Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5c66121-c399-3a9e-bd18-c4bd5d8c6ed8.roa
File:                     f5c66121-c399-3a9e-bd18-c4bd5d8c6ed8.roa (raw, json)
Hash identifier:          USd3TESJ9ITgfgNKx0ek4J3Y4ccR0DpM1CaKnHZ6dgw=
Subject key identifier:   6B:1B:F8:48:74:DE:D5:E5:89:AB:7D:86:F6:B3:9A:50:AC:59:0C:B5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE044CD92EDA9FA938F9E68
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5c66121-c399-3a9e-bd18-c4bd5d8c6ed8.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1012:b300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:44:cd:92:ed:a9:fa:93:8f:9e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=98967bfa-d127-4585-ba90-5072db61f3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:8b:69:03:4c:c6:65:57:5e:00:27:d7:4c:
                    00:a4:2b:e2:fb:d1:c1:b3:5e:f2:b5:91:2a:6f:6d:
                    6f:ee:d0:53:10:d1:67:e9:9c:db:65:69:a8:80:4c:
                    68:fb:97:92:fe:3e:3f:a5:98:6c:70:dc:75:8f:e0:
                    e1:76:a5:cc:6c:7c:ee:93:32:c7:a2:4f:26:bb:98:
                    f2:a8:df:a7:89:6b:b9:8e:5b:7f:b5:6a:14:83:cf:
                    8a:05:67:83:24:59:6f:89:6f:e5:3c:1e:33:b1:10:
                    09:c0:63:01:5c:b7:43:3c:7e:c6:73:6a:f1:5e:30:
                    c2:5f:07:d9:43:fa:ae:7e:52:46:2f:17:a0:b4:95:
                    c7:3b:7e:f9:9e:78:9e:62:72:3a:c4:ef:9f:ad:89:
                    5b:f2:60:54:91:e0:10:c0:c6:bf:6e:fc:34:a8:49:
                    bb:0f:75:35:97:fa:5b:1b:74:bb:eb:43:32:b9:e8:
                    e0:62:4d:c5:67:71:fa:58:f1:94:33:dc:e6:64:65:
                    78:e7:ed:9d:b8:4a:ad:f2:21:6a:5a:79:6b:83:3c:
                    e0:f8:33:3a:00:b5:22:00:03:df:42:0a:cc:ea:d9:
                    ca:71:89:59:9f:2c:e7:3c:82:55:cf:b0:44:fc:e6:
                    23:c6:4c:ea:8a:b1:08:5a:5a:1c:8d:b5:9a:07:f2:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1B:F8:48:74:DE:D5:E5:89:AB:7D:86:F6:B3:9A:50:AC:59:0C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f5c66121-c399-3a9e-bd18-c4bd5d8c6ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e7:cb:5e:f8:fb:cd:84:1f:2a:7c:2f:40:71:9e:0c:f5:1e:
         4b:93:6a:ad:6a:32:1f:39:9d:99:cc:e7:13:94:2a:68:57:53:
         49:7f:90:04:25:68:5e:76:ea:dd:a6:53:58:5f:10:43:17:3e:
         e4:0d:ac:be:2d:f9:01:9d:fb:42:10:2c:1f:2e:15:30:24:6d:
         13:cc:84:74:7a:8d:5d:c8:64:2a:ac:10:1b:14:21:9c:4e:84:
         af:e7:97:4d:40:1b:9d:35:8c:42:3a:57:63:1b:bc:0c:3f:06:
         c3:a9:0d:3c:f5:d5:b8:52:d2:ca:a4:94:c5:7c:0e:06:39:4b:
         cb:d4:e6:e4:d8:c5:6a:8e:79:cb:9f:a7:e6:cb:15:ed:17:8a:
         3d:cc:48:12:3c:84:76:61:fb:ab:e9:c2:43:7f:8c:8b:ed:72:
         7d:b7:79:fc:9b:68:36:c1:06:de:e1:01:12:34:b8:83:78:5e:
         ba:cb:5f:07:79:18:09:ea:97:e9:cd:01:57:b4:6e:bf:8a:d3:
         93:5e:6a:cc:dc:6c:2c:95:83:90:f3:2c:b7:19:d8:a8:b1:01:
         e1:fc:f0:29:c9:9c:f0:3a:e5:19:ea:db:28:b2:4e:d4:c7:7b:
         9f:4b:87:a2:f0:3e:42:25:d8:72:3d:35:ab:32:f2:d7:f2:39:
         80:97:a1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:05 2026 by rpki-client