Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c28c7326-31fc-30ea-9d82-47123b36efd8.roa
File:                     c28c7326-31fc-30ea-9d82-47123b36efd8.roa (raw, json)
Hash identifier:          171+qWJro2YCQF1FefNjjLZCEQZf28R269FgV6u75JU=
Subject key identifier:   1A:83:18:63:CB:BB:8C:B6:23:60:EC:D3:8D:C9:7B:C9:42:EF:A1:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05B03CF4B32DA35A01C0FC
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c28c7326-31fc-30ea-9d82-47123b36efd8.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1003:a810::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:b0:3c:f4:b3:2d:a3:5a:01:c0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=613f71a3-f3a9-4b3f-a8a7-c3fb626c0787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:5e:8c:01:2e:bd:32:d8:e9:b0:4d:98:6d:
                    f9:cb:68:94:f2:8a:68:4c:ba:57:5a:cc:62:1f:b4:
                    00:0e:50:37:b2:cf:2f:bf:50:d6:6f:7c:a8:9c:9c:
                    4d:50:69:3f:c8:0e:19:2a:d3:a1:32:72:66:83:cf:
                    9c:70:0a:21:4b:53:51:52:85:f9:e4:29:c2:4f:65:
                    ff:f7:78:bb:0c:08:f2:32:3c:3d:d8:2d:12:9f:f8:
                    f8:83:59:ef:1b:52:25:ac:76:33:b4:02:4d:ae:bc:
                    50:46:ba:34:58:75:91:ec:41:25:90:b2:46:7c:6d:
                    54:0c:6f:b7:64:f9:e9:94:b7:11:78:78:9b:c4:d4:
                    34:80:70:d3:8b:59:dd:73:fd:02:45:80:9b:fb:81:
                    dc:2c:65:47:33:01:89:41:70:dd:b6:22:9a:41:97:
                    94:6b:b0:c2:10:31:8d:a4:45:74:1a:ec:b7:6d:15:
                    8b:7a:d7:9d:f6:ce:a4:89:34:b4:ee:61:b9:be:a3:
                    95:86:a8:90:da:b8:aa:0b:57:58:0b:61:51:81:7a:
                    6a:2a:1d:05:83:f2:05:bf:0f:42:df:89:2a:d5:3d:
                    f2:d8:79:f4:91:ee:a5:8d:c0:89:9b:29:69:db:28:
                    de:84:08:7d:2b:6f:79:3e:c7:3a:47:1c:75:ee:05:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:83:18:63:CB:BB:8C:B6:23:60:EC:D3:8D:C9:7B:C9:42:EF:A1:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c28c7326-31fc-30ea-9d82-47123b36efd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a810::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:45:d4:12:28:74:c8:90:24:40:82:b9:51:c0:7c:eb:ff:4e:
         18:b8:ee:2e:6e:ac:ef:2c:b8:10:71:06:33:0d:4b:82:bd:f6:
         d8:c1:a4:a8:a3:40:4a:9e:bc:50:46:cf:63:87:3e:48:23:db:
         bf:b6:ab:9e:2f:e7:ae:26:a7:2a:a5:3d:e3:18:38:77:61:51:
         7a:6b:02:2a:9d:21:c2:1b:35:64:14:24:b0:2f:77:e4:ca:37:
         a8:41:56:68:65:b1:6f:74:b4:81:51:4f:00:ed:82:3a:0a:8b:
         c7:02:52:ee:be:06:1c:2a:03:23:85:e2:14:e8:3c:d9:41:fd:
         31:6e:46:6e:26:d5:83:76:0b:91:1c:67:98:a3:9b:1a:3e:f8:
         93:3f:2d:45:1b:03:93:4a:92:67:79:57:e7:1d:38:ff:4c:42:
         0a:41:8d:f2:2d:85:fb:07:03:a5:2f:bc:35:ed:67:c1:fd:a3:
         ba:f6:92:58:d0:87:b0:44:5e:13:a0:ec:0e:6a:0a:08:6d:a6:
         aa:73:4a:a5:af:3d:e2:a1:de:01:28:d7:1d:df:10:24:74:b6:
         75:fd:45:47:c7:d5:c5:a8:3d:8d:79:df:dc:92:be:b9:d1:bf:
         e2:fd:7a:78:3c:c2:9d:ff:53:a7:aa:d5:1f:79:b8:01:4f:3b:
         c6:86:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:45:36 2026 by rpki-client