Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9067e1-48c3-38e3-bba3-ad430575e1e4.roa
File:                     bd9067e1-48c3-38e3-bba3-ad430575e1e4.roa (raw, json)
Hash identifier:          YweJrTpezBq+76iO0wp0vE29gnDFJvs+Ni/y8TdGEsE=
Subject key identifier:   85:46:09:5A:FA:E9:3F:96:68:A5:99:80:5B:E9:BA:92:DA:43:DC:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBA3AF2996561F153362D0400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9067e1-48c3-38e3-bba3-ad430575e1e4.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     6167
IP address blocks:        2600:1009:a025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:f2:99:65:61:f1:53:36:2d:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=afb1de17-538d-41bc-ab7e-49762a0a9fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:04:b3:6b:28:c1:31:c6:ec:0d:b6:a2:c1:
                    cd:cd:49:ec:f6:05:7c:77:6c:50:8e:c9:4d:8f:65:
                    21:26:d5:9f:4f:f1:86:a9:43:d2:26:41:74:12:97:
                    a1:80:05:da:f6:5b:76:68:38:c5:6a:7a:9b:56:14:
                    28:4e:f0:b2:4a:a8:f6:7c:dc:a7:9d:4a:62:e3:fa:
                    dd:b6:c8:09:99:d0:da:73:48:bd:88:e3:a0:2f:13:
                    83:f9:55:d7:96:42:89:fe:0b:5e:63:1a:58:ba:f5:
                    5e:ed:8e:5e:7a:03:f7:4b:0f:23:08:55:52:5f:96:
                    4f:69:5c:b6:f9:1b:6c:4a:5a:33:13:8c:03:20:ed:
                    e4:d2:ec:48:85:68:36:39:2c:c9:67:fe:1a:c2:df:
                    eb:19:b7:55:7b:08:f9:4a:c9:02:f0:81:83:9e:6a:
                    54:de:41:e9:95:91:b8:2e:5d:90:2c:39:05:bd:3d:
                    7b:ed:fd:4a:70:03:1d:88:af:75:ba:4d:ab:0b:fc:
                    b6:a9:d0:e8:52:4b:ab:99:da:e9:d1:4b:97:a4:c4:
                    c9:9e:9a:53:c6:fd:b5:14:d9:bc:70:f8:40:2f:11:
                    62:ab:b5:ac:4d:22:7d:65:24:2d:c3:3f:fb:26:60:
                    b5:99:e4:6f:77:9f:3e:ba:d4:5f:cc:fc:c6:44:d4:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:46:09:5A:FA:E9:3F:96:68:A5:99:80:5B:E9:BA:92:DA:43:DC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9067e1-48c3-38e3-bba3-ad430575e1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:12:91:82:0f:d7:36:bd:3f:8d:1c:5e:a3:d3:b4:14:d9:6d:
         8e:0e:a5:f8:50:4a:7f:14:f1:87:58:42:15:bb:56:76:d1:53:
         d3:f6:66:ed:09:47:24:f4:1e:bd:3c:1c:ce:5d:b5:53:61:80:
         90:15:2a:04:82:de:3f:68:e5:67:bc:69:b1:18:bc:5a:aa:18:
         c4:45:37:96:9a:71:37:f5:1e:a0:16:db:8c:62:6e:a6:fe:3d:
         89:8c:52:e7:5c:49:df:ee:ca:a6:9c:df:4a:38:46:6b:1b:59:
         10:6c:3e:02:07:67:e3:a2:b6:b4:ff:3a:32:c3:71:4b:dc:b0:
         91:e7:7d:be:13:ee:74:12:a3:d4:51:f2:59:6b:c2:67:44:be:
         5a:70:b8:25:df:e7:0d:b7:cf:5c:49:6e:77:e9:bc:c0:15:a1:
         93:26:e2:78:8a:e9:a9:56:57:a4:20:31:00:8e:6f:41:24:92:
         95:9e:2b:68:97:3a:07:b7:96:2b:42:37:60:c3:c1:8b:ec:77:
         5b:aa:66:ed:38:a7:5d:e2:bd:cd:ab:92:08:cc:a6:8f:04:d7:
         36:61:5d:cd:0c:08:54:47:0f:06:54:92:1b:fb:0a:1a:f6:8f:
         f5:4f:ea:5c:41:22:0e:8b:b8:77:94:61:c0:f3:8b:c8:3e:6c:
         d2:02:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:51:25 2026 by rpki-client