Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c986496c-d42b-3e1b-88e8-d939f719bd45.roa
File:                     c986496c-d42b-3e1b-88e8-d939f719bd45.roa (raw, json)
Hash identifier:          nXwL8MN1ZaB2TjHpzjzZHKY9E/lCwKG7d5FLvtIgXe0=
Subject key identifier:   F8:90:1D:DB:31:21:89:CF:29:C8:B5:C9:98:58:02:2D:2B:B1:EE:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D359FB7C98C17AECC8F09E6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c986496c-d42b-3e1b-88e8-d939f719bd45.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:1008:a034::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:b7:c9:8c:17:ae:cc:8f:09:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=08676a60-026b-44ce-ac61-686181f3f86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:75:04:62:0b:14:80:16:ee:08:b4:2a:62:
                    cf:8c:94:82:6f:a7:98:e3:21:e8:ac:ce:30:2e:f9:
                    2c:fc:4e:01:63:7f:68:9c:23:1c:1d:95:88:0d:8c:
                    13:f0:1a:33:5d:c8:a8:99:bc:37:a6:61:19:6b:ef:
                    61:bd:dc:77:c3:57:74:b1:5f:de:7c:18:8f:31:9e:
                    bc:d2:88:3e:95:bf:5a:0e:66:5b:16:0c:79:fa:dd:
                    67:0b:75:be:19:74:13:32:86:43:99:18:52:cb:72:
                    23:86:54:9b:ac:6f:59:29:e8:7e:cc:0a:8a:2f:af:
                    6b:3f:c3:04:7d:c7:19:1d:94:1b:c2:27:4c:85:0c:
                    80:5f:e4:be:66:4b:1c:40:6a:ab:d6:46:e2:87:78:
                    40:a9:5b:48:9c:fe:15:23:fe:22:ab:c7:21:66:ed:
                    1d:8e:05:68:0a:5f:d9:d3:ff:e7:0e:8f:ce:bb:73:
                    22:fe:dd:73:13:4f:10:0f:cd:fa:e2:7d:75:c6:90:
                    15:45:f9:9f:5e:6d:65:7f:b7:16:5a:87:1a:50:e4:
                    33:fb:ac:cf:c3:76:47:ea:b7:33:44:95:4c:21:71:
                    51:86:e9:5a:34:65:ba:ce:3d:1b:45:1e:d0:96:2c:
                    59:7d:a3:73:93:07:65:f3:0e:a0:9c:03:2d:40:cb:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:1D:DB:31:21:89:CF:29:C8:B5:C9:98:58:02:2D:2B:B1:EE:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c986496c-d42b-3e1b-88e8-d939f719bd45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:a034::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:26:5f:25:81:ee:7a:31:43:73:7d:8d:34:01:0b:d4:2d:
         e5:c6:e6:1d:77:16:80:3a:cc:bc:10:d9:06:b2:92:e4:4c:e9:
         56:84:7a:70:49:fd:f0:ef:db:89:35:ab:c6:ad:f9:1b:bf:2e:
         0c:91:48:c0:89:83:9e:8b:24:ac:53:11:5f:c8:5a:89:f5:17:
         66:9e:b8:fd:50:e2:e0:c7:d7:d8:66:cf:c9:05:4d:cc:9d:4a:
         be:33:e3:2b:d7:26:16:f9:b8:95:f0:81:54:69:98:14:bf:3d:
         14:4b:ea:ab:67:ba:ca:0c:01:96:6e:a5:53:c8:7d:0d:97:96:
         3b:27:b4:ab:d5:19:99:5d:4e:f2:5b:45:02:84:5c:f0:25:a2:
         14:17:7f:72:6c:dc:17:0a:db:47:0c:53:82:92:51:2e:28:3e:
         42:a9:9d:f5:b9:15:62:b0:53:34:a2:70:25:57:c4:1d:74:ef:
         1b:c5:b7:2e:0c:2f:f1:2e:60:74:aa:a3:7b:22:f3:8f:a1:a9:
         3f:31:0e:72:69:d8:cb:e0:70:9d:22:b3:92:ab:2e:af:c6:66:
         a1:88:7c:f8:0e:02:16:77:b8:f3:35:3d:9f:48:95:23:45:8a:
         5f:ed:a2:6d:f7:fe:cb:e6:79:da:d6:f5:97:19:50:b0:20:a2:
         8d:02:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:35 2026 by rpki-client