Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0efb1f5-1ec0-38e2-84d1-db1315c7a33e.roa
File:                     d0efb1f5-1ec0-38e2-84d1-db1315c7a33e.roa (raw, json)
Hash identifier:          ZipfrE5P5w6EjvPd1sVis71CZpHOpDPSNgk5o9LjkG0=
Subject key identifier:   C9:B2:BC:A0:CF:0E:6A:CF:F8:17:93:33:FF:87:1F:C7:30:0A:53:1A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05B6BB163DB084D4DBE900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0efb1f5-1ec0-38e2-84d1-db1315c7a33e.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1007:b070::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:b6:bb:16:3d:b0:84:d4:db:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=dc1baa5b-76ef-4815-a311-050e98d2c54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:83:a7:70:6b:2b:8a:24:21:c6:3b:3a:2b:
                    f4:52:a1:46:16:12:aa:b1:5e:66:9a:cf:f1:e1:50:
                    1b:e9:ea:50:31:14:7a:29:1d:f3:72:90:c5:cf:ff:
                    88:84:e7:8c:30:08:a7:e7:1a:74:71:d1:a4:ba:63:
                    2a:fd:10:5b:7c:67:71:b8:91:da:51:dd:20:9e:70:
                    f6:7f:83:8e:79:d9:a7:e3:97:47:63:3e:a7:e5:91:
                    c6:f0:8c:60:a5:0d:07:78:5b:82:3e:65:fd:93:d7:
                    d5:41:f8:08:0c:f9:85:8e:e8:2a:0f:1c:6d:30:77:
                    5b:df:6e:bc:b0:37:3c:ad:b0:9e:58:70:cc:43:18:
                    14:4e:fd:13:38:a5:e3:c9:70:78:80:6e:7b:d6:ca:
                    83:bb:10:12:18:61:79:84:a3:e2:06:9c:ff:31:a4:
                    70:73:78:ea:43:e7:32:a2:2a:f4:1a:e9:f9:16:af:
                    a8:d3:75:80:97:ab:50:b0:96:59:e7:53:45:a9:c6:
                    a7:33:12:f8:25:f3:38:c8:86:7f:11:fa:ba:fa:db:
                    b9:d8:a1:d6:43:f3:f8:31:20:77:2c:b4:61:95:4c:
                    e1:61:48:5a:17:e5:87:f2:cf:45:06:f9:03:44:c7:
                    22:51:b4:55:1f:7e:1a:fc:de:cf:69:f6:45:ea:6e:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B2:BC:A0:CF:0E:6A:CF:F8:17:93:33:FF:87:1F:C7:30:0A:53:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d0efb1f5-1ec0-38e2-84d1-db1315c7a33e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b070::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:50:38:54:14:94:97:83:f0:61:67:13:02:82:eb:88:8d:
         92:b0:39:4c:d2:92:c0:2d:1d:e2:9e:7f:0e:a2:fe:51:a6:b9:
         38:1a:25:e1:55:e3:3c:e5:cf:f8:f4:47:1a:14:59:24:2f:8a:
         bf:59:f9:be:69:c4:f2:d2:12:45:e9:a7:9a:15:cd:fc:32:b0:
         3d:3b:fc:9b:0d:2a:7d:be:94:8e:c9:0c:1d:13:e8:6f:00:35:
         a9:1d:c8:ce:63:f2:9a:fd:6b:57:91:1f:8a:7f:da:0c:5e:89:
         6c:8a:8f:04:1c:4d:49:b9:41:fc:28:68:f0:64:d3:9d:de:d9:
         5b:40:5b:72:04:64:0c:e5:a3:55:7c:16:b8:cb:d0:c1:90:1a:
         f9:43:9b:97:42:b8:49:d9:ff:a7:7f:11:79:28:46:e6:eb:46:
         3d:2a:bf:86:b4:4d:ac:b3:aa:d9:d0:27:24:50:ec:18:58:aa:
         04:e2:21:fd:29:57:1b:51:1e:93:4d:2b:6f:be:b4:81:98:be:
         f1:8a:be:53:46:c9:dd:48:de:bf:50:95:bf:f8:92:4e:f5:c6:
         e9:23:72:11:11:b7:e2:c9:be:c0:ed:4b:59:70:2d:39:f6:84:
         f7:be:85:7f:01:43:97:00:4a:35:71:de:94:69:87:a9:55:28:
         ff:d8:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:29 2026 by rpki-client