Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71058503-812c-3d0f-9a76-e66a04edf45e.roa
File:                     71058503-812c-3d0f-9a76-e66a04edf45e.roa (raw, json)
Hash identifier:          OQ3djWlE/rC6FHbPG7amA0f34JZl6gmnYa4wwS8kYz0=
Subject key identifier:   E2:18:6C:9C:AA:03:60:4F:BB:F0:9A:DE:BB:FD:4A:6D:42:CB:C8:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B50A932FA81A9AADEED80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71058503-812c-3d0f-9a76-e66a04edf45e.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100c:b2c2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:50:a9:32:fa:81:a9:aa:de:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=db82bd06-cd00-4aec-80eb-10fb77ec3a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:58:57:cf:91:f6:7b:26:61:6d:9f:f7:5f:
                    1f:00:0e:75:db:41:3d:1f:75:7b:5b:f5:65:54:af:
                    89:f4:f6:09:7d:50:3f:99:88:28:1b:e5:c6:77:94:
                    a6:5d:86:07:69:64:fd:c3:45:c0:8c:22:8e:dd:0f:
                    23:20:93:2c:9f:ec:2a:4a:54:8e:1c:0c:12:ab:59:
                    6d:de:dd:96:38:31:03:b5:9a:6e:13:eb:ce:8f:36:
                    92:34:0a:55:e9:94:af:61:fd:5a:c9:64:39:05:94:
                    a1:ee:f6:77:ad:e2:78:81:88:22:0e:14:b0:39:1d:
                    b8:cf:e5:76:21:26:d3:74:e2:72:6f:5d:f3:50:89:
                    15:0e:26:dc:ba:e5:84:a4:dd:c6:e5:41:8b:13:59:
                    cd:43:4c:63:a9:89:07:be:ea:05:2c:af:bf:f4:9f:
                    c0:ba:8c:f6:0f:95:59:72:5f:a7:68:f3:d6:8b:27:
                    b7:30:53:e9:7a:b6:8b:21:3d:83:57:6a:58:35:0c:
                    7c:0a:4d:72:ca:0c:74:f3:c0:26:ea:26:ef:77:dd:
                    bf:39:c5:1a:f7:de:4c:36:67:b5:7a:04:d5:ab:8c:
                    fa:25:e2:84:b5:ff:7d:2f:32:45:67:d7:fe:b3:2e:
                    84:a0:a5:29:8c:fd:a6:e4:67:57:b7:ef:07:7b:8d:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:18:6C:9C:AA:03:60:4F:BB:F0:9A:DE:BB:FD:4A:6D:42:CB:C8:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/71058503-812c-3d0f-9a76-e66a04edf45e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b2c2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:f7:fa:70:1a:1a:a3:2e:aa:ef:f1:70:f8:71:6c:5c:c3:
         e1:6a:63:1a:3f:b2:c7:e0:f5:33:69:fd:ad:94:a7:ab:45:03:
         a3:2d:37:28:18:16:70:9b:5b:3f:c1:e5:5b:a9:a0:4d:a9:4e:
         9f:c7:b4:2f:93:ab:f4:00:46:d5:54:8e:d7:7c:d9:21:ef:47:
         63:91:f3:a2:26:fc:50:3b:2c:18:81:6f:33:65:bc:27:ea:91:
         5c:32:07:22:1a:a6:ae:92:ff:0b:a6:1e:93:2b:00:aa:5a:48:
         46:5a:8c:62:8e:56:1e:4b:ae:38:e0:ac:17:e6:ad:74:7b:43:
         9f:27:13:8c:e3:61:d6:e0:fb:85:3f:b4:23:b2:7d:47:a9:ae:
         07:14:1e:8f:2c:16:cd:f0:d7:5b:30:65:86:43:45:c4:2d:f3:
         b5:e2:cf:c2:c5:e2:66:73:67:2f:48:f5:13:ba:54:41:1e:d6:
         b7:a3:b5:b9:a1:18:f0:7e:4c:7b:fe:28:56:8f:c3:43:3f:c1:
         c0:73:5e:3c:5f:7a:77:cf:66:16:8a:08:65:e1:ef:99:50:93:
         78:f3:86:92:a7:10:83:2b:3d:5b:9c:3e:a9:63:70:79:b3:c4:
         9c:24:b5:03:b9:9c:ab:8e:1f:4a:f5:06:e7:b9:74:fe:ba:f9:
         3a:5a:e3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 10:05:21 2026 by rpki-client