Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f1f74eec-2df0-36f8-95c1-383cd7ea587e.roa
File:                     f1f74eec-2df0-36f8-95c1-383cd7ea587e.roa (raw, json)
Hash identifier:          +fOnpM69ubHyegHCZcYxwcrYlftcTKHmrYDnjFwulhs=
Subject key identifier:   D1:53:03:BB:BD:E7:8D:81:2F:E4:A7:4C:F4:E9:DD:A1:C7:F5:95:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE03FA25212070A07DCC7C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f1f74eec-2df0-36f8-95c1-383cd7ea587e.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1014:b120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:3f:a2:52:12:07:0a:07:dc:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=baa435d6-389c-4ffb-b997-414dcac9057e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:89:94:e8:b3:cb:c4:ba:20:ad:f7:eb:45:
                    e5:77:7e:6e:4e:9f:8d:ef:a3:bb:47:2f:8d:77:70:
                    47:11:32:cc:af:d4:6b:fe:66:94:ec:b2:62:85:a1:
                    3f:6b:00:10:62:5f:77:53:c9:cf:3b:1b:14:ec:86:
                    9b:c8:cc:31:be:81:2d:b9:a5:79:35:8b:bf:6f:d7:
                    d2:f7:1a:3d:c8:8d:26:14:f2:29:b7:11:27:d8:69:
                    63:5f:b5:d0:18:ec:6d:a6:b5:36:88:9e:12:b1:9c:
                    ca:cd:9f:45:1d:1a:36:48:69:2b:47:fc:6c:21:21:
                    89:db:37:81:60:0c:3c:39:24:cb:64:60:2a:de:d4:
                    7c:4c:a4:4b:d6:39:48:ef:79:c9:a5:9e:3d:f2:8f:
                    67:51:e1:c5:27:12:c3:08:cb:b8:e0:36:0e:3d:29:
                    a4:70:54:9f:2f:36:c4:b2:3a:1f:9d:bc:99:95:b0:
                    9e:35:0d:f5:cf:ec:9b:a3:ea:aa:3b:f5:f3:89:02:
                    8d:92:c7:56:ea:77:e2:ee:9f:71:ee:23:76:eb:f4:
                    75:35:d6:09:58:86:26:76:bf:24:2a:78:6b:ca:20:
                    54:8b:81:1f:3a:55:4e:db:19:01:89:88:5b:ee:bf:
                    0c:7d:da:f3:5f:2c:57:bd:81:bd:14:b1:83:4a:cb:
                    f1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:53:03:BB:BD:E7:8D:81:2F:E4:A7:4C:F4:E9:DD:A1:C7:F5:95:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f1f74eec-2df0-36f8-95c1-383cd7ea587e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:3a:3d:77:89:77:e8:2b:a7:cf:09:45:2a:e1:60:2f:9f:
         ba:3d:21:2d:75:1d:cd:77:64:68:0d:6b:87:61:4c:48:01:1d:
         62:f7:6f:26:12:87:21:23:a7:0e:0f:f8:8c:c8:cd:9d:ff:4e:
         90:5d:26:43:79:20:5e:e4:83:df:50:54:06:33:f2:3b:1e:a2:
         e6:f8:3e:77:da:38:f4:66:d0:f1:bb:04:31:fe:ed:19:b9:34:
         f8:c3:c6:11:3a:af:71:d9:ae:71:5b:b8:7d:bb:94:4d:9f:c1:
         06:c7:8d:d9:af:cb:e6:1d:03:ec:2d:43:2f:2c:e3:6e:8f:2f:
         b4:31:ac:35:a9:17:a6:97:ef:d4:92:47:fb:8a:c0:a2:b1:85:
         35:c0:5e:60:0f:84:23:05:94:b9:1e:0d:bf:ff:e0:e7:a9:b5:
         87:a8:66:06:a1:cb:51:ac:b5:ad:13:d4:c1:e9:e0:5a:12:d3:
         86:98:84:2b:ed:6a:c2:ba:39:3f:ae:99:ce:cc:2c:85:b4:4b:
         cd:2f:67:cb:46:d3:34:ef:be:9f:f7:c6:10:f0:ea:dd:f4:15:
         99:f5:d1:5a:8f:7d:94:c7:17:2b:94:2e:cf:ec:b5:63:13:39:
         59:35:47:4a:8c:ed:98:51:b8:7e:b8:a8:a7:2d:08:14:87:86:
         4b:8e:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:30 2026 by rpki-client