Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdaacd15-b5b7-3d3c-a978-727b6ad8ddd7.roa
File:                     fdaacd15-b5b7-3d3c-a978-727b6ad8ddd7.roa (raw, json)
Hash identifier:          i9wNnbV9DUtZqmuFTde6bs3Ka54aIX51QA0BOVaJ5V0=
Subject key identifier:   D3:62:30:1A:68:F8:A1:76:2D:54:4A:05:9F:C9:F0:35:14:0A:C8:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE04199F44711454620CB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdaacd15-b5b7-3d3c-a978-727b6ad8ddd7.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:b170::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:41:99:f4:47:11:45:46:20:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=7084b906-e026-49ee-8c74-d48733e95afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:c3:30:60:93:d7:03:66:c6:4d:ea:86:32:
                    67:16:c3:83:13:f5:3d:b0:a9:aa:f3:ff:1b:8e:d4:
                    4f:37:d6:96:91:19:34:d4:65:89:8b:fa:68:1f:63:
                    dd:b7:98:38:ac:5e:db:bf:e6:21:57:cc:4c:46:60:
                    e6:2f:6a:d5:be:b8:81:32:c9:ea:cc:4d:21:87:c1:
                    5c:1a:50:02:8e:93:18:01:29:b5:18:ec:61:17:c7:
                    13:39:02:cd:26:73:ac:fc:87:ed:12:70:06:7d:77:
                    ee:a4:c6:e8:ef:52:5c:40:71:e8:18:bd:30:5e:a9:
                    01:c8:b2:96:d2:bd:45:05:9a:3d:52:b0:19:f6:6d:
                    5d:1f:4f:4d:f9:1c:76:d1:7c:16:62:9e:d4:ea:ac:
                    75:90:20:1d:61:94:08:df:ce:18:bf:80:43:42:dc:
                    b1:65:db:a4:d5:9e:e9:0e:4d:f3:f1:0f:e3:c4:cd:
                    c5:2b:63:49:71:5a:49:79:aa:f8:f4:09:c3:0c:5d:
                    23:c9:21:0e:e9:22:2c:ad:ca:48:6d:3d:95:67:e8:
                    65:6a:1c:3f:d2:38:5e:f2:91:11:01:5d:13:15:21:
                    05:b9:da:fd:3e:50:c9:42:22:c4:01:7b:63:2f:35:
                    f8:17:16:52:e1:20:55:88:a1:f4:b4:78:02:82:88:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:62:30:1A:68:F8:A1:76:2D:54:4A:05:9F:C9:F0:35:14:0A:C8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fdaacd15-b5b7-3d3c-a978-727b6ad8ddd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b2:55:f6:32:2a:8f:3d:e0:e3:cf:1e:4f:da:09:14:b2:2e:
         a1:61:67:a2:06:73:b7:26:38:13:73:e3:04:56:88:12:1d:0d:
         9f:5a:b2:62:52:a1:e0:48:a5:2d:44:00:49:5a:d0:21:5b:09:
         1d:0d:57:58:3f:75:01:07:a9:6c:77:cd:4b:39:f0:e6:83:0f:
         6f:9c:20:4b:c2:7e:67:de:db:18:c7:32:91:96:a0:2c:38:bb:
         69:9f:79:cb:48:f8:7f:91:93:69:44:5a:32:4a:28:95:36:f9:
         02:c9:68:4d:da:84:1b:7d:15:d8:da:8c:4c:02:b4:02:55:74:
         7f:86:b8:84:9f:0c:9a:aa:18:48:d6:1d:97:14:86:c1:15:5f:
         f0:ba:24:b6:6a:5e:f6:f8:7a:3c:a6:b8:28:26:0c:6c:89:89:
         3c:ec:87:11:66:dd:a3:fe:ef:92:bd:57:41:a4:2e:3f:f3:c7:
         69:65:97:ea:a0:92:b7:1a:62:d8:71:e4:4c:35:c3:96:02:16:
         b4:01:f3:ea:98:65:96:5c:89:c1:7c:9e:7e:e9:54:cb:c7:ea:
         48:69:bd:c7:ce:15:85:21:b3:67:61:74:b6:c4:7e:42:c6:9c:
         e3:a5:d7:e5:69:df:10:e0:98:db:58:20:b3:9a:27:48:6f:c6:
         9b:90:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:01:02 2026 by rpki-client