Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee0f62e0-27ab-3382-8730-753c2715240b.roa
File:                     ee0f62e0-27ab-3382-8730-753c2715240b.roa (raw, json)
Hash identifier:          Nx/peI8CzMCK3w0qq5vXUXkE4guWZnzzT5l6ZDWkEic=
Subject key identifier:   C5:64:B2:70:F9:27:E8:2C:AD:70:AF:DF:DC:60:B0:14:A0:1A:96:86
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05B790212AF4CC19298280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee0f62e0-27ab-3382-8730-753c2715240b.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1007:d020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:b7:90:21:2a:f4:cc:19:29:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=edc1617e-d428-472d-9303-df9f4c5dd56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:84:a7:0e:76:c4:9b:b8:ca:ee:44:23:69:
                    0d:1f:36:cd:82:75:e5:2c:9d:fd:0a:5f:42:71:77:
                    d7:3e:c4:96:02:40:b2:12:24:0d:e3:7e:03:ed:23:
                    a8:dd:2c:e5:bd:ff:09:62:d3:bd:80:43:f7:13:97:
                    07:5e:af:e0:b2:24:b1:a5:dc:0d:67:d3:09:f1:67:
                    9d:e9:21:a9:27:a1:2e:8b:c7:55:be:3a:1c:db:7d:
                    24:b9:8b:3f:c2:bc:4e:55:82:2b:45:20:d7:47:f9:
                    f2:8b:c0:23:37:f5:1c:3a:e5:d1:32:9e:69:74:77:
                    c5:13:98:eb:63:0c:5a:63:2f:ea:db:89:43:b0:85:
                    9f:27:fa:7a:f0:59:8c:c6:b2:8d:38:0c:63:5a:b0:
                    a9:0a:51:24:1e:5e:56:8f:67:fe:5e:34:d7:aa:a6:
                    3f:15:1f:2c:d0:81:25:2a:e6:50:4c:64:03:3d:3d:
                    d6:68:f4:5b:ad:b6:dc:4a:2a:74:cb:37:b5:23:0e:
                    d4:77:e6:e3:56:19:47:97:b4:53:70:ef:2f:fa:fb:
                    f9:1b:0b:71:bd:3b:16:1a:31:70:a7:d7:38:06:3e:
                    4e:d2:1b:4c:0a:c3:80:7e:83:00:e0:95:a3:4f:fe:
                    f8:07:a9:d5:e6:da:cf:73:37:ff:86:3a:4f:19:e4:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:64:B2:70:F9:27:E8:2C:AD:70:AF:DF:DC:60:B0:14:A0:1A:96:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ee0f62e0-27ab-3382-8730-753c2715240b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:d020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:24:90:04:5d:89:63:e7:1a:4a:44:d4:a1:e7:55:34:c1:
         c1:61:f5:00:91:eb:59:9d:93:66:77:0c:8f:32:55:ab:57:fd:
         ab:92:a9:e8:7d:54:33:ae:f9:6a:78:17:75:1a:c9:19:d0:0f:
         b2:3c:38:a8:96:bb:f8:d9:8e:62:7d:82:b2:54:b8:2b:79:2a:
         08:16:5f:ce:0e:97:7d:82:cc:3e:e5:1c:8e:3c:36:42:60:8b:
         a3:0d:80:7c:a0:71:81:82:ee:61:7d:ba:5e:dc:b8:db:29:e0:
         77:32:7b:79:2b:b3:72:75:0d:24:f2:53:f4:43:9c:e3:0b:68:
         e1:08:63:f4:93:da:11:d8:f6:b8:9f:3b:43:a4:5b:84:a8:0c:
         03:76:2f:09:fc:55:b5:9f:cd:ca:61:78:5c:ea:a0:05:2c:94:
         e6:d1:0c:7f:24:bc:08:8d:f7:6e:18:e7:06:c8:fd:6c:11:0c:
         18:af:74:ae:53:76:b5:9c:cb:e7:a0:ae:18:d0:35:c1:a6:6a:
         35:88:05:c2:99:56:23:7a:f1:fa:5f:93:f4:70:b7:02:d2:a1:
         c8:d4:d4:d1:e2:4e:f7:94:53:23:12:fe:0c:07:f3:c3:be:d0:
         59:ab:99:07:95:5a:a0:22:23:52:31:e6:9c:ce:9a:b2:7e:41:
         1a:e8:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:46 2026 by rpki-client