Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d71770b8-1889-3d1a-b66f-9fc7c3a1c959.roa
File:                     d71770b8-1889-3d1a-b66f-9fc7c3a1c959.roa (raw, json)
Hash identifier:          pOZJ3zsndNkgV52XWVvJYwkOdOf+76efPI8NjtrrtMg=
Subject key identifier:   9B:30:AE:58:2A:2A:32:F2:C1:CB:49:DE:BD:69:FF:52:EE:A4:62:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE04273DAF7CA86E5652540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d71770b8-1889-3d1a-b66f-9fc7c3a1c959.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:d010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:42:73:da:f7:ca:86:e5:65:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=10ab4319-aed2-47c8-a0cb-8f5a1f4a6109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7e:26:d4:10:c5:fc:e2:c3:8a:dd:80:8e:a4:
                    fd:26:24:ca:01:ee:af:ce:b3:79:d3:e3:50:10:d3:
                    06:00:13:17:94:b7:dd:18:fb:d7:0f:36:e1:93:96:
                    d3:a7:72:a3:2b:a4:55:81:80:97:2e:05:d6:e2:c1:
                    66:3b:0a:82:5e:69:bc:14:27:10:d7:bb:65:d8:bd:
                    ad:3d:82:89:34:b7:64:7a:2e:88:2d:55:00:e9:37:
                    05:62:94:fa:26:a9:bd:70:a7:aa:5d:48:ac:98:58:
                    9c:3c:19:84:0c:3b:eb:e9:cd:ac:d3:b9:83:21:9c:
                    9b:43:62:e7:15:12:d3:c2:93:f3:b5:e8:c5:46:6e:
                    e0:5b:b7:81:e9:c2:49:40:cd:29:f0:51:2a:6e:25:
                    8d:c1:29:61:ed:32:85:88:15:9f:7b:d5:60:a9:ab:
                    47:87:33:89:34:64:26:30:b8:85:91:aa:67:41:89:
                    0d:05:0b:c5:27:29:1d:3e:63:f2:5f:db:e1:68:2a:
                    f7:6d:95:3b:b1:ce:17:ba:32:9d:69:90:5d:82:4b:
                    d7:f9:50:1c:6a:eb:db:6a:e4:55:10:ec:dc:37:f1:
                    6c:fd:5c:d2:f2:6b:36:71:b0:a5:ca:95:06:24:07:
                    95:b2:05:1d:ab:3a:88:01:6b:96:47:94:ea:66:dd:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:30:AE:58:2A:2A:32:F2:C1:CB:49:DE:BD:69:FF:52:EE:A4:62:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d71770b8-1889-3d1a-b66f-9fc7c3a1c959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:d010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5a:4a:9c:fc:cc:bc:0c:90:de:c5:16:f9:7e:cd:25:4e:36:
         72:26:35:69:2b:b4:9b:cf:fc:9f:16:5c:a1:8a:1a:23:7f:fa:
         fe:35:d0:d0:e5:3e:2a:c5:72:06:50:91:f1:08:b3:76:a8:82:
         52:af:09:aa:a1:cf:26:b1:5f:cf:df:ae:67:7b:ce:e8:78:54:
         f7:db:07:b1:ac:0d:93:55:94:54:2d:43:bc:4d:cb:18:96:23:
         84:9c:3e:05:ef:f9:aa:9e:05:c6:b5:ef:33:00:21:66:d2:29:
         6e:9b:e8:27:71:b9:fb:19:29:aa:7b:fb:7a:b4:21:75:ae:18:
         84:8f:59:70:12:f0:67:4a:93:94:e2:f2:b3:5e:92:c6:92:c2:
         45:c3:a7:a4:ef:a5:05:aa:31:fb:7d:b7:dc:2c:75:81:38:3a:
         a8:68:e8:a2:a6:2d:fb:b7:41:0c:55:c5:28:7c:df:3a:03:3d:
         08:83:3b:b2:f0:f7:9c:f5:b6:b4:cd:76:18:9c:86:7b:6f:3e:
         d4:38:ef:50:89:dc:6e:ad:04:65:b2:32:68:9e:52:1e:d7:66:
         3d:68:b7:2c:a7:72:16:b7:3c:0d:95:d6:1e:2f:86:3d:e2:83:
         21:02:d3:56:be:ee:11:5b:7d:be:8b:26:b8:56:63:e1:b2:2d:
         e7:8d:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:20:01 2026 by rpki-client