Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae361baf-3977-399c-83de-45ec3dca3549.roa
File:                     ae361baf-3977-399c-83de-45ec3dca3549.roa (raw, json)
Hash identifier:          1R74qB2F3JXWMB9rmNo/qk+MLPbmdhXYfafVLYDHML0=
Subject key identifier:   B8:C5:3A:A9:BB:E2:23:C0:4F:E6:14:FA:CA:11:68:B9:FD:BA:96:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B3C3B8B97DD378FFD5F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae361baf-3977-399c-83de-45ec3dca3549.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100e:a010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:3c:3b:8b:97:dd:37:8f:fd:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=ec57fd1b-083b-4301-8c2b-54012c1158ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:84:32:0d:ed:3e:85:ea:2e:dc:d0:9b:40:
                    f8:74:be:99:4d:06:97:99:b1:5e:bf:89:3c:de:ca:
                    95:6b:b3:77:22:48:6b:d5:4e:4b:b2:60:a4:9a:db:
                    d4:b6:a3:24:a8:e1:3c:6d:bb:06:92:b8:38:b5:3e:
                    76:35:1f:c3:9c:6c:b9:98:c3:fe:b4:78:de:89:56:
                    33:37:52:4d:5e:c8:da:12:c5:95:4c:28:ac:97:33:
                    74:fc:ee:9d:ae:f9:a4:6d:a7:c8:73:08:c0:06:e7:
                    40:03:95:3f:d4:4b:68:8c:57:6a:7e:bb:6b:94:78:
                    3d:d3:c4:31:0c:ad:ef:7a:cc:57:72:86:60:b8:93:
                    42:5b:e7:1c:7f:77:ec:0c:5a:49:b7:50:c7:2e:ea:
                    f1:4f:88:9e:db:67:c2:a6:d0:db:94:d1:0e:a0:ba:
                    d1:4e:a2:c0:0d:be:19:e2:4d:24:da:26:ef:6b:ee:
                    bc:2c:1a:b2:c0:e6:13:94:35:3b:c7:31:f9:22:a6:
                    3d:08:a4:4b:a3:51:35:35:94:ce:d9:7e:28:48:d1:
                    d8:02:2a:90:de:3e:b0:b7:7b:02:9d:75:e0:0b:11:
                    88:f1:f1:ee:bb:05:8b:44:22:4d:d8:3f:9d:82:2b:
                    df:e7:95:6a:53:fd:62:ce:fb:0b:93:82:2b:a6:1d:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C5:3A:A9:BB:E2:23:C0:4F:E6:14:FA:CA:11:68:B9:FD:BA:96:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae361baf-3977-399c-83de-45ec3dca3549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:17:49:98:43:34:10:ff:fc:d3:5c:cd:48:6d:85:ea:c8:47:
         fd:d8:e2:5b:30:09:d7:b5:20:2f:60:71:d4:27:a1:b5:9e:8c:
         b6:7b:78:bf:89:65:53:f7:07:13:33:a5:25:59:70:fe:2d:68:
         fd:10:33:a8:dd:f8:d6:59:5d:aa:10:29:0a:2a:70:50:c6:63:
         b7:27:da:70:8e:83:20:5a:cc:65:ff:c8:e9:cc:80:7a:f1:57:
         78:6c:32:3e:2f:56:f8:65:3f:2c:a1:a1:5b:64:00:5d:19:33:
         72:21:e3:00:56:07:4d:4d:e5:64:17:f3:3c:19:77:33:55:d0:
         97:6f:d1:33:a7:2a:2e:f8:44:56:45:84:0f:4f:d7:f0:c3:3f:
         a8:3a:22:9a:2e:21:ec:62:e4:f5:52:1a:2b:d4:02:dd:e2:a9:
         b3:de:a9:07:71:3a:83:1a:30:56:64:68:70:3d:7a:d4:84:69:
         41:61:e8:4c:c4:99:e9:61:53:84:5d:66:da:0c:bc:fc:e2:8e:
         a6:b8:36:f1:3a:3b:ea:d4:e0:07:3b:9f:fa:67:aa:56:26:4a:
         e6:e2:0d:c5:72:b8:15:d4:b5:3c:4f:2d:7d:0a:1a:e2:f9:ff:
         fe:ba:7b:55:bd:c6:86:87:75:ae:5d:68:b1:03:f6:ab:6e:89:
         de:b2:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:06:56 2026 by rpki-client