Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa
File:                     59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa (raw, json)
Hash identifier:          Vbs6u6pJhy7Pfajk2nwgKsL6PdDb5MgksPluPKp0IVA=
Subject key identifier:   3B:C1:1F:47:ED:6F:9B:93:EE:65:4C:08:92:DF:65:86:42:03:D6:C5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67ACD316BD659E443B2000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1008:b060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:ac:d3:16:bd:65:9e:44:3b:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=3cf8fefc-f991-41e1-a17a-74143ce41c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:db:13:f4:59:bf:fe:7d:3e:3d:0a:30:2f:e1:
                    c4:6d:98:6a:20:d8:86:76:c2:54:31:29:c0:8e:4e:
                    f8:b0:2e:94:af:34:16:ba:e2:45:54:a1:1a:7b:61:
                    23:e5:e8:54:05:68:db:06:d6:f3:63:72:7b:d9:bc:
                    84:bf:49:be:e2:a1:f4:77:24:96:3c:83:66:8f:c9:
                    ab:00:38:7c:62:cf:4a:b4:d6:88:f0:aa:ed:f3:06:
                    10:c0:8d:e3:0b:74:30:4c:c4:10:c4:75:b9:8d:c5:
                    57:02:e1:f7:2f:9a:61:70:e0:fd:73:73:05:33:18:
                    b1:ef:a9:89:36:85:67:90:c7:ea:81:af:cf:dc:9f:
                    3b:e8:a4:e7:2c:ec:63:c4:48:b7:cd:96:5d:4f:89:
                    a8:a2:6b:0c:2e:d5:e6:c9:93:ce:4e:7a:68:06:86:
                    87:bf:ed:6a:d0:eb:82:c7:19:89:5f:53:0f:43:a4:
                    53:8c:6e:b9:61:43:4a:55:bc:92:7f:6a:21:3b:93:
                    c8:64:8b:80:e4:63:07:c7:81:d1:7e:8e:b2:6b:73:
                    1b:08:42:08:7c:0e:e9:7e:15:31:f3:10:fd:4c:7d:
                    68:76:30:3e:7d:60:5f:78:f9:d5:e6:eb:62:8f:f4:
                    b7:7c:6a:1b:57:8a:53:f4:c8:2b:3d:e0:a3:9c:fe:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C1:1F:47:ED:6F:9B:93:EE:65:4C:08:92:DF:65:86:42:03:D6:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:63:5f:c2:f5:f6:70:d5:3d:b6:5e:58:d5:40:b4:02:0a:66:
         76:70:c5:83:21:af:ae:9d:b3:13:6d:a6:1f:cd:71:8c:77:30:
         39:88:f0:b1:ca:2f:5b:d3:8c:32:14:2f:d3:99:04:b5:51:25:
         db:95:ba:55:d4:1b:ef:70:76:a6:16:af:a1:9c:4a:a9:bd:16:
         ed:b2:35:fc:8a:6d:19:f5:89:e2:74:4c:ee:13:09:a6:8f:a3:
         cb:94:e7:aa:e0:cb:44:f3:fa:53:3d:57:0d:30:5a:9c:2e:60:
         a9:fa:ec:f7:59:a6:4f:b2:15:a1:68:66:6d:0b:5a:fe:9e:6e:
         99:3f:ca:11:72:6c:c9:7e:28:a7:6f:65:cd:36:ab:ce:73:53:
         5a:b0:cf:d6:82:45:b1:6a:c9:57:32:ae:f6:3a:c7:d2:92:1c:
         b9:3d:42:d7:4e:27:92:0c:60:5c:da:14:fb:42:9d:b3:f7:61:
         b4:85:96:39:0f:c9:5b:dd:42:f8:81:05:e8:4c:4b:23:02:a4:
         c4:71:2e:70:b8:a5:4b:a1:50:51:d2:6c:ce:f9:0d:2b:49:a8:
         29:26:10:cb:d4:c0:89:54:2a:de:e5:09:73:02:6a:58:0b:48:
         20:49:7e:40:55:ac:7c:5a:67:9f:3e:72:f5:c8:71:25:87:90:
         42:13:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:03:26 2026 by rpki-client