Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe6a0d14-924f-3a6f-8825-4a6f5e6f3162.roa
File:                     fe6a0d14-924f-3a6f-8825-4a6f5e6f3162.roa (raw, json)
Hash identifier:          s+WgJQn7wxxRAqba7w4PNNPx5pP9vxI+jQqy1/niYF0=
Subject key identifier:   E4:62:9F:78:C3:A1:BF:A9:C3:1C:B2:92:39:04:B7:8C:D5:1A:73:2E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DAAE03D455B225B83E7691700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe6a0d14-924f-3a6f-8825-4a6f5e6f3162.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     6167
IP address blocks:        2600:1011:a03f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:3d:45:5b:22:5b:83:e7:69:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=2378037e-4eb9-49a3-b140-99ace353bb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e5:8a:af:cd:16:be:77:c6:f5:72:3e:29:85:
                    20:8e:e1:05:f2:93:9e:d9:ad:a6:a7:9b:9a:2f:22:
                    7c:01:b4:02:ba:d6:42:25:16:7a:b9:47:a1:40:3b:
                    8e:07:2b:a4:69:4b:c0:d6:ee:3b:76:60:d8:5d:7c:
                    b7:c0:cf:ce:69:40:dc:a8:4e:e1:d3:86:64:fa:12:
                    58:54:d5:0f:4d:98:08:fc:ba:97:69:a2:6c:5c:a7:
                    8d:43:74:4d:8e:4a:9f:da:c7:ea:06:9f:cf:f3:9a:
                    7e:a5:85:2a:ed:1b:b4:0f:f4:84:88:38:b5:52:d3:
                    23:05:2b:18:c4:d0:c9:78:4c:e3:07:15:8a:10:96:
                    d9:d9:e7:65:f5:08:2a:d1:10:62:a4:5f:47:7e:0c:
                    91:2c:4f:63:54:cf:ea:8f:eb:61:87:b2:7f:78:5a:
                    8f:4a:25:1c:0a:9d:65:11:4d:c3:4e:62:02:a3:5d:
                    59:ac:9c:2e:cf:1e:8b:38:3e:e1:09:b8:31:80:22:
                    bb:c5:6d:dd:69:bb:89:09:b2:ef:c6:82:b1:a2:90:
                    ba:40:5a:c1:82:18:49:ac:87:42:e9:41:4d:7c:96:
                    7e:63:f0:c3:0b:65:d9:6b:c1:ba:68:de:a1:96:3c:
                    7b:c7:7f:2b:2f:0e:35:f1:99:cd:07:9a:f2:32:97:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:62:9F:78:C3:A1:BF:A9:C3:1C:B2:92:39:04:B7:8C:D5:1A:73:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fe6a0d14-924f-3a6f-8825-4a6f5e6f3162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a03f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f0:27:96:5a:be:fe:eb:b2:f4:55:49:af:37:dc:ae:09:91:
         be:15:ef:fa:e4:c2:a1:6c:8b:f8:fd:61:5d:a5:58:b9:5f:b2:
         8c:ae:47:4c:03:58:51:b2:87:ed:97:e1:90:51:b6:5f:d3:73:
         7e:c7:45:8f:df:de:5c:86:c9:06:f9:7b:a1:d9:5f:fd:67:29:
         e6:92:55:d7:01:ff:9a:ee:05:da:8e:7a:a8:ce:f3:e5:d2:17:
         72:59:ce:e7:62:80:03:d8:c6:58:df:33:02:fa:2e:69:cf:70:
         7e:a7:f3:a7:11:82:40:35:ff:48:85:3d:d6:da:f0:07:25:b1:
         57:a1:b0:6b:c6:f5:a9:ee:ec:6b:5c:17:7b:68:ea:41:35:6f:
         a6:0d:fa:15:8d:08:35:db:56:43:b1:0c:7a:0f:6b:58:5a:8d:
         19:83:d8:f8:ce:58:82:dd:46:8a:8d:b2:51:7c:81:9f:e8:61:
         30:e2:d4:8c:3e:85:81:95:a7:03:1d:18:ea:b7:b8:23:d4:19:
         84:b5:5b:96:1c:ca:79:42:6e:02:df:2e:68:fc:1d:d6:d3:d9:
         f1:e7:00:59:89:65:47:07:d6:06:48:da:36:a8:78:e4:0a:71:
         86:f1:16:e3:a3:7c:dd:9e:30:a7:a4:a4:88:4a:fd:cb:1d:e0:
         d0:94:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:50:36 2026 by rpki-client