Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cabb51cf-3484-3889-b928-804fa7354b40.roa
File:                     cabb51cf-3484-3889-b928-804fa7354b40.roa (raw, json)
Hash identifier:          4wn19coHZG02lpUmvtykTvqa7fSdaKs0r8thkiBC+Is=
Subject key identifier:   F8:9D:DC:1C:D3:7D:DF:89:DD:40:B5:92:2E:09:12:8D:15:26:46:1E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D1F4A3AD7761ED7287444A680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cabb51cf-3484-3889-b928-804fa7354b40.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:a118::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:3a:d7:76:1e:d7:28:74:44:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=e11a2b9b-7fac-4b7b-881f-65b03444f344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0a:f6:7c:5b:1d:b8:02:59:86:3e:5f:9c:6d:
                    57:b8:dd:0a:58:c3:3b:0c:77:7c:ef:d1:b4:7b:cd:
                    1e:8d:89:d3:97:b7:4c:a7:db:c8:41:0c:ef:42:a2:
                    c3:32:03:92:90:1e:4b:75:a4:4a:23:68:3d:87:71:
                    20:ef:bb:69:e8:7d:8e:cc:48:50:37:b6:28:d3:48:
                    8f:a0:ae:d5:59:df:0f:79:fa:68:cb:18:4c:eb:4e:
                    37:c3:ef:83:8b:31:01:82:9e:8e:3e:e7:9d:24:29:
                    8a:25:36:69:49:8f:29:55:5d:57:b2:7f:b4:eb:00:
                    6d:94:c5:93:12:83:2e:be:13:ec:b7:a5:a8:87:0e:
                    33:ae:74:74:20:7d:53:e1:4e:30:5d:2b:d0:75:c9:
                    66:39:77:ab:f4:c1:70:a5:ac:12:89:fa:96:f2:14:
                    b8:d4:28:f8:cd:e4:b5:0b:5f:6a:d5:b8:7d:41:cb:
                    87:b5:14:d4:f8:a3:ad:0b:bb:88:c5:20:5e:f6:a7:
                    b8:fa:0e:a3:bc:43:34:50:02:66:1d:22:14:e6:5c:
                    a9:a4:62:2e:ce:3a:95:f4:93:d6:ec:4a:e8:e7:63:
                    ea:9a:2f:5b:d5:7a:dc:a9:cb:e6:9c:ed:4e:2f:bf:
                    9d:aa:82:e8:fb:3d:ca:4b:fb:d6:a2:c0:f1:4b:df:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9D:DC:1C:D3:7D:DF:89:DD:40:B5:92:2E:09:12:8D:15:26:46:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cabb51cf-3484-3889-b928-804fa7354b40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a118::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:64:00:ce:28:fd:88:9d:f3:7a:16:d9:aa:fa:96:e4:2d:5c:
         04:99:db:05:de:72:5e:21:56:88:db:75:09:83:88:31:cb:98:
         df:75:6a:16:e9:70:1d:4c:b3:ac:e8:57:46:c5:9a:ba:24:9a:
         52:58:a9:88:13:79:0d:2f:50:93:d3:80:07:ad:e6:d0:a8:c9:
         d9:5e:57:db:6f:ba:05:ad:5c:38:c1:1e:13:7c:69:d0:18:00:
         7c:da:99:cb:ed:3c:2f:2a:2c:5b:22:98:80:05:9a:a4:f9:df:
         af:b9:96:8f:8a:36:1f:52:22:e5:e1:c1:2d:ca:85:e7:d1:a1:
         8b:07:6f:a3:18:62:0f:34:66:14:82:bd:40:7e:53:80:b1:f8:
         50:08:cc:a9:a9:79:1c:10:98:c7:a7:66:d4:a6:12:23:d0:ef:
         ed:79:b7:5b:2c:db:1c:97:63:70:c0:cc:c0:de:62:b8:13:93:
         3a:06:2e:24:fe:05:bb:d0:be:4d:fd:57:e7:f4:dd:57:69:72:
         c0:f7:f0:fb:e7:f1:52:d8:03:0a:68:3e:24:c0:81:05:a3:a0:
         a5:6e:31:e7:68:2a:71:36:15:01:d0:cf:6e:c6:35:63:d0:57:
         8c:ea:09:e4:74:30:2b:57:a0:22:b4:2d:cc:a9:af:ff:86:e0:
         41:f2:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:55:53 2026 by rpki-client