Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f33db24-fb8c-3f3d-95f7-4973898c9422.roa
File:                     1f33db24-fb8c-3f3d-95f7-4973898c9422.roa (raw, json)
Hash identifier:          daMnivhC+VXnEn4pFSHsK1/+Fo7ZiyWHnXkTMZ/1Aqs=
Subject key identifier:   5F:7C:4A:F0:10:CE:AA:26:D2:26:92:5C:A9:D0:4E:DA:DC:2F:20:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67D327AB49022D7825B800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f33db24-fb8c-3f3d-95f7-4973898c9422.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:b0c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:d3:27:ab:49:02:2d:78:25:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=8a94c901-0ac1-4c9d-956b-fd1f280ff955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:c1:26:86:43:d2:39:ec:53:50:19:cf:4a:
                    72:97:1b:7f:fb:b6:2e:ca:73:0b:9f:46:c6:26:63:
                    fd:61:59:03:58:82:3e:ef:e9:2b:ed:60:31:9f:64:
                    b4:33:8e:38:83:aa:b5:34:2a:c9:d5:d9:d5:30:23:
                    e2:fe:c6:2d:af:55:27:cf:88:bc:a9:54:bf:d9:90:
                    09:df:f1:7c:2e:67:1d:df:5f:ac:34:e1:81:59:ce:
                    10:bc:04:d5:c9:65:31:9a:41:c6:4d:d3:8c:62:f2:
                    39:0f:be:6a:87:bf:be:f8:47:9f:81:bb:12:86:12:
                    11:4a:1e:01:42:75:36:17:2e:73:5b:a3:92:d9:34:
                    fd:93:57:db:52:68:73:ef:0a:83:e1:54:51:0b:af:
                    5d:f5:9c:5b:27:59:a5:e5:1a:31:df:6e:43:8f:15:
                    28:89:03:e7:74:aa:bc:c9:13:a3:f7:22:f8:98:5b:
                    85:2e:c7:f7:2e:69:63:71:73:5b:32:bd:e3:6b:14:
                    39:4c:32:e4:cf:ea:a5:6b:c2:cd:d3:09:40:53:6a:
                    12:8b:6b:43:1a:d3:1a:aa:ce:6c:9f:5b:f3:64:9f:
                    10:72:07:56:f5:d6:59:c3:19:ef:bc:bb:b0:7c:34:
                    9f:3b:89:3a:3a:9e:b2:5a:00:a2:af:d1:fb:4f:c2:
                    b0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7C:4A:F0:10:CE:AA:26:D2:26:92:5C:A9:D0:4E:DA:DC:2F:20:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1f33db24-fb8c-3f3d-95f7-4973898c9422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b0c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:08:ed:5a:f6:c5:81:d5:98:9a:12:e3:ce:5d:96:0f:2b:46:
         79:24:cf:fb:65:09:35:10:77:b0:c7:50:25:77:4d:8f:bb:46:
         50:b5:10:60:70:22:56:dd:7f:0e:77:b5:d5:a9:63:65:2a:58:
         29:3c:67:b6:04:e2:45:f1:b2:34:38:77:ae:f8:4b:91:32:d9:
         81:17:bf:41:26:94:f2:c5:10:95:70:9c:49:75:a9:f4:d0:73:
         df:f5:15:c4:9f:a0:4c:45:e8:37:fc:1b:06:ac:48:5b:4b:c1:
         ce:ce:84:e2:ed:bf:18:10:aa:38:a7:8c:86:4b:0f:fe:04:87:
         1e:c4:14:7b:42:55:ce:92:e4:f2:d0:d2:3a:e0:05:95:d3:12:
         a0:78:48:e0:31:f8:25:29:3c:3e:10:74:a6:e3:3c:4b:9d:81:
         a0:62:9d:73:b0:e0:6d:4d:4e:37:55:f4:16:e8:5d:86:4b:2c:
         ac:c0:91:4c:3d:73:ab:4e:20:a7:77:b3:06:76:1d:97:01:cd:
         88:a0:89:f4:cf:e0:e1:73:83:a1:f9:53:2b:51:da:fa:ac:60:
         9c:2c:a5:da:d4:dd:d4:a6:a2:86:73:fe:78:f3:03:67:6d:8e:
         40:1d:df:db:1e:80:c5:11:58:68:2b:8f:68:32:6a:f3:2e:ed:
         fe:24:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:49:12 2026 by rpki-client