Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de591f85-7a9b-391e-bfe2-55ee6efb7047.roa
File:                     de591f85-7a9b-391e-bfe2-55ee6efb7047.roa (raw, json)
Hash identifier:          S9rAauDiuDnScSOTDq/cv3y2RN9xXRtruRpiuVY7vBw=
Subject key identifier:   B6:3D:6E:88:44:38:54:4A:82:30:6F:9D:E8:05:8F:E7:9F:26:07:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05D87A83BD74DAAAEF2520
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de591f85-7a9b-391e-bfe2-55ee6efb7047.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1003:b1d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:d8:7a:83:bd:74:da:aa:ef:25:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=97eb3c39-ab54-4d11-83c0-08ef9e3fe7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:37:89:79:59:30:19:19:17:56:d8:37:4d:
                    00:00:4a:74:c9:0d:50:af:65:a4:c8:d2:69:16:9d:
                    43:77:16:dc:f8:2e:09:91:a5:e7:ab:87:94:1e:57:
                    29:12:ba:5f:a4:c0:26:fc:8e:2c:09:76:3e:ad:12:
                    19:28:dd:f9:be:cf:aa:72:12:ff:72:03:ca:a3:2e:
                    e8:7f:c3:60:d6:d7:eb:35:6c:b9:42:65:55:9e:cb:
                    ee:de:dd:5c:55:a9:c0:87:f2:c3:dc:da:9f:8e:48:
                    14:69:22:53:81:ab:b1:aa:05:d2:1c:b1:dc:53:49:
                    6c:eb:f9:17:7f:e0:3e:2b:48:53:23:2c:29:8b:f2:
                    46:b1:89:17:ac:b4:d2:e0:86:8c:b3:d3:4a:ed:54:
                    e1:2c:c6:4c:e4:1e:82:a9:39:0c:57:24:13:5f:97:
                    18:65:dd:15:3d:f3:57:ed:07:ff:a9:b6:03:e0:c5:
                    de:dd:be:81:3f:dd:e1:21:cc:64:ba:1e:0c:b0:8e:
                    4a:f5:a7:ff:8d:cd:77:ed:cc:a0:2d:4c:d9:a3:b6:
                    23:e0:cd:8f:41:b4:ce:86:22:1a:90:90:98:44:55:
                    d1:5b:a3:55:b9:3c:7c:97:16:eb:23:73:f3:b9:4e:
                    3d:76:98:ff:09:ce:ff:83:42:f0:86:e8:ab:50:71:
                    94:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3D:6E:88:44:38:54:4A:82:30:6F:9D:E8:05:8F:E7:9F:26:07:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de591f85-7a9b-391e-bfe2-55ee6efb7047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:3d:3a:41:52:3f:ac:c1:c6:9c:e1:27:0f:e6:51:84:5a:aa:
         ea:00:b4:da:73:d4:f1:e7:6a:30:5a:0c:16:77:16:9b:74:4a:
         83:93:70:55:5a:21:d9:5d:3b:9a:ab:03:65:74:a5:14:bb:a7:
         05:1d:43:bb:5b:e9:58:37:0a:b2:ef:3c:f6:03:89:81:64:18:
         c7:68:3b:8e:8e:48:1b:26:a5:d8:1a:c9:1e:b9:3a:3f:b8:ec:
         16:83:29:2d:dc:98:3d:e8:d3:3d:f7:ce:e0:69:f0:23:a1:a0:
         a6:67:e0:09:e7:25:cc:e6:13:e5:d6:48:61:1b:65:6a:2e:d7:
         fb:e2:e0:69:21:26:0f:58:dd:af:98:7c:7a:c8:d0:6b:2d:06:
         48:3f:9b:19:e0:1d:41:6e:96:0d:04:ea:51:a6:18:94:06:b7:
         0c:33:38:f0:68:bc:97:10:7f:a1:2f:55:21:05:04:74:a7:6e:
         4e:f4:32:27:ed:21:c7:68:2a:0c:8f:34:5d:05:22:9d:69:0a:
         b7:d7:55:7f:ea:2e:f5:e1:82:81:17:ab:44:8d:be:99:e6:7e:
         82:26:35:5b:40:d9:bf:46:27:59:16:26:9a:0c:2b:b6:d4:46:
         43:4b:7c:0a:61:d1:11:13:53:cc:42:7b:f4:76:3d:72:bc:85:
         ce:09:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:38:41 2026 by rpki-client