Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0270cdaf-0ced-3e70-9db6-f3df26f3b8bc.roa
File:                     0270cdaf-0ced-3e70-9db6-f3df26f3b8bc.roa (raw, json)
Hash identifier:          dDl1D0SiZFkU40XHyLj/3kLMh3/qJokXCxUKrLf7WmU=
Subject key identifier:   95:39:96:58:A9:9E:73:E3:D7:8E:5C:46:6B:3D:CF:A2:2F:7B:E5:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D5D2FA1EDEF31E351A0488D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0270cdaf-0ced-3e70-9db6-f3df26f3b8bc.roa
Signing time:             Wed 01 Apr 2026 17:07:43 +0000
ROA not before:           Wed 01 Apr 2026 17:07:43 +0000
ROA not after:            Tue 30 Jun 2026 17:07:43 +0000
asID:                     6167
IP address blocks:        2600:1017:a413::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:2f:a1:ed:ef:31:e3:51:a0:48:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  1 17:07:43 2026 GMT
            Not After : Jun 30 17:07:43 2026 GMT
        Subject: CN=738ce173-b49c-4b7c-acdd-deb898150325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:8d:b8:76:cd:ac:5a:17:bd:42:66:f5:63:
                    a8:f1:eb:e4:13:54:51:b0:25:fc:ca:01:3a:4b:df:
                    74:dc:75:e9:d6:d9:16:c9:32:ac:37:50:c3:e0:31:
                    62:d8:ee:3d:22:7b:3d:2e:2d:d5:fa:ec:58:ae:04:
                    d0:1b:20:10:3c:3c:cf:13:fe:ba:b7:6e:5e:0f:b4:
                    eb:73:a6:c5:13:7b:63:35:02:96:da:06:3b:ad:8c:
                    1b:d2:51:90:fd:b8:2f:2d:bf:a2:d8:b0:63:ac:82:
                    e0:2f:fe:90:86:16:5a:64:f2:a5:08:b3:fc:a6:ce:
                    78:d7:d2:b7:86:98:d0:d6:59:e4:89:3f:39:cd:09:
                    c2:54:8f:a8:53:ee:2f:6b:bc:57:05:31:f4:79:99:
                    74:85:cc:a8:18:a8:0e:d3:e6:2a:83:3a:ed:45:ad:
                    04:6f:67:f9:cd:e5:47:2c:f9:86:3a:ae:32:fc:24:
                    03:ce:d3:7a:28:16:c7:0b:ef:42:a4:ae:e9:fc:d9:
                    f7:51:1c:26:c3:8c:47:f1:82:76:ea:a9:d7:de:b1:
                    e9:77:8a:8b:c2:78:08:0d:a4:94:95:6e:6c:e0:9c:
                    1d:0c:7f:00:50:ef:44:47:70:d8:d9:8d:fe:b5:d8:
                    da:f6:58:42:c9:b4:4e:c2:6c:28:98:9f:a0:fc:66:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:39:96:58:A9:9E:73:E3:D7:8E:5C:46:6B:3D:CF:A2:2F:7B:E5:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0270cdaf-0ced-3e70-9db6-f3df26f3b8bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a413::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:03:20:10:a9:cf:68:19:3a:68:d2:0b:8e:c4:be:c9:f1:43:
         18:70:e8:0d:6c:c5:4d:3a:b4:2a:aa:9b:66:c9:6d:0d:3f:dd:
         c3:1c:8c:f8:28:3c:55:01:e6:b6:2b:06:c8:a6:88:0e:63:ab:
         89:99:4b:76:6c:1d:9c:33:f0:77:97:0e:3e:fa:94:e2:20:5f:
         46:37:09:31:5c:51:49:dd:36:73:e2:e3:4c:9b:58:be:92:79:
         88:13:32:46:49:63:2f:6f:ce:b0:e2:c7:a0:52:b8:78:ac:02:
         ec:f6:55:22:df:5e:dd:47:72:d6:07:45:64:a6:bc:13:fd:c9:
         61:73:c7:a2:ea:8c:90:e1:4c:c7:71:74:67:9c:fb:3f:76:ce:
         af:b3:ec:e4:06:6d:d7:cd:4b:e1:6b:d3:34:2d:55:cc:4e:b3:
         1c:2f:70:86:76:fe:94:cb:0e:2d:fa:66:dc:d7:6a:be:4c:bb:
         0d:3e:a9:cc:36:fb:64:43:c9:1d:9b:41:51:d0:78:2d:93:f4:
         30:b0:c6:00:95:38:63:2c:af:d0:e1:b0:6c:23:28:a9:84:a4:
         29:95:14:2f:83:82:05:f1:1b:18:d9:47:d0:4c:35:a4:5e:bc:
         2c:0e:ae:ff:09:19:7e:86:3b:d5:0a:02:de:21:5e:2d:4d:81:
         18:2f:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:14:05 2026 by rpki-client