Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8a718f2-1452-3089-ab9a-b8237b452e4c.roa
File:                     b8a718f2-1452-3089-ab9a-b8237b452e4c.roa (raw, json)
Hash identifier:          s0NbTZ0b9w6FR7Gerxb6X2N6eWQzESRzyh8BXJTQ79U=
Subject key identifier:   2E:D2:AC:93:57:CA:4C:12:B2:C7:73:E6:1D:FA:D0:C8:82:F9:97:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B509C34D1986FCA43EE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8a718f2-1452-3089-ab9a-b8237b452e4c.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100c:b2c0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:50:9c:34:d1:98:6f:ca:43:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=89e66dce-f490-450c-9f7f-c0d112e2d91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:c6:c1:9a:be:cd:55:e9:fd:42:2b:34:ef:
                    91:00:ce:b4:37:05:a1:bb:c4:9a:5d:49:d6:b0:c9:
                    03:58:44:55:2e:32:0b:61:a1:77:25:21:c0:06:55:
                    82:e5:af:94:aa:21:87:a4:9a:96:43:93:cd:09:62:
                    4f:a7:f6:f6:19:6f:90:2a:0f:b2:5c:03:33:26:e3:
                    d6:52:0c:c5:5f:57:f7:4c:cd:be:d5:43:ff:0b:40:
                    7b:19:7c:8c:36:08:9e:d0:65:cf:fa:61:09:3c:e8:
                    6a:9f:d9:44:56:a7:2b:25:58:cc:ff:06:f8:7f:7e:
                    bc:f1:a0:13:0d:e7:3d:38:a7:35:cc:84:72:cb:63:
                    e4:0e:10:3f:56:44:16:a0:d7:28:a3:d4:48:db:d7:
                    c0:0f:31:89:23:ac:8a:76:86:d3:15:63:9a:43:23:
                    ef:b9:11:9c:61:a2:38:30:af:61:40:ee:59:34:ce:
                    9d:2c:ff:0e:6b:38:4b:20:c2:94:6c:56:60:e5:10:
                    bc:bf:53:a5:08:fe:58:80:31:3e:3d:03:f0:99:0f:
                    ff:a7:25:f3:6d:34:af:be:55:39:23:44:5a:16:88:
                    eb:98:f9:d1:0d:31:5e:1a:7a:6b:35:8a:ac:3b:e7:
                    a4:aa:3f:6a:52:04:33:74:88:80:47:fb:d2:32:86:
                    31:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D2:AC:93:57:CA:4C:12:B2:C7:73:E6:1D:FA:D0:C8:82:F9:97:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8a718f2-1452-3089-ab9a-b8237b452e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b2c0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:b7:c6:34:45:9b:64:b1:2a:5a:24:58:c4:74:16:b0:c3:
         c5:db:ec:69:dc:3c:95:72:48:7c:4a:21:24:95:88:97:78:d6:
         56:97:c8:8f:f3:c8:16:95:cc:45:00:be:d2:87:60:6d:8c:46:
         e1:ed:33:9e:d6:93:35:27:34:a1:ce:bb:98:c0:ae:d4:7d:cb:
         b7:70:e0:6d:4c:65:92:7a:e5:6c:ce:83:78:c3:79:ad:c8:64:
         84:6c:61:27:6c:10:81:db:f5:0f:6e:60:a0:a3:04:a8:52:71:
         52:f8:bc:ac:94:c4:81:d2:c8:b5:58:97:00:bb:fd:1b:52:5b:
         89:77:32:f9:b4:3d:cd:a7:64:f8:03:b3:5d:17:31:dc:3a:ab:
         95:ad:fd:ba:f3:a7:f3:75:6b:5d:60:f3:b3:b4:0b:77:78:91:
         02:13:e7:49:c7:9d:43:07:48:83:cf:af:4b:59:e4:3a:a3:a1:
         dd:09:da:c4:81:ba:6e:94:c6:2d:e7:82:c7:df:9a:44:2d:17:
         9e:26:7c:0b:5d:65:ca:f0:28:28:2f:a5:8b:92:6a:9c:7b:a4:
         bf:4d:77:1b:ec:6c:0c:d5:77:ea:d6:a9:32:d9:80:d4:89:d7:
         ee:8d:d7:42:22:c8:4b:88:58:99:a5:da:e2:27:17:a3:ab:0e:
         8b:ba:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:05:34 2026 by rpki-client