Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8ebf49c-32c8-394c-8acc-94e0e22f2241.roa
File:                     d8ebf49c-32c8-394c-8acc-94e0e22f2241.roa (raw, json)
Hash identifier:          6OVjt1ezuN8Bd0PgAz39M5sCUg7mLmaP3c5pjbR82vE=
Subject key identifier:   DD:A1:20:92:B1:DB:EF:19:ED:77:CA:2C:DE:6B:B1:A4:B5:33:8B:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05D9ECC8D689FD02DF2D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8ebf49c-32c8-394c-8acc-94e0e22f2241.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1004:a031::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:d9:ec:c8:d6:89:fd:02:df:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=64db0b98-5f31-4988-877c-dac2b47c36b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:56:59:bb:7e:b7:78:bb:35:2e:53:0e:db:
                    f9:1a:f0:a4:c6:b9:01:52:6c:92:37:e7:db:c3:45:
                    15:53:bd:31:af:3f:56:2e:24:10:3b:70:4d:e8:0e:
                    9b:88:72:8e:7b:c9:47:16:9c:eb:2f:e3:a5:7e:96:
                    de:e0:84:63:a6:10:f0:91:38:ca:ff:a6:e8:3b:17:
                    48:1e:91:18:da:63:cf:3e:14:b3:cc:e7:44:83:37:
                    a3:86:57:c4:cc:ef:a7:db:49:8a:60:ff:e9:a6:d2:
                    00:20:fa:a9:85:00:9f:a9:55:23:d8:d8:4e:d9:ad:
                    1a:f4:5e:9b:d3:1d:d1:12:b3:2c:a6:39:95:f5:f4:
                    b2:7a:3a:af:01:1a:5f:ca:4d:8b:69:49:47:6e:60:
                    77:30:80:2a:0f:df:65:2c:a5:e4:60:54:0d:16:a1:
                    75:60:f1:37:f6:70:11:e2:27:f8:92:bc:00:a1:bb:
                    dd:00:ca:e5:68:93:50:08:27:b8:9e:02:ad:68:07:
                    c9:cf:dc:57:53:eb:17:ed:a1:65:74:df:a5:c6:1f:
                    d5:8f:2b:dc:26:3e:96:88:bf:d4:64:4f:19:b6:52:
                    b6:51:22:cc:91:58:e5:47:45:77:72:01:3a:bb:ea:
                    c3:f0:f5:19:37:59:c2:14:72:29:4b:15:7d:0e:b5:
                    66:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A1:20:92:B1:DB:EF:19:ED:77:CA:2C:DE:6B:B1:A4:B5:33:8B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d8ebf49c-32c8-394c-8acc-94e0e22f2241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a031::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:28:a8:c6:4a:56:26:4f:61:53:2e:3b:ff:2d:de:c4:0b:57:
         89:9c:69:49:06:f6:3f:03:5e:89:21:be:b3:d2:ad:17:fa:db:
         96:26:77:2b:22:f6:8a:06:a2:1a:01:80:65:05:5b:31:81:50:
         83:1e:82:7c:82:b8:f6:c7:6c:77:66:69:19:31:f6:0b:ef:9d:
         c2:b4:c1:9f:58:70:34:d1:42:66:0c:52:d9:dc:ca:e0:77:b9:
         31:c1:13:a7:ac:d1:33:1a:c9:0a:65:4d:d5:aa:a0:20:9d:15:
         e1:7f:8b:2c:d7:e0:d0:1a:f1:13:c4:83:17:81:98:e1:44:b9:
         87:e9:f7:26:f5:c7:96:39:76:c3:ab:69:e1:5c:ca:ee:a9:dd:
         07:6d:f9:e9:89:5f:53:9f:d3:aa:6a:12:6d:bd:66:85:e2:49:
         e2:58:78:91:fb:37:a5:b4:e3:2e:9f:db:60:f5:66:68:c4:75:
         20:68:de:bf:a8:8d:c1:cf:9d:2d:e8:b4:74:43:3e:4f:bc:d9:
         3e:0f:43:10:71:32:a9:27:db:23:5f:63:4b:66:33:a6:f1:72:
         b0:99:6a:f7:0d:2e:a7:de:89:64:a1:df:50:a7:82:ae:fc:ab:
         12:56:56:88:62:d7:57:93:a9:db:94:92:49:13:93:df:93:f3:
         7b:be:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:34:57 2026 by rpki-client