Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/311c3121-2a31-3d6e-b483-4aa8de0040da.roa
File:                     311c3121-2a31-3d6e-b483-4aa8de0040da.roa (raw, json)
Hash identifier:          w1l7/iMcDo3NdnNEiiHmWnRlaPncQwbWNhTonpdwNYM=
Subject key identifier:   83:B2:D5:A8:17:9B:08:BC:16:D2:33:E3:F9:25:11:7D:C8:56:51:69
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B3D981A51BBD51098D080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/311c3121-2a31-3d6e-b483-4aa8de0040da.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100e:b110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:3d:98:1a:51:bb:d5:10:98:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=c1edaf98-f4a0-4e1f-aa4c-95894482cbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fe:61:df:d4:af:c6:59:6e:f5:20:0b:3a:1e:
                    77:fe:9d:d2:9a:06:52:93:38:0f:12:e9:de:21:d1:
                    91:92:7d:79:9a:73:67:02:bf:3e:d8:29:1e:be:4f:
                    9e:fb:32:73:c9:2c:2d:f8:25:ff:05:c4:1e:ee:d9:
                    02:4c:47:2d:b0:07:94:bc:07:85:1d:83:f8:51:cd:
                    64:ea:1c:c8:c4:3b:9a:3c:cd:b9:22:f8:89:7c:e8:
                    9a:66:fa:05:cf:d8:5e:89:d1:8d:c2:96:e5:77:2e:
                    f1:66:6c:fd:44:08:ef:89:a1:09:4b:60:c2:17:f0:
                    2f:a4:d2:b6:1d:c9:f3:5c:80:0a:b8:3a:70:09:22:
                    80:bb:de:38:60:e5:c8:bf:b0:3c:e0:27:93:cb:da:
                    d9:d3:92:65:3c:4c:04:ba:bf:86:ae:c1:78:d1:05:
                    e0:cd:76:73:bd:60:7b:a7:d5:f5:73:17:9b:66:a9:
                    28:18:5c:5c:30:87:82:22:00:60:a9:a8:d9:c5:75:
                    3b:e9:75:31:69:ec:55:55:c8:42:a6:28:fa:11:b6:
                    1b:49:02:0f:fa:73:67:c0:aa:1f:e4:9d:52:e5:76:
                    35:18:94:e4:46:cf:48:f2:b7:08:30:40:37:ca:2b:
                    bb:ae:f4:db:68:f7:be:68:ad:34:37:79:8c:ba:8c:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B2:D5:A8:17:9B:08:BC:16:D2:33:E3:F9:25:11:7D:C8:56:51:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/311c3121-2a31-3d6e-b483-4aa8de0040da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:1a:e2:d3:3a:72:01:f2:c5:61:a6:94:ac:ae:ba:0c:2c:
         9e:c1:d8:59:2c:9d:5f:b5:3f:d2:95:51:ad:73:e3:0a:4c:88:
         83:76:7f:24:ab:8b:2f:df:cc:07:f2:e6:9c:e7:a6:f2:60:89:
         d0:f4:77:c6:1a:1e:a5:a7:7e:4f:e0:0e:72:b1:4b:86:45:d9:
         7d:e0:81:87:c7:f3:46:39:35:68:a1:53:de:3c:b2:83:7c:d4:
         73:ae:60:d3:40:ee:1c:f8:dd:c0:15:c6:3a:c4:f4:05:79:b8:
         ef:0e:fb:c1:75:66:f6:cf:17:b1:57:97:fe:55:cd:ff:71:9a:
         79:23:6d:dd:42:19:5e:f9:85:c1:08:cb:9a:81:4e:44:17:e7:
         d7:61:6c:a1:e1:26:5c:fd:15:c7:de:7e:45:00:61:25:9b:bb:
         a6:27:22:cf:1d:2d:fa:db:d8:1a:c7:15:5d:a4:54:d1:28:93:
         f2:54:87:33:b7:1c:ce:ce:9c:7b:6b:8a:f2:97:11:ad:9a:c0:
         b3:cd:1e:67:cc:ce:fd:d8:33:75:a1:2e:86:86:a7:55:56:4a:
         d8:e7:7e:a4:5f:2e:a2:34:5c:51:c4:b2:65:79:5b:b5:61:f3:
         d1:20:da:ab:fa:d4:b6:2a:f3:0a:91:16:5f:ef:49:0b:8a:f7:
         d6:97:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 21:02:15 2026 by rpki-client