Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa
File:                     c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa (raw, json)
Hash identifier:          d42Ei+zlNaGsqB/qDExtaKs8wPgxPcc2z5J7QZovXcg=
Subject key identifier:   98:09:8C:D3:C3:59:5C:7A:DD:C5:1D:F0:C6:C1:79:9A:2B:A6:1B:A6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B51961C46933B1C092780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:100d:9010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:51:96:1c:46:93:3b:1c:09:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=583a0b1c-af7d-4599-bc66-61b276246453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:71:26:3c:b8:14:48:dc:d6:4e:95:a3:1d:c1:
                    41:e2:37:4d:ad:3f:ba:18:b6:ee:e2:50:fb:5c:7f:
                    36:bb:1a:a3:64:a0:cc:60:03:63:26:f8:c4:28:94:
                    0c:50:b5:7c:20:48:22:e0:14:c4:f9:1b:9b:72:73:
                    ae:0c:60:71:4f:12:26:2f:05:2c:45:e6:8a:5f:34:
                    02:fa:a7:34:91:15:c7:f7:e5:04:71:d5:2f:69:fd:
                    69:ad:fb:e1:ce:77:4e:a4:61:b3:96:5a:cf:07:39:
                    de:97:ec:4b:ab:bf:a8:9c:3b:6b:e5:0b:ca:11:96:
                    68:89:7b:0d:bc:1f:00:7f:ed:f0:45:16:f3:04:71:
                    59:c5:52:55:7b:39:e3:af:89:7f:80:9c:93:17:c0:
                    cc:43:ac:da:4e:8e:5e:ed:a6:c0:75:6f:dd:f9:60:
                    71:ca:d1:f9:3a:34:3f:88:15:f3:ec:37:67:f2:f5:
                    a8:d2:ae:b9:ec:3c:46:33:62:27:04:45:c7:20:17:
                    00:91:4d:05:1d:22:89:8d:f6:dd:d6:c4:2a:da:c2:
                    7c:82:d0:05:79:bd:43:23:f6:d0:5b:7b:ed:c6:d5:
                    b0:c4:ad:5c:0e:68:bd:3f:8d:79:76:21:17:23:86:
                    bf:65:a2:04:d6:d5:3a:f3:b4:1d:62:e2:82:30:1d:
                    76:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:09:8C:D3:C3:59:5C:7A:DD:C5:1D:F0:C6:C1:79:9A:2B:A6:1B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4c1aaf7-9514-3142-8b7b-3b601b2ff18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:73:94:72:3e:7f:e8:d1:15:85:f7:ba:1c:b2:13:84:47:48:
         33:3d:36:42:bf:de:03:07:2f:e6:84:7b:ee:7f:85:88:b5:8b:
         35:6b:82:f5:d2:f7:db:0b:85:ad:0a:27:e8:24:b7:0f:92:b1:
         15:e4:78:07:77:e1:c4:2c:35:0f:98:09:80:39:14:46:a4:c4:
         64:9e:ef:f3:01:e9:11:d4:32:48:e9:c4:0c:de:3f:b7:f8:78:
         f4:e6:b6:c9:5a:b1:ff:02:e9:82:6f:66:f7:1b:50:97:0f:dd:
         39:79:3c:8c:1f:87:30:d1:db:99:70:d6:36:b7:6a:f9:6a:c2:
         72:9f:e4:81:62:9d:01:f8:d7:8b:15:7c:c4:4b:42:a6:f0:86:
         d4:b1:f5:5f:b2:ec:74:61:2d:0f:84:a2:3e:43:72:22:07:57:
         7e:08:96:cc:66:cb:42:a8:e4:b6:ce:f7:84:5f:44:20:54:57:
         2b:82:73:66:2c:53:6f:d7:3a:ab:ec:ff:eb:26:85:c6:fc:8f:
         49:f9:9c:38:83:c6:c8:00:ae:a1:84:a2:54:98:38:66:c1:2b:
         e8:b9:9d:a1:0f:f4:e5:db:f0:60:d0:d4:c5:48:93:06:f5:58:
         01:c2:3f:7e:1a:d9:df:43:6b:dd:b0:e7:9c:1f:2b:29:8d:c1:
         cb:a3:c4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 20:05:52 2026 by rpki-client