Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f7b7e7e-6085-329c-a0dd-3a5098f36f0f.roa
File:                     8f7b7e7e-6085-329c-a0dd-3a5098f36f0f.roa (raw, json)
Hash identifier:          IoB0tdcKa3mYS63YR3TEcpfJ69CajubzfYzTZD7mdUM=
Subject key identifier:   A4:70:C9:FA:10:29:1A:23:55:57:19:F7:65:B6:4A:4F:7A:F7:32:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D22AC4F789A9F1ACE41B3F380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f7b7e7e-6085-329c-a0dd-3a5098f36f0f.roa
Signing time:             Wed 11 Mar 2026 18:06:15 +0000
ROA not before:           Wed 11 Mar 2026 18:06:15 +0000
ROA not after:            Tue 09 Jun 2026 18:06:15 +0000
asID:                     6167
IP address blocks:        2600:1008:a042::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:ac:4f:78:9a:9f:1a:ce:41:b3:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 11 18:06:15 2026 GMT
            Not After : Jun  9 18:06:15 2026 GMT
        Subject: CN=622fdc7d-0f66-4449-afe8-715773d3134f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:91:02:f3:26:82:1e:be:42:f3:7c:23:a3:
                    37:57:c7:f9:cf:6e:26:30:92:3e:94:04:67:31:af:
                    02:00:05:e0:a7:b9:ef:06:dc:ce:5d:1a:c0:c9:8d:
                    05:84:fa:2b:9d:33:7e:8e:29:f0:67:aa:ec:9d:71:
                    29:32:e8:cb:e9:b2:81:07:64:89:ea:04:2a:34:50:
                    b9:14:47:51:ca:11:fe:b9:b4:0c:af:4b:10:ee:b5:
                    57:8e:b7:74:32:bf:b2:64:97:70:89:8f:29:c0:bd:
                    62:19:20:eb:72:ff:ab:f7:4d:87:f3:0e:f6:66:ca:
                    e5:d9:40:a2:c8:f3:5a:2c:cb:bc:d9:65:b5:28:84:
                    d6:9b:01:fb:4c:13:24:10:7d:30:b3:59:0c:45:dc:
                    3a:fc:93:8b:25:6a:87:ff:8f:10:fe:14:3f:db:3d:
                    1a:e8:a6:cf:85:eb:e1:b1:3f:03:6d:5b:50:9f:4f:
                    14:cd:af:3c:62:97:e5:c4:7c:d5:07:0c:d3:a6:cd:
                    38:c8:c3:20:0b:5e:3e:9a:0c:a1:f9:ea:56:61:75:
                    9c:d8:2b:72:82:0a:fe:37:e4:db:4e:d3:11:37:76:
                    7d:07:c9:0c:4c:42:3b:4a:74:86:2c:76:d8:93:98:
                    52:9e:06:21:22:e7:5d:2c:75:ec:73:60:c1:5e:79:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:70:C9:FA:10:29:1A:23:55:57:19:F7:65:B6:4A:4F:7A:F7:32:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f7b7e7e-6085-329c-a0dd-3a5098f36f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:a042::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:40:bf:0c:b9:3e:d4:83:4c:26:3e:96:32:db:49:6e:c3:
         d9:7f:f7:76:ab:68:cc:f0:cc:87:51:1b:fa:cb:ea:65:ca:08:
         c6:2d:e6:98:38:e4:e8:09:cf:5a:97:5f:49:5a:62:41:5a:57:
         5c:15:b6:3c:b6:f5:0d:9a:b9:7a:01:5b:e4:ea:33:dc:21:e4:
         c0:82:73:d0:9f:d6:9e:90:96:bd:49:f8:25:f0:df:27:3e:3c:
         ad:b4:d8:74:a8:28:1d:cf:3a:ef:5b:9c:7c:8f:11:48:83:d8:
         5d:c0:ea:cf:c4:47:04:ba:ee:91:cb:da:55:d0:56:6c:db:b3:
         bb:5a:70:28:5d:39:77:08:1f:54:7e:04:8b:c2:38:94:e3:18:
         89:7d:cd:87:32:0c:26:c8:ca:17:2b:d9:d2:71:92:27:82:3c:
         68:d0:44:9a:63:25:c4:44:8b:03:6c:c1:dc:90:62:13:0c:b1:
         3f:a4:d5:d9:7c:11:3c:d5:97:a2:aa:ae:4a:3f:75:b3:30:f9:
         10:fe:84:0e:08:0a:f5:75:6b:a6:70:23:5f:27:75:cf:ec:d4:
         4c:5c:ec:0e:77:76:88:27:d3:6e:b7:c7:eb:4a:6a:a8:3a:ad:
         b2:8c:fa:e0:c7:0c:ab:98:86:e5:c0:eb:92:07:1a:67:f5:20:
         ac:08:e3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 14:43:11 2026 by rpki-client