Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45b1b97f-3223-3ce3-98b9-afc0b4cb9a9b.roa
File:                     45b1b97f-3223-3ce3-98b9-afc0b4cb9a9b.roa (raw, json)
Hash identifier:          bkfNHtMSwfDif8Y8qjxfx78dtBVQoqJEN4kku5Pk2KM=
Subject key identifier:   7F:82:67:84:F1:51:7D:72:4C:E0:DE:84:D6:25:32:D8:25:CC:5E:19
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67A29E288BF6043BD5C6C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45b1b97f-3223-3ce3-98b9-afc0b4cb9a9b.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1005:b040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:a2:9e:28:8b:f6:04:3b:d5:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=8cf34111-6447-4bba-a562-8a5039ab0302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:c5:30:96:c3:bd:bb:ca:17:41:29:2f:c1:
                    b5:5c:37:a0:93:54:87:10:75:d0:34:ad:6b:cd:e1:
                    35:8a:47:3f:fb:4a:d1:ae:22:1b:5c:15:a7:25:e7:
                    de:52:cb:d5:89:62:10:78:1d:a0:60:d8:76:15:f0:
                    72:85:af:77:70:04:dc:39:c0:62:52:df:1b:65:9d:
                    88:43:f9:30:ec:9d:c8:f1:89:52:14:8b:10:e4:59:
                    39:a8:46:22:71:41:37:d7:13:0b:50:fb:98:00:5e:
                    6f:13:65:7e:12:b0:c8:02:fd:9b:8b:6a:79:d6:37:
                    ef:47:bc:5a:c7:03:d5:ec:3f:2c:fe:88:98:a6:0d:
                    0d:14:69:ea:78:7e:00:4f:69:b9:ed:9e:b0:0c:d0:
                    ac:8c:a5:d8:a3:de:4c:45:6b:60:82:df:86:16:d6:
                    b8:25:89:61:40:f2:a8:e5:5e:0d:62:36:a1:a6:ad:
                    20:16:46:ea:df:94:da:d1:c4:0d:4e:45:de:1d:92:
                    bd:ee:4c:52:3d:a7:4d:8c:69:cf:db:96:b4:48:cd:
                    2c:e3:9e:86:00:f3:33:72:5a:cc:90:f3:f7:31:87:
                    1c:5c:75:24:d7:69:df:03:3d:7f:fc:9e:88:e8:93:
                    88:5e:db:d9:25:16:84:f8:f8:14:2c:fd:6c:f3:06:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:82:67:84:F1:51:7D:72:4C:E0:DE:84:D6:25:32:D8:25:CC:5E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/45b1b97f-3223-3ce3-98b9-afc0b4cb9a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:70:2c:b7:57:02:f3:a3:00:ca:c8:f7:ab:fe:ed:99:5e:4c:
         c8:d4:61:46:02:b3:a5:be:6c:b9:12:d3:3b:be:26:ab:dc:06:
         a7:ea:97:c7:a2:fd:75:ec:ee:f4:a3:7a:5b:b1:08:13:1d:ff:
         da:19:5e:c1:86:55:f2:05:13:75:81:a9:e4:de:e7:ce:46:a2:
         57:5c:b1:b4:cf:a7:03:ab:08:1c:cb:cd:32:88:47:2a:be:03:
         f3:bd:40:44:67:6d:ed:66:c1:0e:1b:fc:31:0d:35:84:e0:4e:
         d6:2d:13:97:22:66:76:0b:9d:e7:84:b1:74:b4:73:e4:38:08:
         fe:41:53:7f:78:58:f6:21:5b:cf:6e:4a:74:a4:e1:1c:a5:6b:
         bb:50:aa:f2:eb:7a:34:64:dd:0a:b8:9c:a2:ae:44:3e:3b:15:
         d8:e6:b7:30:8f:74:c5:d2:35:4d:a2:8c:84:14:a2:76:9d:69:
         b1:85:6d:8e:73:ba:73:0b:45:87:f9:38:5a:9e:06:16:72:cd:
         79:62:7f:66:aa:3e:27:5a:00:de:63:7d:31:72:02:fc:5d:41:
         81:50:f1:24:50:0a:e4:20:8b:f2:01:1f:16:99:14:86:be:34:
         fd:df:ba:11:bd:f3:48:b5:23:da:62:9a:e0:79:5f:1a:e7:47:
         6a:06:4d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:07:30 2026 by rpki-client