Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2859a153-a75c-302c-878f-69221e2ecb67.roa
File:                     2859a153-a75c-302c-878f-69221e2ecb67.roa (raw, json)
Hash identifier:          HXs/gin2qmjSNTV2sDFSU0BpvEzTBDv0mJL5hbA40ZI=
Subject key identifier:   6E:CE:FD:AD:56:48:14:D5:30:F5:77:3E:4D:39:EB:AC:52:52:58:6F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B4D8DE9EF77EE06928C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2859a153-a75c-302c-878f-69221e2ecb67.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100b:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:4d:8d:e9:ef:77:ee:06:92:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=b9f04f06-6490-4fdc-bc56-653f14dde4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:3e:1e:63:d6:e1:6d:4b:40:b4:44:47:54:
                    66:b0:90:c2:33:28:c3:45:2f:aa:2d:7d:36:01:5d:
                    8f:77:15:7d:81:5b:6d:c9:b4:04:9f:e1:0d:c6:69:
                    6b:8a:ff:27:b1:56:eb:69:d6:76:f7:1b:27:4c:09:
                    0e:70:99:39:7b:1b:67:c0:7b:4a:a8:82:a0:3b:0c:
                    62:bb:c9:81:60:a2:65:2d:c8:f2:de:fe:19:47:66:
                    89:ba:68:d0:8b:72:12:28:e5:c1:b3:c0:4d:29:2a:
                    bd:c5:98:99:63:96:b2:dd:62:90:fb:9d:1d:76:86:
                    11:71:ed:6c:50:0f:97:66:2b:e6:69:33:40:9a:59:
                    27:2b:e9:95:87:39:f9:c6:88:e6:a9:5b:09:37:18:
                    23:ee:e6:1a:e5:83:04:ba:92:ac:1b:2c:04:67:90:
                    ec:25:c0:af:50:3e:a1:29:d1:4e:b2:7c:6a:87:8e:
                    9a:05:8d:05:84:5a:e4:fd:d7:ac:62:54:58:2c:10:
                    c2:e4:d3:06:77:0a:c9:7d:b5:63:c1:b5:f1:a4:7b:
                    be:41:56:52:c5:8f:27:29:ff:44:3a:21:52:37:be:
                    ce:ba:3e:08:26:9f:a6:5d:f4:8d:74:a8:cd:da:59:
                    cd:e8:04:b9:15:6f:87:da:f5:8c:45:af:12:75:99:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CE:FD:AD:56:48:14:D5:30:F5:77:3E:4D:39:EB:AC:52:52:58:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2859a153-a75c-302c-878f-69221e2ecb67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cb:4d:59:0b:b0:8c:65:8f:ab:c2:e4:14:25:73:d0:31:fa:
         fb:39:18:b2:b8:6d:dc:1b:af:7a:10:c4:59:c5:9b:84:9e:68:
         b6:15:03:a9:3e:9f:27:36:17:52:24:cd:98:7c:9a:e4:d1:35:
         7f:62:29:82:5f:7d:fb:bf:ff:bc:e2:d4:89:8d:a6:d2:5a:5b:
         b0:e4:1e:6f:e9:03:cd:1a:a6:a5:a8:bd:63:71:54:3d:c4:8e:
         aa:95:36:42:61:6e:c0:32:b0:00:0c:99:1a:e2:3e:b1:1e:8a:
         8f:99:81:32:52:ab:a1:27:75:f9:28:4a:79:19:a2:72:9a:26:
         fe:aa:66:e2:5a:09:86:05:4b:ea:3c:06:83:7b:e1:3b:54:c1:
         72:07:16:09:97:56:19:99:9e:c3:ee:9a:91:69:f9:41:92:ff:
         48:47:52:5d:a2:70:52:d1:2e:eb:6b:06:6b:b1:dc:1d:08:24:
         9e:0f:c0:83:4b:f5:9c:f8:90:c3:59:6c:33:1a:27:03:74:16:
         8c:2b:4f:1a:04:b1:b5:99:65:c6:b1:ba:ed:93:4c:55:a3:59:
         3a:6a:f9:d1:98:5e:45:ce:dd:5a:7d:f6:7f:a6:66:53:93:4b:
         38:76:8b:b0:5a:d8:d8:13:04:e1:a0:61:d8:5b:42:de:2b:cb:
         98:3f:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:06:45 2026 by rpki-client