Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/255f501d-117c-3ce2-be6d-4db8309a1ac4.roa
File:                     255f501d-117c-3ce2-be6d-4db8309a1ac4.roa (raw, json)
Hash identifier:          i756qBqodzEWNy0JIcdABgGGeH3Hshwuht18GP9uV2o=
Subject key identifier:   6B:08:8F:96:55:AE:49:7B:05:F8:F0:1F:D7:B6:97:87:87:39:64:73
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D44DD1C84C75510E6DC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/255f501d-117c-3ce2-be6d-4db8309a1ac4.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100d:a0ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:44:dd:1c:84:c7:55:10:e6:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=6d9156ae-ecc1-4a0b-b860-dfb122ab9598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:dd:4c:49:8b:f1:89:12:e7:8b:61:de:ea:
                    3b:42:85:db:4e:10:95:b6:5e:4d:b9:5a:a1:94:c2:
                    1a:75:62:09:d6:33:87:16:0e:a6:38:96:67:6f:77:
                    66:56:f1:8e:5b:2b:00:0f:ca:9e:ef:04:49:8e:33:
                    12:07:eb:d2:c0:69:36:ff:e7:91:3f:05:9a:06:8a:
                    1a:c6:4e:99:87:d4:10:5d:57:d6:d3:fb:f0:f0:d8:
                    ef:54:03:e6:89:6c:d7:8f:f2:da:33:d0:af:77:dd:
                    65:ac:d5:95:56:b6:c8:9c:98:eb:ef:ef:b2:8c:24:
                    0e:c3:bd:fd:dd:09:68:3e:c3:c2:84:2d:b8:a9:46:
                    d0:7e:be:d8:b4:59:6b:73:ef:81:31:29:ff:41:7a:
                    8c:77:df:90:a5:9d:1b:cb:c7:bf:6b:f3:b0:8d:42:
                    b8:0d:4d:1b:1c:6a:58:65:cc:98:f5:0e:43:5b:93:
                    55:54:9a:0e:72:62:1e:f6:75:63:e5:65:13:bf:95:
                    e5:5c:46:d9:ee:96:db:76:ae:83:14:35:65:93:8b:
                    cc:a4:ed:fe:14:5c:34:75:40:d8:36:fc:89:40:6a:
                    0a:36:b0:f5:70:1f:c0:20:ff:6a:bc:85:5c:7b:83:
                    55:36:3e:b0:d3:be:2d:d9:7c:44:8d:c1:a3:ad:08:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:08:8F:96:55:AE:49:7B:05:F8:F0:1F:D7:B6:97:87:87:39:64:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/255f501d-117c-3ce2-be6d-4db8309a1ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a0ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:38:d7:de:4c:45:6c:d5:de:13:ab:b9:6b:eb:82:a9:14:ea:
         0b:8a:46:a7:f1:98:8f:0a:32:00:4d:82:70:61:ea:0e:01:81:
         90:5f:0f:ce:78:4f:49:ed:11:a1:6d:7f:b5:e6:21:50:45:10:
         2c:24:26:da:07:4c:e4:96:12:21:14:ec:52:cb:28:a0:4f:b5:
         32:46:82:41:d3:0d:31:b2:81:db:6e:ba:f4:d3:0f:10:99:1a:
         47:eb:69:09:16:5f:db:77:1d:ab:63:82:ed:3a:ef:a2:ca:1a:
         01:08:a2:a3:62:b1:55:f9:26:1f:c7:2b:cc:cd:6e:a3:cc:d6:
         7e:9f:1a:27:d1:3a:85:d7:a0:8a:13:9e:43:1a:83:d4:2c:ac:
         31:b1:86:d9:9a:53:1e:ed:d1:bb:62:b8:2c:b7:99:a1:81:7b:
         cf:a5:b8:ca:a9:38:6d:92:a7:af:0a:54:47:9a:36:ec:91:7b:
         63:a6:88:82:d3:21:cf:48:7c:31:7d:cf:cc:2d:0d:25:e8:32:
         65:7c:63:9b:14:a3:21:dd:87:4e:02:f1:a8:3b:6e:56:19:3a:
         67:74:6b:19:81:3d:77:c0:8c:e9:3a:5e:1a:79:48:92:4d:36:
         3c:4c:b4:95:48:77:f5:10:06:a9:a3:41:9e:be:eb:c8:c6:14:
         89:f7:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:25 2026 by rpki-client