Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8ec4cf5-9011-3fd7-bfda-3595e41b0af0.roa
File:                     c8ec4cf5-9011-3fd7-bfda-3595e41b0af0.roa (raw, json)
Hash identifier:          9/E1y48zLEd4uLXCbnymScega1mE34nfslmOPWZc1yY=
Subject key identifier:   B5:4A:EA:CC:87:D7:3B:64:EA:78:F1:83:60:64:00:15:C0:DC:DB:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A073AD4854DFE4386C300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8ec4cf5-9011-3fd7-bfda-3595e41b0af0.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:100e:a128::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:07:3a:d4:85:4d:fe:43:86:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=d7dbeed2-a891-46a9-9332-35c25141678f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:99:5f:fc:60:3d:5c:3a:66:6d:4d:b0:e7:
                    ff:fd:51:e3:4d:02:d8:d4:3e:d7:02:0c:38:b5:62:
                    39:39:21:c5:ce:96:6a:ee:ff:04:41:7b:58:18:cf:
                    cc:52:aa:ba:e5:44:a2:26:23:7b:df:2b:d4:47:6d:
                    7e:76:61:47:8d:e3:46:68:54:ae:1f:d7:38:d0:36:
                    ea:83:ca:86:9a:3b:87:70:11:13:fc:5c:d6:13:98:
                    62:f9:2d:f4:18:3c:c9:96:57:2d:b3:26:f7:6e:5a:
                    8f:13:56:3d:e3:0f:be:f5:0b:9a:90:24:74:d4:0b:
                    4b:87:0a:ea:37:8b:d2:8c:19:15:ac:20:ea:42:d1:
                    0a:37:95:4d:1c:c8:5c:a6:aa:5b:09:c8:26:4c:78:
                    9d:40:02:90:e9:15:64:db:0a:ef:3b:9e:ef:c6:20:
                    c3:90:31:f0:a8:3d:ee:97:a7:47:3e:e6:49:ba:4a:
                    6c:4b:f1:06:e1:a4:d3:e4:dc:fa:c9:dd:13:5e:62:
                    e7:27:41:bc:d1:36:c5:cc:21:81:4d:58:37:85:4f:
                    6f:40:6f:b6:35:79:25:a3:57:4b:f5:e2:67:d3:3f:
                    41:4c:f8:65:d4:a9:45:f8:d7:27:e2:59:e9:18:64:
                    4f:33:f6:59:de:e3:ee:29:d3:a1:ca:9e:9a:aa:f5:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4A:EA:CC:87:D7:3B:64:EA:78:F1:83:60:64:00:15:C0:DC:DB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8ec4cf5-9011-3fd7-bfda-3595e41b0af0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a128::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4a:95:e0:66:8e:7f:d3:12:0d:16:72:3c:06:52:34:17:2f:
         d4:8d:87:1c:c9:fb:24:5f:3b:35:ed:91:37:8f:87:f5:c2:0e:
         ee:51:73:8b:eb:7f:ae:2b:41:e5:45:12:4f:92:bd:f6:ae:73:
         28:e1:68:74:52:3a:d5:88:ce:80:c5:f5:74:b8:17:b6:d4:8d:
         ba:9b:e7:ff:a8:eb:92:23:74:83:bd:94:bd:4a:4f:e0:bf:68:
         71:ba:24:cb:c8:7b:51:94:b3:0f:85:f0:47:c5:a6:be:99:8f:
         70:1e:e5:53:8b:48:87:d1:ce:1a:b7:9d:c7:cc:86:c1:a2:11:
         15:ca:d2:d8:d6:cb:fe:41:17:1a:cb:a4:d5:a6:a7:63:4c:cb:
         66:bf:b2:35:12:d0:03:4a:51:f4:64:d9:2d:46:5c:f2:89:88:
         68:db:ec:54:52:15:35:be:ab:27:75:0f:3d:fa:6d:4e:0c:79:
         5b:e9:bb:58:9c:d2:db:1d:fd:42:f4:07:ce:36:ac:02:7e:f5:
         13:90:38:3f:6a:2a:af:60:9b:0c:d2:d7:dd:ea:f6:5b:ff:dd:
         1d:81:91:72:71:e7:10:46:c7:a9:77:89:c7:0c:97:63:c2:d7:
         ce:74:76:2b:c9:47:24:3b:58:3c:9c:c0:2f:40:1e:80:69:71:
         ae:1c:84:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:18 2026 by rpki-client