Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02aa5987-3dec-3a65-aa54-4a9908ed0aaf.roa
File:                     02aa5987-3dec-3a65-aa54-4a9908ed0aaf.roa (raw, json)
Hash identifier:          kckChL+ZCCs/Xomo7Ts6fqSFl30f0BV0MWBSY45+LGw=
Subject key identifier:   55:E2:69:7A:56:1B:DE:C5:73:39:16:71:86:6E:82:C8:43:C2:19:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E0005CD25DF8F7E8FAEB33000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02aa5987-3dec-3a65-aa54-4a9908ed0aaf.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     6167
IP address blocks:        2600:1016:a118::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:cd:25:df:8f:7e:8f:ae:b3:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=0afcdf3b-d5a0-425b-934b-4a103607ef1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:ff:24:51:05:66:2a:40:f7:85:7c:cb:bb:
                    3f:08:14:1e:06:58:4f:0f:fb:51:25:27:fc:73:87:
                    a5:44:12:d7:6f:d3:e3:75:29:fa:e2:ce:7a:dd:09:
                    6d:11:3f:14:00:5b:a5:c4:0f:f0:ae:ff:bf:68:d7:
                    37:ea:aa:2d:7f:d1:84:4b:ce:23:8e:03:fe:9b:27:
                    0b:ac:57:b7:fa:38:e4:db:12:07:f1:93:53:91:0c:
                    a8:d9:59:4d:d0:11:d1:63:d3:50:a9:05:01:8a:cf:
                    06:b5:c9:56:7a:f2:94:c7:ac:20:12:ff:5f:da:2d:
                    95:d0:d2:b4:a5:d2:94:04:8d:c0:41:de:b5:f8:fb:
                    2e:a4:81:3e:fb:d5:f7:a9:8d:0a:c3:bd:4d:29:4f:
                    b8:7f:e7:83:d5:bf:40:00:d9:1a:1b:9a:41:c6:7f:
                    29:23:68:71:ef:7b:bf:ad:c8:59:d9:55:b6:0d:1d:
                    e8:72:e0:8d:5d:3a:6e:de:43:a0:8f:57:2e:1a:51:
                    d9:e1:99:8b:2e:fe:4a:bf:e4:cb:8a:ee:f7:96:d1:
                    4d:2c:3e:c0:86:94:70:ee:a6:21:1a:48:70:46:af:
                    49:7c:f3:3f:e4:4b:95:10:13:1d:bd:f7:bd:a4:b9:
                    c5:b8:be:0a:60:58:af:f3:dc:a4:c0:01:a3:21:00:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E2:69:7A:56:1B:DE:C5:73:39:16:71:86:6E:82:C8:43:C2:19:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02aa5987-3dec-3a65-aa54-4a9908ed0aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:a118::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:e0:9e:ba:8f:e9:a2:26:3c:00:2d:c3:68:45:29:a0:00:
         ad:84:3e:e2:12:aa:22:fd:62:71:94:5e:d6:be:71:47:31:9e:
         df:dc:54:fb:c3:7f:3b:24:a5:b2:c3:19:9c:07:a9:6c:3c:1e:
         4d:de:3c:8b:e6:c7:d5:fb:d8:ed:83:5d:dc:da:a9:76:d9:f4:
         be:ee:11:19:1b:48:5e:0b:48:63:97:4b:14:54:5e:89:67:87:
         71:4b:ed:d2:4e:46:b6:f3:d1:d3:cb:49:14:21:32:4a:d1:b4:
         99:dc:1c:5d:c9:a3:a4:02:f5:d2:5f:8f:d2:1e:c8:14:92:89:
         05:58:90:76:82:2a:51:b1:73:4a:f3:b9:c2:2d:44:cf:34:b8:
         24:a2:f3:62:8b:b6:cd:f0:1e:9a:3b:ea:1f:dd:7d:fd:11:1e:
         2f:a5:c3:83:37:52:c6:0b:a9:e8:e3:f9:9f:33:a8:41:c6:83:
         79:71:ec:0a:b9:db:45:78:96:d6:ae:6a:28:c2:13:22:ef:29:
         93:a0:49:97:ad:2d:cf:a1:90:7d:5f:34:4d:f4:e0:c0:4b:38:
         0c:1d:ac:67:57:a5:c5:75:40:9e:47:2f:b8:03:62:92:24:10:
         5e:e0:88:06:11:cf:49:c9:d6:c3:96:dc:d0:d6:c2:c7:3e:08:
         f6:e2:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:40:27 2026 by rpki-client