Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22c915c1-00d0-3ff2-b4a2-f9872e9ea4a8.roa
File:                     22c915c1-00d0-3ff2-b4a2-f9872e9ea4a8.roa (raw, json)
Hash identifier:          QL9wvBWSP2FK8PLLxyropeNa+u8oRiQc/STVafS/2So=
Subject key identifier:   13:24:BB:0D:3B:4C:28:F4:18:6D:F3:D3:06:C5:7D:8C:AD:81:0E:9B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E296F2306898F15CE56A1B500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22c915c1-00d0-3ff2-b4a2-f9872e9ea4a8.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:a12b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:23:06:89:8f:15:ce:56:a1:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=57e8d61f-108c-4375-a04c-956d1b3539e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:8e:e3:e6:a7:2a:fe:1c:7a:84:50:ec:5b:
                    76:77:e4:4b:a0:6c:55:70:ea:c3:5c:27:f9:62:f3:
                    ba:d9:fe:86:f1:d0:36:52:52:42:32:27:c8:a7:6d:
                    93:8f:84:f7:ee:d7:ff:bf:6f:3f:7d:c8:f4:8e:69:
                    05:d3:72:14:a5:d6:28:72:32:65:8c:54:33:c9:ec:
                    10:0d:ed:c7:0c:60:1e:48:68:ad:12:09:14:a7:e5:
                    e5:01:95:95:cc:7a:68:74:6b:c7:33:b6:89:32:15:
                    09:51:d5:df:99:db:9d:8c:ef:cf:d7:37:ce:f9:e5:
                    4d:8f:8b:b6:ca:6c:49:8e:1a:11:56:08:ca:1f:84:
                    07:38:55:82:dd:bb:9d:f2:6a:42:66:4c:cb:7d:1c:
                    20:6a:26:b2:57:04:d2:9c:3a:c1:3c:ca:95:43:78:
                    72:b9:02:23:5c:14:a0:48:b6:fd:88:e9:9a:b7:cb:
                    7b:54:00:25:b7:fd:0b:91:08:a4:0c:cc:51:b4:7a:
                    d8:79:11:af:0c:fc:e7:09:27:29:0c:8f:81:3c:2a:
                    e4:22:8b:5b:30:df:b3:98:84:7e:b2:de:53:2d:6f:
                    8c:ce:7c:b3:c6:d3:00:71:cf:94:a9:85:f8:c0:c0:
                    c2:21:df:a2:e4:27:3c:92:76:3e:bc:5a:b9:8a:41:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:24:BB:0D:3B:4C:28:F4:18:6D:F3:D3:06:C5:7D:8C:AD:81:0E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/22c915c1-00d0-3ff2-b4a2-f9872e9ea4a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a12b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b4:8a:c9:eb:59:ff:45:1c:ed:92:4c:a6:7f:a4:f8:a5:d7:
         09:63:df:f5:48:78:05:19:97:c6:99:cd:51:02:f6:4c:66:ed:
         07:76:eb:9b:ca:87:d4:ce:a9:e0:ba:e2:27:11:47:ba:b7:84:
         dd:c6:7a:6f:66:de:9a:ae:fa:c1:f2:dd:46:49:9a:df:a0:51:
         ea:66:e8:73:ab:41:0a:fb:f8:55:52:87:10:eb:d5:8b:6c:9e:
         aa:b5:18:a3:61:fe:25:0f:03:e0:e2:5b:e7:5f:bd:f8:be:6c:
         71:6c:4a:ca:16:aa:f1:51:74:ce:98:d7:74:54:98:fc:09:b2:
         15:f2:48:cd:9f:a1:db:80:bc:33:09:87:8c:c0:7f:ab:bd:e1:
         97:a6:65:6e:90:51:e3:b3:e1:2b:e2:0b:cd:a7:21:e1:7f:6f:
         fd:83:62:6c:ff:f2:89:f8:80:f6:23:e0:46:71:5b:23:7d:f6:
         15:4f:3b:7b:9c:f3:dd:d9:ef:2f:0f:52:3d:5e:e8:67:f8:62:
         6a:61:9b:99:35:09:e1:e5:b0:41:7f:f7:7f:66:22:eb:a8:6a:
         c4:09:88:ea:a5:00:c0:b7:1b:ae:bb:fd:1c:ef:e8:c6:cc:90:
         b6:c4:6a:29:aa:53:b0:83:ea:f2:a2:f4:0d:d1:df:88:d0:71:
         29:7a:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:49:15 2026 by rpki-client