Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4585e4d2-f872-32f2-82c9-18ec1c49ae4c.roa
File:                     4585e4d2-f872-32f2-82c9-18ec1c49ae4c.roa (raw, json)
Hash identifier:          Tj/tAV/yQxTc/68TnINFRLsmopZzBAVPvbMywLED/Cs=
Subject key identifier:   8F:A4:14:71:AF:97:DF:0B:49:98:37:21:B3:28:12:1D:55:C0:DD:D6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D773A6E70C2FA9AE83E52A440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4585e4d2-f872-32f2-82c9-18ec1c49ae4c.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     6167
IP address blocks:        2600:1011:d030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:6e:70:c2:fa:9a:e8:3e:52:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=6e4ef150-2d9a-4b47-b8eb-1fb59495f7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:61:ea:41:0a:70:e8:da:4c:02:14:ee:3a:
                    58:74:51:ba:80:52:4f:1e:0d:7b:ab:93:d9:52:88:
                    be:91:1f:02:fb:42:0d:e4:7f:a4:9e:19:d4:c9:3c:
                    63:be:13:8a:a7:3e:ff:df:8a:61:44:1a:4f:24:d5:
                    9e:28:6e:b1:00:e2:e0:ef:2a:46:4a:be:9f:c4:44:
                    41:42:22:7f:53:53:73:24:29:60:bc:d6:41:02:7b:
                    96:8e:42:2b:3f:a3:b6:e8:1e:66:ef:80:7f:15:fe:
                    14:c8:07:b3:b7:a1:f9:1c:8f:dd:90:f7:da:67:21:
                    5d:b8:eb:ee:fd:2a:a1:99:89:89:40:33:ea:f5:7b:
                    c0:b5:0b:4b:72:92:47:c4:c1:74:a5:d9:a0:6d:70:
                    f0:98:ec:4e:74:55:2a:64:de:ed:22:dd:4f:07:fa:
                    99:6d:96:81:58:05:df:3d:eb:b3:eb:1b:96:01:25:
                    df:92:ea:a2:6f:c3:83:05:ac:fc:be:75:fe:07:29:
                    79:8e:39:0e:35:5a:89:5b:0a:0e:3c:e6:59:50:bf:
                    81:0b:95:27:96:ba:99:ba:b9:c2:f6:7a:b6:20:fd:
                    4f:3f:6c:a2:c7:1e:b7:3d:c3:10:df:10:c2:98:50:
                    26:ca:f7:0d:84:9f:5a:86:3c:1c:92:0e:d0:ef:ae:
                    97:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A4:14:71:AF:97:DF:0B:49:98:37:21:B3:28:12:1D:55:C0:DD:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4585e4d2-f872-32f2-82c9-18ec1c49ae4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:d030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:24:9d:47:5d:e5:30:3c:97:9a:74:08:e7:7f:67:56:29:9c:
         66:07:11:d2:8e:2a:4e:8f:3b:0b:05:94:5e:0d:d9:65:2d:29:
         09:78:d4:07:92:92:4d:98:87:47:8f:93:9e:47:68:83:8c:3e:
         de:21:81:c7:81:4c:76:93:10:90:05:a5:25:7c:fe:5d:08:f9:
         5d:13:da:b2:bc:e2:16:c3:b5:98:31:e9:78:f4:b3:1e:8d:66:
         6a:8e:63:73:ea:4c:08:40:17:17:a1:8c:3e:9a:4a:c7:b4:23:
         3b:c8:9b:24:9d:0b:d9:35:08:fe:cf:9d:90:0e:f6:db:8a:c6:
         56:eb:27:ce:60:ee:d6:85:4b:a5:dd:d0:1d:ad:d7:48:ea:11:
         f9:b3:de:85:02:e8:26:5c:d9:5c:48:43:ba:a7:5d:17:a4:c6:
         02:e4:2e:9e:99:68:6b:8b:b3:85:c4:f4:b2:2c:50:6c:72:be:
         ed:9d:bf:46:35:7b:58:9c:33:a7:4c:4e:ad:e4:04:34:f6:5d:
         01:61:b3:7a:1e:72:62:49:91:3b:10:cd:90:7b:a6:a9:9a:5c:
         6f:c6:41:68:e7:54:e1:86:7d:dd:03:69:df:e4:6e:30:bb:48:
         4a:09:93:34:5e:0c:67:e1:b4:77:aa:14:81:4b:aa:6d:70:ee:
         1f:ab:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:21:45 2026 by rpki-client