Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6409ce3-c4fe-3ce2-a438-7607f59cc2c2.roa
File:                     e6409ce3-c4fe-3ce2-a438-7607f59cc2c2.roa (raw, json)
Hash identifier:          vCFOMulSCu42KTFwo8bL1cCUh0tzDXCxYfvWvzlC9Ic=
Subject key identifier:   06:6F:BB:95:0D:AE:BC:47:C4:BA:A3:8F:D9:5A:05:4D:B2:A4:80:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05A400BC1A36D1D7107E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6409ce3-c4fe-3ce2-a438-7607f59cc2c2.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        2600:4040:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a4:00:bc:1a:36:d1:d7:10:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=f45798e2-f777-45b8-a5c2-9b113b6e05d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:52:06:18:ff:36:c7:a1:0b:4f:35:61:c8:
                    1f:42:41:fe:18:e2:34:49:da:00:0a:45:ec:1a:44:
                    32:b2:04:ba:55:6e:f5:49:ce:92:61:77:3c:af:ce:
                    72:84:b5:63:b0:9c:3b:2a:52:77:71:ca:ce:c8:da:
                    d6:1c:4c:41:48:7b:3b:46:b0:4c:9f:13:5d:f7:c8:
                    90:c0:b2:4e:2a:75:87:c7:86:80:78:32:53:47:52:
                    61:e5:9a:1a:ba:ba:aa:93:3d:dc:b5:e6:3c:ae:f9:
                    c8:b1:0b:d0:a7:81:10:a1:1c:3e:e1:f1:9d:a1:4a:
                    2a:d4:12:61:b0:b9:53:8e:72:8f:da:17:92:24:d2:
                    28:1b:f6:ce:b6:41:16:16:e8:66:84:bb:6c:f6:14:
                    44:ed:f9:23:a5:2a:80:1c:16:1e:4e:74:94:ee:57:
                    0a:38:d9:17:ed:a6:61:17:e1:64:06:32:10:7e:e9:
                    ac:d9:45:66:53:ad:1d:f1:11:9b:e2:0f:d6:d6:fa:
                    64:35:48:28:f2:5f:e4:6f:8d:93:cd:15:4c:da:94:
                    2d:dd:5c:c9:0e:c6:a0:42:a0:5c:ef:ad:81:f1:5c:
                    1b:e2:ba:45:2d:93:91:76:26:1b:cd:88:c7:02:5f:
                    fd:b7:a8:e7:37:75:fc:27:18:19:d8:39:04:6f:6c:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6F:BB:95:0D:AE:BC:47:C4:BA:A3:8F:D9:5A:05:4D:B2:A4:80:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e6409ce3-c4fe-3ce2-a438-7607f59cc2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:c1:5b:67:cb:f4:a2:50:f5:45:a7:bc:94:a9:4f:c2:b0:45:
         e2:e9:fe:dd:08:29:4e:45:08:14:ca:33:14:36:15:77:2c:68:
         2f:e6:c5:a0:29:bb:f4:65:6d:69:53:d2:78:d4:76:c0:14:f4:
         7f:fe:57:9b:8b:c6:06:be:81:f6:77:36:48:d7:fb:d0:ff:3d:
         a7:46:25:21:fd:62:a1:12:40:8b:b8:82:85:c1:0a:ad:b3:19:
         20:e9:4b:d1:81:79:82:77:60:f7:cd:0c:0b:36:f9:82:90:d2:
         83:2b:db:9e:d4:85:e4:5a:b7:88:ce:46:34:1a:47:dc:9c:c5:
         7d:bc:92:ba:67:c2:0b:27:ed:c7:3c:4a:2b:de:aa:95:a6:aa:
         6e:d8:17:2f:af:ed:f5:07:6e:cb:46:52:e9:9e:7b:0d:45:b7:
         4a:ef:30:b9:82:cc:1c:24:93:89:54:19:88:5b:d8:30:ca:83:
         42:ec:b2:43:e6:95:e6:e1:27:57:62:93:89:5f:fa:e5:0e:e0:
         be:20:ba:35:65:9c:6a:70:8f:70:33:00:11:08:e9:53:b8:26:
         f6:75:4e:5c:1c:49:cb:7f:9e:30:bd:14:39:f1:0a:2e:cd:ba:
         24:8f:d2:84:3c:88:27:9f:ad:28:45:ca:f2:20:4f:f4:72:1c:
         8a:7a:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:47 2026 by rpki-client