Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0521ae0f-7fa8-39f4-841d-054f649dc986.roa
File:                     0521ae0f-7fa8-39f4-841d-054f649dc986.roa (raw, json)
Hash identifier:          KHajKAHkFf0KWW2bhDvm3y514N/qt1vpMP0mnhVM6kc=
Subject key identifier:   95:BA:AC:53:76:5B:1D:DE:15:9D:AC:4F:3B:C6:DB:C0:E3:98:B0:2F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC679EFE9F2B822504EAF640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0521ae0f-7fa8-39f4-841d-054f649dc986.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1002:b130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:9e:fe:9f:2b:82:25:04:ea:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=525be314-9626-4d03-baa8-b84349260e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:63:07:c7:f7:30:d9:a5:2b:a2:70:f2:b6:
                    0a:f5:5a:e8:d9:62:9b:50:a1:fe:05:e4:9d:e7:d4:
                    5a:b9:76:70:c3:6d:31:e6:25:eb:ab:8a:ff:20:df:
                    57:02:7d:02:d8:18:bf:d5:ce:b8:7d:a5:00:0f:53:
                    4c:b9:d3:69:33:07:7b:54:de:19:6f:99:b7:cf:d3:
                    51:18:f0:36:70:14:3b:aa:31:31:fd:4c:fb:de:58:
                    61:30:2a:40:a4:7e:28:51:3b:73:8f:c6:0f:58:38:
                    1a:ca:33:5f:83:88:7e:02:1f:4b:97:33:02:8d:d2:
                    55:17:77:86:bf:bc:43:43:a2:05:41:41:d7:a9:6a:
                    9d:ba:27:67:79:0c:f4:4f:db:56:fb:0e:4c:7c:62:
                    6f:95:67:9f:00:91:8c:f5:65:63:ae:fc:ae:aa:a9:
                    5e:fc:31:69:5c:8b:bd:31:69:e4:0e:52:b7:5d:1d:
                    93:af:27:f7:e6:dd:47:8b:b8:1f:a1:1e:12:24:0f:
                    45:7c:9b:e2:97:a5:00:cd:b3:4d:df:f8:9c:37:f6:
                    b7:75:e3:08:a0:74:e1:a6:25:41:2a:83:c7:06:40:
                    49:4c:2d:55:4d:20:2d:e9:ef:11:fe:44:de:d3:60:
                    4f:35:0c:9d:61:3c:f4:0c:34:d9:19:0b:8a:c5:47:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BA:AC:53:76:5B:1D:DE:15:9D:AC:4F:3B:C6:DB:C0:E3:98:B0:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0521ae0f-7fa8-39f4-841d-054f649dc986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:74:49:b5:f9:70:8a:a8:6d:78:7c:9b:e7:8c:d2:29:c3:
         fa:1d:22:a1:0b:44:d3:65:37:61:ae:39:e4:ca:ff:1e:03:d0:
         e7:c3:26:04:2c:b7:7e:13:b3:b6:92:88:a4:7c:5b:28:01:67:
         e4:f9:d7:e8:98:33:2c:ec:96:56:b0:a9:7b:44:c2:ab:3d:d6:
         fa:1d:1c:de:a7:bd:c1:80:9b:c1:77:3a:93:27:3a:cb:fd:bc:
         cb:c8:e7:f4:ae:81:3e:67:8e:cd:d1:d5:9a:dd:c8:11:4b:8b:
         bf:0d:f2:e4:cf:73:ad:39:ea:66:91:5e:bb:37:65:bf:49:15:
         ab:7a:90:b9:ad:97:6f:28:11:65:84:0b:79:6d:5f:9d:d9:81:
         d6:21:f1:a7:7e:a6:cc:9c:26:3b:23:63:31:34:79:ca:35:67:
         80:fc:d9:12:ca:4b:85:11:a2:db:19:0a:7e:c2:87:24:fb:a1:
         d1:02:15:3a:9d:33:57:ec:4b:19:2e:69:44:87:d7:08:5e:b4:
         aa:d5:51:a2:d9:08:a1:c5:99:4d:46:29:de:f8:d4:76:37:d9:
         58:85:61:b8:22:f6:a6:30:f6:6d:82:ff:6e:98:1d:c0:9e:2a:
         d4:6d:71:6c:89:c3:34:a6:fb:b4:81:5f:8b:de:34:d6:96:a7:
         2b:9a:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:56 2026 by rpki-client