Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a749de6-9d5a-3abd-96be-c42291c7c683.roa
File:                     5a749de6-9d5a-3abd-96be-c42291c7c683.roa (raw, json)
Hash identifier:          9249DPKnKgkQPsSjj8BA4ITwo65XmrXj/AnCT8C1zQY=
Subject key identifier:   D4:A8:8F:1C:0D:5A:4F:E7:BD:37:0C:91:D1:9A:9C:0C:22:24:E4:02
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D84831AAA90935B7F533A8B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a749de6-9d5a-3abd-96be-c42291c7c683.roa
Signing time:             Wed 15 Apr 2026 19:12:26 +0000
ROA not before:           Wed 15 Apr 2026 19:12:26 +0000
ROA not after:            Tue 14 Jul 2026 19:12:26 +0000
asID:                     6167
IP address blocks:        2600:1004:a125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:84:83:1a:aa:90:93:5b:7f:53:3a:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:12:26 2026 GMT
            Not After : Jul 14 19:12:26 2026 GMT
        Subject: CN=2923c41e-4530-4cfb-9a9f-1d3b9caa3dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:d8:14:d1:cc:db:65:10:6c:91:97:f1:cb:
                    07:f1:ac:26:6f:e2:34:78:cf:a7:af:05:95:50:85:
                    ad:d6:27:64:f1:65:f8:2d:f6:f0:c4:79:c1:69:78:
                    bf:98:39:da:a2:9f:f6:11:50:29:88:66:d9:72:e2:
                    a2:17:a3:21:93:bc:d9:80:18:e5:19:f5:75:a4:5d:
                    b2:4d:5e:b4:ed:38:41:dd:db:90:5b:5d:e4:6c:e4:
                    84:8e:ed:56:80:23:be:b9:49:72:a0:fd:e2:03:ea:
                    84:a5:a4:61:d2:c7:b9:4f:e0:0d:f2:70:49:2a:72:
                    28:00:f0:9e:17:30:12:89:79:cf:b2:86:25:43:c8:
                    7e:ec:e5:7b:a8:4a:98:83:91:ad:92:bf:35:74:04:
                    52:ff:45:80:91:4f:4b:e6:d0:30:6e:6c:70:bb:f2:
                    ad:b6:b4:9b:d4:de:61:c2:b4:8f:58:5c:c1:b6:de:
                    01:5a:c8:35:2c:b3:00:00:ec:b2:30:42:b4:0b:88:
                    63:55:cd:33:52:b4:d3:3e:35:c6:37:c0:71:79:2f:
                    f2:de:86:76:94:41:b3:02:57:a0:54:58:d1:08:2b:
                    4b:4e:66:f1:1f:d6:ef:eb:b2:44:4b:e8:88:04:ff:
                    96:16:cc:ae:38:c2:b4:0e:f9:89:45:64:cf:b1:8a:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A8:8F:1C:0D:5A:4F:E7:BD:37:0C:91:D1:9A:9C:0C:22:24:E4:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a749de6-9d5a-3abd-96be-c42291c7c683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:a8:a8:15:0c:4d:53:cb:ba:b2:89:f5:73:e4:28:8b:b5:
         b1:4a:30:ac:45:5a:7b:4e:b1:14:c9:10:2f:c7:fd:e9:48:22:
         6d:a4:0e:4a:15:f4:1a:69:4c:f6:df:9d:12:0d:19:75:43:69:
         0f:0e:ce:29:fa:e7:80:cd:3a:5a:6c:ba:fc:a4:0b:14:c8:e9:
         65:1a:d0:34:af:a1:53:ab:0f:e1:fe:45:03:f0:a0:00:04:54:
         fd:d6:09:83:d7:e6:b4:1f:49:11:bc:a1:73:c1:c7:b5:f1:bc:
         e4:a5:c4:c0:e3:8f:ab:77:31:db:36:0d:a5:da:65:02:cc:3b:
         06:bb:f9:26:4a:d8:28:e2:c2:ec:13:e3:c9:5c:95:0e:d1:53:
         0a:a4:e8:73:75:ce:a3:6f:26:90:76:ae:02:7a:57:42:10:ba:
         6d:01:0d:ca:c2:fd:11:fe:a8:31:a0:6a:94:dc:31:00:5e:06:
         ae:d7:a9:70:e6:2f:49:04:3f:01:ea:d1:c5:ce:1c:2b:8b:19:
         20:bd:79:b4:18:1b:ae:5b:6f:59:39:a8:4a:5c:d6:ea:60:56:
         ef:89:2f:8d:75:98:2f:7d:95:be:b5:a0:d6:21:6d:bd:2f:c7:
         89:af:22:bd:c2:88:b7:63:44:bd:37:94:a5:23:a3:d2:81:25:
         47:d8:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:54 2026 by rpki-client