Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f3970f3-d29e-37cd-906e-df3509e8e53f.roa
File:                     4f3970f3-d29e-37cd-906e-df3509e8e53f.roa (raw, json)
Hash identifier:          Nd6GYaNp3M6uUBosWK9ELWsp2b8C4laOZPB3cbpzfFw=
Subject key identifier:   F6:02:A7:15:02:FE:46:77:9D:E9:C1:C8:D6:78:8F:CA:AF:C9:C1:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D0F3E250E2BDDAB4AF21E7700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f3970f3-d29e-37cd-906e-df3509e8e53f.roa
Signing time:             Wed 04 Mar 2026 19:03:55 +0000
ROA not before:           Wed 04 Mar 2026 19:03:55 +0000
ROA not after:            Tue 02 Jun 2026 18:03:55 +0000
asID:                     6167
IP address blocks:        2600:100c:a120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0f:3e:25:0e:2b:dd:ab:4a:f2:1e:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 19:03:55 2026 GMT
            Not After : Jun  2 18:03:55 2026 GMT
        Subject: CN=b669188c-2ffe-440b-b10b-6b3424605cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:f1:71:b8:0e:95:4f:f2:34:d0:c4:83:4e:
                    19:e1:db:f7:61:2c:40:67:a9:f4:60:a3:e9:5d:1b:
                    ec:39:53:0b:dc:9d:c1:34:05:11:4c:c6:90:3e:49:
                    8a:d3:4a:05:71:a7:ad:46:6a:46:4b:6a:72:af:19:
                    d7:0e:96:eb:81:67:08:eb:79:e8:fa:a3:a7:ed:f1:
                    28:07:00:1e:a5:db:01:e8:ae:99:bb:76:11:93:4f:
                    2c:c6:22:df:8a:ff:48:71:82:e5:8f:80:46:6c:39:
                    0a:a6:a9:6a:e2:15:ee:9d:84:e8:6d:68:d4:04:1f:
                    4f:56:77:e4:74:97:72:08:63:28:cd:2a:bb:72:8e:
                    f8:4b:1d:ac:19:b7:f3:dd:9b:68:67:39:10:cb:79:
                    0d:15:fe:20:fb:67:a6:00:18:85:ba:64:c0:45:ac:
                    3a:95:c2:57:11:5e:60:42:fd:50:bf:69:9c:ff:81:
                    74:2e:c9:f1:23:5d:84:ef:4c:6c:0b:1c:e4:37:27:
                    10:b2:73:fe:30:39:4d:73:6d:0c:37:56:40:27:c1:
                    51:e6:c9:b6:61:a7:7b:ff:3e:14:ed:70:14:02:34:
                    77:9b:cc:a8:58:d0:d5:91:f8:bb:bd:45:95:87:40:
                    ba:03:f0:bc:2b:b0:5b:cb:f7:8f:a1:ed:3a:9c:fd:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:02:A7:15:02:FE:46:77:9D:E9:C1:C8:D6:78:8F:CA:AF:C9:C1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f3970f3-d29e-37cd-906e-df3509e8e53f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d7:18:03:e6:ac:f7:72:38:c8:e9:80:7b:8c:ad:d1:63:db:
         7f:e4:83:81:af:82:8f:53:a6:91:f8:8f:a1:6c:92:00:5a:64:
         1e:66:28:49:4b:8d:19:e3:9c:3e:6c:09:05:b5:7d:c6:da:2f:
         a7:9f:4c:73:40:a4:bb:eb:fb:83:b8:98:27:6a:87:4c:c0:2b:
         e9:15:19:cd:4b:6d:46:b7:cc:24:d1:c7:22:cc:51:fc:32:33:
         31:4b:31:b5:37:c2:ec:e3:44:33:14:ee:14:9f:a8:79:59:3d:
         7d:cd:95:08:a2:fd:5a:47:7f:cd:7e:24:08:04:56:6a:d2:32:
         ed:e8:0a:7d:06:31:4b:f5:9d:76:fe:ea:ae:45:0a:5c:ab:79:
         e3:19:ad:fc:8e:d1:c7:33:e4:60:06:f7:97:e8:aa:96:32:4c:
         b9:36:bf:c3:88:a2:ac:44:a5:a4:38:b4:34:14:d3:f4:ca:ed:
         90:90:02:ea:a8:07:e6:9e:78:21:00:2e:d3:e0:5e:3c:c3:02:
         47:33:bc:2c:cf:75:e7:4a:c3:bd:d0:23:91:b2:18:fc:3a:e6:
         23:f9:22:2b:51:d3:9a:10:fd:9d:ac:ae:f5:db:ce:9e:f1:1a:
         11:64:8c:5a:04:10:cd:80:75:f6:05:d4:78:cc:62:40:5f:5a:
         b5:2d:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:42:19 2026 by rpki-client