Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df7775c8-fd21-3a29-80b9-f914bc6537e6.roa
File:                     df7775c8-fd21-3a29-80b9-f914bc6537e6.roa (raw, json)
Hash identifier:          1wtJypcmvmv2gxG6IAZtihajYI6GDVjO0+cB3A8y4MQ=
Subject key identifier:   B0:07:83:39:07:98:E2:ED:9F:6C:DC:3A:E0:1C:7B:81:77:F9:9D:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05B63756B65178E3EB0500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df7775c8-fd21-3a29-80b9-f914bc6537e6.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1007:a011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:b6:37:56:b6:51:78:e3:eb:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=512d2943-a287-4121-81b6-e5321c9c2037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:19:07:86:a3:c0:64:c8:40:79:36:23:5c:ae:
                    74:e2:b4:4e:cc:62:90:3c:aa:07:63:49:12:55:98:
                    10:ef:a9:79:a5:0c:be:8c:7d:28:c6:70:58:84:30:
                    12:f9:a0:61:f4:03:7b:bc:c7:4d:62:32:6b:39:1c:
                    93:78:12:cc:2e:0f:14:19:2d:a0:31:5f:04:6e:3c:
                    9c:fa:96:56:db:e9:04:25:96:cf:ce:49:43:f7:57:
                    4d:7b:e8:c2:ac:d2:6b:04:60:9c:e4:d3:19:ea:ff:
                    91:9a:a6:c3:e1:31:b1:f4:a2:e3:8e:1d:ea:a6:dd:
                    7c:3d:54:c2:10:d9:bc:59:bb:c1:b0:c6:2f:ac:6d:
                    bc:72:fb:3f:43:2e:24:5f:e6:55:b5:b5:ad:71:64:
                    b0:67:a5:9c:4c:44:1b:e0:5a:05:d0:1d:8d:88:07:
                    cf:cc:6e:1a:a2:e3:e1:fd:fe:fb:fd:a4:3d:54:60:
                    f7:01:38:ca:5c:4d:08:ba:e1:74:21:b1:4d:e7:e3:
                    cc:a0:16:ee:ed:88:ed:a1:6d:94:1a:4d:d5:27:02:
                    f5:b6:c6:f0:51:9a:5f:e0:12:7d:4b:66:86:c8:19:
                    be:4c:a3:6b:9a:52:d6:55:60:2e:71:61:83:9e:b9:
                    e4:52:0e:94:6d:15:38:0a:5c:2f:62:b3:4a:62:9e:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:07:83:39:07:98:E2:ED:9F:6C:DC:3A:E0:1C:7B:81:77:F9:9D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df7775c8-fd21-3a29-80b9-f914bc6537e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:a011::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3a:85:17:8d:4c:aa:81:6e:a5:73:db:54:ba:40:92:22:ea:
         29:8d:e7:f4:f3:9c:2a:86:76:09:cb:8c:12:52:6c:a4:f6:2a:
         2d:5d:87:0c:dd:56:69:56:43:94:e2:e3:67:f7:2b:b3:55:90:
         26:a2:91:06:e5:c1:07:b8:2f:a1:9c:43:84:8b:f4:19:f9:5b:
         af:14:ef:9c:f6:13:c5:83:89:f8:11:f5:cf:a3:2f:cf:cb:32:
         a3:88:98:b2:2f:92:93:a0:0a:a5:02:42:c7:b9:76:e3:7a:6a:
         cb:97:7a:66:51:05:ca:60:11:b1:e2:6f:13:9b:8c:44:14:69:
         1d:18:5d:16:c2:04:6d:72:85:d6:07:b8:09:fe:9f:ca:c2:9c:
         11:52:e7:7c:57:89:77:26:aa:10:c7:44:6c:a4:af:00:f1:d0:
         29:34:de:33:08:8f:9c:e2:52:7e:37:a8:c7:9f:30:b3:d5:1a:
         3f:2f:ff:a9:ac:6c:c6:a6:01:a5:ac:fd:c5:9d:bd:14:7b:c4:
         3f:96:2b:16:62:d6:5d:d4:42:c6:64:0d:b6:ef:43:44:db:69:
         38:92:e0:f6:6c:fb:8c:d2:2c:2c:08:20:15:a6:cc:7f:c4:83:
         92:35:0d:57:61:99:88:d2:9c:08:4c:18:87:66:10:b4:20:81:
         8d:00:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:17 2026 by rpki-client