Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97b47317-774d-36a3-8cfb-1297a5d40476.roa
File:                     97b47317-774d-36a3-8cfb-1297a5d40476.roa (raw, json)
Hash identifier:          OUmZV7baMOUoK4iocidetbkE/1XHmTHa0v1qGsp7elA=
Subject key identifier:   D0:8D:85:18:EF:65:56:66:16:3D:2A:21:FB:8E:9C:48:54:DA:4E:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B51AE7936192360BC6080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97b47317-774d-36a3-8cfb-1297a5d40476.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100d:9110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:51:ae:79:36:19:23:60:bc:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=b0edb821-bac6-4ba4-84c8-27a0e514f895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e8:f7:fc:c2:e4:f4:21:16:2c:c8:39:ae:39:
                    ad:d7:96:08:37:ad:75:e3:6c:67:72:70:8a:c3:5d:
                    bc:9e:ea:2a:e2:d8:98:9d:b9:1a:77:e1:28:b5:85:
                    9e:dc:f3:b8:92:b3:eb:22:6a:a6:c2:24:7b:ed:db:
                    d7:94:1a:c4:08:ea:c5:f4:bb:73:03:18:86:30:40:
                    cd:41:94:96:24:e9:4d:b7:bc:2d:54:32:75:84:a2:
                    01:56:c5:6d:ba:f1:37:5b:c3:7b:3b:2a:75:80:34:
                    3d:2c:ce:a3:d2:0d:16:da:e6:1a:b9:9e:2c:b3:dd:
                    91:a1:d0:c8:c7:a9:3e:61:99:0d:f4:fe:0a:17:15:
                    8b:fb:ae:11:1f:40:79:89:6e:be:87:68:ce:80:5d:
                    a0:38:0a:ec:21:06:38:6a:4d:5a:bb:ff:22:f6:00:
                    29:e6:9f:ea:67:54:9c:c5:94:fa:9e:ba:df:97:b8:
                    5d:97:55:ac:e7:61:6d:b1:1e:27:6d:18:d1:9d:8c:
                    af:da:fc:4d:6a:83:6e:1c:99:73:10:68:36:9e:0c:
                    62:2c:07:cc:46:19:c4:1b:58:54:4c:4c:fe:ca:5a:
                    fa:61:e6:dd:4d:99:50:d1:a7:60:10:02:b8:72:31:
                    ca:7a:8d:c6:fc:d1:48:ce:00:90:6c:0b:cd:25:cb:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8D:85:18:EF:65:56:66:16:3D:2A:21:FB:8E:9C:48:54:DA:4E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/97b47317-774d-36a3-8cfb-1297a5d40476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:79:0d:a1:65:7d:c8:3d:f3:5d:2f:46:33:f2:05:eb:cc:63:
         e1:25:69:e0:d6:02:45:a4:b8:4c:1a:96:33:9a:45:35:aa:87:
         6f:3b:77:35:33:ba:2b:ad:1d:5b:37:99:73:5e:ec:30:b2:18:
         5e:5a:3f:1e:0d:cf:0a:87:67:5e:cc:a5:46:32:9d:ec:20:e4:
         ad:58:14:29:62:4d:d3:c5:a7:db:f0:ca:02:12:f3:12:96:fe:
         b6:34:62:ad:7b:e6:d9:6f:0a:c1:2b:89:66:c5:8a:61:43:7e:
         55:ae:43:dc:ca:02:7d:0d:7f:b0:e1:3e:97:7c:27:e9:94:83:
         cf:46:02:ea:22:ab:5a:60:31:69:18:f0:a4:36:b3:6e:e3:3b:
         08:57:7d:8b:b2:0b:22:9c:55:b4:2e:93:ae:fb:92:26:6f:ae:
         d6:91:30:f8:e7:c8:6a:2d:b1:26:4d:e0:3f:7e:d4:95:76:ff:
         21:7a:3c:1e:3c:33:22:9d:25:27:c6:fe:bb:d5:03:72:ad:48:
         5b:eb:da:0b:cb:3d:fb:b2:91:97:90:77:f6:20:f6:87:17:fc:
         4b:dd:b4:8d:19:4f:ce:b9:e8:0b:9f:40:e0:38:da:72:01:8a:
         88:fb:59:a8:05:28:d8:26:22:36:a3:39:46:84:1e:06:1a:d7:
         9e:43:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 21:02:55 2026 by rpki-client