Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/255f501d-117c-3ce2-be6d-4db8309a1ac4.roa
File:                     255f501d-117c-3ce2-be6d-4db8309a1ac4.roa (raw, json)
Hash identifier:          BHaoVqcujwim6ShJz0ap8UkJDvTC8Mlrwv9C2Eia4ZI=
Subject key identifier:   0B:DD:AC:6C:85:32:16:39:F9:AB:79:8D:83:9C:37:CA:EB:56:C4:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B51ED61494FB28D410000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/255f501d-117c-3ce2-be6d-4db8309a1ac4.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100d:a0ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:51:ed:61:49:4f:b2:8d:41:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=8b8e2e9e-8cff-42db-b501-c8f7c0547a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:93:d5:e3:50:5f:b2:8b:d8:3b:84:1a:bc:93:
                    a5:bc:89:6f:03:4d:e1:32:30:4a:17:3b:8a:9c:b9:
                    f3:cd:30:83:14:c2:71:32:c7:f4:57:6d:1b:f9:4c:
                    f8:6d:37:6b:30:2f:8a:c1:a2:e3:76:a6:bb:40:e0:
                    bc:d4:48:af:43:75:90:6f:e1:14:6b:1c:57:29:a2:
                    d5:8a:97:70:6c:d3:7a:f0:59:1b:e4:2a:9c:c7:03:
                    df:8a:e4:ac:64:1d:77:37:ae:61:15:83:14:70:d9:
                    db:b2:7d:71:bc:8d:ea:b5:e3:bc:01:72:12:98:c8:
                    6c:87:1d:d1:39:31:27:c3:3d:df:53:7e:d3:4f:1a:
                    43:1b:18:14:d3:85:d6:ae:17:b1:81:c9:a1:87:36:
                    55:1b:cd:29:b1:3d:44:42:f8:86:7e:36:7e:9d:91:
                    f4:5e:7b:34:b5:26:a0:b2:c5:b5:d0:bd:54:d8:f4:
                    86:d2:b7:5a:d9:9a:46:59:30:ac:bc:38:5d:8f:1a:
                    da:56:0d:67:33:de:de:21:ca:68:eb:e8:e7:de:5e:
                    0a:e0:44:7c:20:d6:a9:b2:20:bc:8b:d6:e8:6d:22:
                    a1:17:12:a3:ff:99:d3:c4:8b:49:cf:b2:11:19:ca:
                    da:da:cf:65:ab:14:95:a5:b1:dc:8f:19:1c:50:21:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:AC:6C:85:32:16:39:F9:AB:79:8D:83:9C:37:CA:EB:56:C4:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/255f501d-117c-3ce2-be6d-4db8309a1ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a0ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:53:ee:31:80:8d:0f:21:ba:e2:94:21:70:23:fe:99:a5:
         ff:f6:10:ae:95:47:18:d9:da:f9:a4:9e:8a:31:4e:4e:7a:25:
         3d:07:ab:6d:2b:03:31:25:28:b0:9f:b8:25:70:6e:46:83:51:
         6e:57:7c:28:b4:54:71:87:56:89:e2:00:c6:f2:ac:06:67:2f:
         b9:ea:b5:1e:7e:c8:3e:4e:35:29:24:1c:09:ee:7f:13:e9:20:
         04:a8:70:fe:14:15:1c:d6:03:b8:84:de:84:bf:36:e5:0d:fd:
         de:bd:98:0d:58:fc:3a:be:4c:68:e3:86:7d:74:ef:fa:f0:27:
         36:69:a8:50:f1:2e:eb:cb:2c:65:84:af:71:b4:d1:94:8f:9d:
         52:e8:da:a8:57:fb:db:0c:1c:57:7b:3e:8e:80:7a:dc:da:08:
         8a:c3:2d:25:77:50:8b:72:48:ba:e2:54:7c:64:3d:f9:a2:d8:
         c6:38:b0:2b:a5:94:77:3e:ee:1a:c3:b8:9d:22:4a:34:a6:f6:
         87:a8:b3:06:84:47:f2:e7:78:56:2c:3d:76:2a:0c:b3:1f:de:
         39:27:57:8d:d7:81:93:a6:31:8e:54:08:30:1e:fc:b1:8e:54:
         8f:6a:b8:7d:cd:fa:29:41:17:0e:74:49:97:a0:fe:88:c8:b5:
         71:d1:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 21:01:27 2026 by rpki-client