b-3138-a64e-1fbcf2900839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:9010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7d:09:7a:0c:08:fb:18:f2:e7:19:90:ca:fb:d0:b2:bd:c8:
         59:27:33:e7:8b:c9:21:04:93:11:85:06:00:11:84:5d:cc:a2:
         c6:9e:ce:21:30:12:85:2e:c3:6b:25:da:9f:74:8d:90:8b:65:
         a5:ea:a6:b8:d5:9c:67:2f:29:17:ad:0b:01:7d:64:0d:02:ae:
         1b:df:4a:f2:75:ad:ca:42:e5:ce:53:d8:a0:6f:63:df:01:71:
         b3:89:e6:e5:6c:db:c0:e0:74:30:48:13:fe:20:2f:e7:88:cf:
         dc:3e:58:fe:de:79:eb:19:e4:a8:66:d7:f6:6c:18:ee:b4:e4:
         28:31:67:bd:54:03:60:f1:45:0a:f8:00:20:c9:9d:33:db:67:
         81:6b:b3:55:74:e2:8c:f1:09:cc:25:a7:df:f6:23:0c:3b:b6:
         e5:40:53:93:7a:ac:dd:c8:d6:2a:bd:52:c5:6a:e2:93:0c:26:
         21:4a:e1:be:8e:83:45:a4:1f:5e:54:db:ca:8f:c3:90:1b:bf:
         58:3c:4d:05:39:5f:09:bd:85:2c:9c:6b:88:56:7b:0f:bd:b9:
         cd:6e:80:23:00:1c:c5:61:b6:a9:28:83:37:7a:b1:a6:c6:b7:
         a4:07:bc:94:0a:a4:8c:4f:89:b8:60:09:36:23:1d:11:cc:3c:
         28:de:d9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:35:06 2026 by rpki-client