Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c441474-4f8e-388c-8fac-8337cd8129d9.roa
File:                     3c441474-4f8e-388c-8fac-8337cd8129d9.roa (raw, json)
Hash identifier:          IkpByZxuuEloLXD1HxDbNT5nSemp8URUxqrzCqQHRn4=
Subject key identifier:   A7:E4:83:25:B1:88:A4:96:6F:85:D1:60:AF:49:81:F7:83:49:C4:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67D470B432755DFD1E01C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c441474-4f8e-388c-8fac-8337cd8129d9.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:d030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:d4:70:b4:32:75:5d:fd:1e:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=2bba29d4-be23-47db-b871-b09f98dda256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:8e:94:0c:65:c4:0c:9d:44:a7:47:57:a2:
                    18:56:4f:31:24:7f:11:8e:f4:40:fc:c7:5c:55:8d:
                    73:5d:df:26:08:39:a9:5c:a5:54:20:d1:0b:26:6c:
                    32:fc:ca:51:c6:42:04:b5:5f:d8:da:25:0f:f3:09:
                    6d:69:66:bb:a2:94:53:55:22:01:a2:14:b2:2a:4e:
                    4c:50:02:b0:22:60:8f:b7:6b:7a:51:99:b6:4e:99:
                    53:85:ea:5a:5a:cc:47:c2:07:cf:d8:6f:c2:4c:98:
                    f9:72:e7:75:ae:6c:03:26:98:06:31:66:63:f3:81:
                    b9:79:96:29:f3:6c:04:06:58:eb:f2:c9:5f:4a:85:
                    03:f7:12:fd:93:b2:2e:e0:39:78:97:70:df:c2:e5:
                    bf:67:6c:98:f7:93:0f:cb:dc:0c:27:35:9c:35:8a:
                    4e:0e:74:51:df:75:2d:a1:5d:7b:72:63:2f:bc:3a:
                    a9:ab:8e:2e:01:1d:27:9a:0c:bf:2d:6d:50:f7:61:
                    bd:ec:a7:3c:54:a8:d5:41:29:0b:d8:34:6d:9a:24:
                    8b:6a:ef:08:ed:55:22:cf:4f:81:a0:0e:a5:69:9b:
                    16:ff:9a:33:63:84:fc:1e:45:7b:b2:f2:c6:2f:59:
                    34:0e:ab:f6:60:10:21:86:9f:38:cd:5e:18:78:4b:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:83:25:B1:88:A4:96:6F:85:D1:60:AF:49:81:F7:83:49:C4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c441474-4f8e-388c-8fac-8337cd8129d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:d030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:96:b0:04:ac:15:f3:c6:ff:c0:59:ea:4b:ef:8e:e4:60:6c:
         ad:a2:b8:73:0a:56:07:20:cb:a6:bf:e1:5e:75:b0:f0:4d:25:
         da:7d:bf:1d:09:49:3b:01:e7:cf:1d:7d:a4:0e:d2:ea:9f:e7:
         48:11:0f:11:24:69:b7:79:4d:a2:82:7c:21:14:e9:45:81:fa:
         4d:18:d5:b8:43:2f:81:3e:fb:17:e7:fc:da:5d:ff:0e:de:99:
         d0:20:53:f3:3e:e2:fc:ef:4b:2b:ff:4b:54:35:7b:d7:db:f8:
         e2:61:d6:28:1c:7e:ae:19:40:6d:15:c1:ba:59:7a:4e:88:f9:
         57:c4:dc:31:26:66:28:39:59:c8:d5:47:f8:87:ab:cb:fd:0d:
         a0:26:01:e3:9d:86:7c:71:eb:bc:b4:b0:62:8f:52:cf:c9:30:
         08:44:99:4d:a7:9f:d0:8f:7d:a1:cf:41:64:d7:50:44:59:a8:
         28:1f:3c:41:9c:06:e1:27:71:ba:62:a0:94:6b:01:82:66:39:
         27:d8:d7:b0:b3:66:68:15:ac:79:bc:16:7f:db:e4:82:cd:2a:
         63:fd:dc:48:c4:1c:b5:4f:8b:16:08:2c:7f:44:6e:ce:98:1a:
         a3:cd:df:3b:d8:98:2c:94:7b:d8:a9:22:31:1e:0b:81:03:a0:
         67:ff:25:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:13:23 2026 by rpki-client