Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b402a8c-6485-3df3-92e6-94daadec340d.roa
File:                     2b402a8c-6485-3df3-92e6-94daadec340d.roa (raw, json)
Hash identifier:          yQYikVWQNphABMnt/nKIufEaIMEj0/Jn1pP1kIzAXy4=
Subject key identifier:   C6:2A:F7:9A:DC:0C:CE:CE:B1:0A:16:07:B9:9D:FB:C4:FD:1C:40:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B4B2AFF52DB39E8B0B200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b402a8c-6485-3df3-92e6-94daadec340d.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:1009:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:4b:2a:ff:52:db:39:e8:b0:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=5511b012-2c59-42e8-8470-67af22408454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:c8:d1:48:d6:9f:60:d4:77:3d:97:6e:17:
                    34:e6:60:90:ce:9f:80:1a:c4:c6:2b:6f:98:ad:f3:
                    0f:70:f1:12:7f:1a:95:b4:7d:0a:cf:02:fa:93:c3:
                    e7:61:a3:a9:d9:5b:8a:7d:0b:99:1c:94:1c:00:84:
                    7e:6a:f3:8b:c1:92:a6:ca:59:74:45:f4:fb:be:a5:
                    d4:e5:78:e0:48:44:7d:15:81:8b:63:c0:48:04:e6:
                    dc:ec:6c:ff:62:1e:ea:fc:d3:0f:59:e4:71:f4:0a:
                    30:b9:81:f9:e8:d5:a7:3e:ef:6c:af:b2:26:74:5b:
                    0b:85:9d:17:13:4f:35:2b:42:f1:ed:32:08:46:4a:
                    21:3c:6c:01:44:33:dc:2f:b3:d7:3d:d8:70:73:37:
                    30:b6:cd:81:5d:51:66:56:c8:ec:8b:ad:76:15:ba:
                    4f:d9:8c:a5:6e:3e:46:44:d1:a8:22:f4:d4:be:d1:
                    4b:10:36:73:c5:2a:5e:2a:42:b2:a9:23:31:1f:99:
                    23:0c:3f:78:3c:a4:32:75:41:9b:ea:4c:b0:0d:eb:
                    be:11:4b:56:05:c3:fe:10:05:44:f6:18:b4:ff:06:
                    c8:d9:2f:79:f9:2a:61:6f:c9:23:3d:76:99:f8:6e:
                    97:af:a2:87:8f:44:d4:da:6a:10:19:14:85:0d:a9:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2A:F7:9A:DC:0C:CE:CE:B1:0A:16:07:B9:9D:FB:C4:FD:1C:40:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b402a8c-6485-3df3-92e6-94daadec340d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:15:cd:13:3f:31:79:c0:e5:73:0b:41:8b:3d:49:18:82:1b:
         24:2f:a5:13:19:24:cd:71:33:59:f3:6d:1d:59:df:b7:bd:10:
         d0:b8:63:c3:2e:1a:ad:9f:29:7a:ca:f5:74:a9:7a:2b:dc:04:
         03:3d:1f:19:fe:03:ed:d3:b2:b8:5e:16:76:f2:56:c9:cb:0a:
         3b:3b:95:4a:cd:f5:0a:01:62:c2:5c:07:62:ff:84:a5:69:0d:
         67:9a:b5:62:37:b9:e1:c6:21:45:54:c4:37:60:c7:d0:a2:01:
         44:9a:95:37:02:21:0b:5a:b9:92:d5:d3:ee:bf:ea:af:08:13:
         ca:6e:02:d4:a1:a6:d3:3e:0f:e3:ef:cd:89:5e:7e:c8:43:01:
         02:58:bd:88:91:65:e9:7c:b0:a1:0c:a0:db:7c:8f:20:ff:78:
         9e:41:4b:ff:8f:d0:19:a1:d8:d0:14:7d:36:d6:58:1b:ba:ad:
         d9:05:0a:62:97:07:9c:f7:7d:8c:8f:32:03:53:1f:df:40:50:
         69:4d:1a:c8:82:c7:61:89:88:95:50:bc:3b:f0:11:00:60:33:
         66:77:44:51:bf:b5:71:00:79:40:a6:bc:b8:d9:fb:63:2a:49:
         57:eb:16:16:ad:da:72:cf:be:c8:2c:57:93:dc:a0:16:7e:63:
         e8:f8:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:05:53 2026 by rpki-client