Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/032ba376-a814-304c-a6b2-a56e4348527b.roa
File:                     032ba376-a814-304c-a6b2-a56e4348527b.roa (raw, json)
Hash identifier:          Bfo2aT18CZiTO/CW4BfRCGwtuG9Ibs9aduha/Nay8yQ=
Subject key identifier:   10:2B:90:8F:18:84:C6:D2:BF:3A:B3:B9:DF:57:7D:B0:A0:FB:62:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B49B71B5E1C6771766B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/032ba376-a814-304c-a6b2-a56e4348527b.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:1005:a026::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:49:b7:1b:5e:1c:67:71:76:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=8b574594-a6be-43c7-ab38-6b1a8a3f2010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:88:66:ff:ec:15:08:61:f8:d9:22:31:a4:54:
                    ca:1d:bb:d6:db:27:a7:7e:07:69:a3:4b:79:98:dc:
                    cf:4d:48:62:b2:14:e2:fd:2f:2c:3e:99:e0:b2:b0:
                    ff:62:0c:7e:2c:e9:0d:2e:2b:89:15:28:3d:a1:01:
                    90:ad:f5:6b:3f:3c:63:8b:da:11:ae:4d:0b:dd:39:
                    d8:d8:bb:9d:b0:1c:15:f8:ae:08:8e:b1:2a:e4:6c:
                    21:87:a4:eb:20:7c:2f:44:97:6c:1a:63:dd:b9:5f:
                    1f:43:94:f2:17:42:a6:84:3d:d6:95:68:e3:32:aa:
                    50:41:2e:4e:99:5f:45:b3:4d:38:b3:0f:c3:66:62:
                    5c:be:fa:1a:87:f2:3a:b1:f5:7a:40:be:fa:3c:24:
                    10:66:c7:a5:a9:18:77:14:ec:8b:a5:02:f0:1e:0a:
                    39:00:1d:0e:ce:e9:8e:23:7b:74:ce:92:d8:03:85:
                    d6:63:9a:a8:d5:30:26:8d:e3:e9:cc:23:28:45:4d:
                    1a:e3:64:0c:91:4f:41:1d:29:b9:c3:da:5c:e7:61:
                    ee:ea:a1:7a:38:73:b2:74:5d:07:2a:95:8d:31:76:
                    d9:7e:c9:77:7a:98:cc:99:00:27:df:41:19:e7:9e:
                    9c:4d:58:17:d8:c2:7e:7f:e0:7e:d1:99:a1:cc:fa:
                    ed:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2B:90:8F:18:84:C6:D2:BF:3A:B3:B9:DF:57:7D:B0:A0:FB:62:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/032ba376-a814-304c-a6b2-a56e4348527b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a026::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:b4:ce:f7:dc:75:c5:dd:cf:f0:07:be:8d:86:62:4d:10:55:
         cf:73:0b:96:eb:8b:a8:08:a2:7f:96:fc:1f:9e:6f:f7:34:21:
         79:61:6a:92:5d:6a:79:35:a0:73:62:02:2d:66:1d:b1:7b:90:
         6d:7c:38:69:65:ff:93:c3:6d:f1:eb:37:3a:7e:3e:b4:b5:e5:
         23:95:2a:6d:ab:39:66:87:28:b2:28:69:72:85:3f:c2:ab:69:
         8d:2b:95:70:db:b8:ee:5c:a8:01:f9:a2:7e:93:9b:86:14:e7:
         75:3e:6c:61:78:9d:21:08:82:9a:07:14:2f:53:a7:c7:e9:2e:
         18:20:13:cb:5a:b8:da:73:23:0e:37:b5:0c:53:d8:46:28:da:
         3b:8d:1d:3c:0f:3a:a9:6f:83:c0:5d:71:8c:dc:b6:13:7e:f9:
         69:b3:03:67:26:89:89:c3:55:02:17:7b:85:be:00:6b:7d:3e:
         e8:f7:fa:43:1c:28:2e:ec:e2:29:c6:9a:62:56:26:55:0e:ec:
         cb:79:fb:b9:c4:da:b8:e9:69:75:da:a0:6f:52:83:a4:ee:42:
         b1:3d:09:b3:75:c8:0b:25:3b:f2:8c:a7:d2:18:a5:b5:3b:bc:
         e6:c6:57:2d:b7:79:87:73:bc:5a:f4:4d:e2:b2:05:32:24:8a:
         a3:c8:c2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:07:07 2026 by rpki-client