Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ea6e594-9582-38ef-ae02-cefadd432a0f.roa
File:                     5ea6e594-9582-38ef-ae02-cefadd432a0f.roa (raw, json)
Hash identifier:          xA/lTOwhpS/DJahlli/1wOybWKh9wJm6+/tfhGQj7gI=
Subject key identifier:   0F:11:82:20:3E:4B:6A:F5:CC:B5:42:CD:2C:32:3F:77:F0:F0:36:0C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D3B4B58A768047EED6AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ea6e594-9582-38ef-ae02-cefadd432a0f.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:1009:a121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:3b:4b:58:a7:68:04:7e:ed:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=e2dab1ca-34f7-4b99-b5b9-489c2881371c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:ac:3c:75:1b:cd:d6:39:a5:5e:38:9f:ed:
                    14:ef:1c:29:c1:2c:09:0e:6e:df:87:7d:8d:50:4b:
                    35:2c:65:dd:91:a9:b0:6a:3a:35:f5:8b:86:c8:09:
                    3a:94:6b:54:72:34:82:7c:2c:6a:f9:cb:a9:77:7d:
                    5a:8b:f6:de:e5:8e:8b:83:74:47:1f:09:e6:9e:cb:
                    ea:3d:ff:a1:9b:a5:ae:3d:64:06:fd:2e:82:a0:e6:
                    7e:0c:05:67:9e:1d:26:b7:b6:7c:00:d5:0b:89:74:
                    9d:17:79:d6:c8:58:33:69:0b:54:e5:2b:ba:af:59:
                    07:35:91:6f:fa:d2:a3:ce:1d:e4:3a:ca:03:d7:3d:
                    ad:63:f9:de:6a:ae:68:69:b3:df:18:f3:8d:4b:be:
                    bf:12:11:67:ab:02:2a:4d:2e:8a:b1:d0:4d:e7:87:
                    e1:d6:34:ca:f2:8d:35:d5:fa:56:fd:14:18:87:81:
                    83:dd:ce:61:3a:55:05:c8:44:e3:2c:87:0f:eb:7d:
                    04:69:ae:b7:59:6c:f9:1e:42:53:74:10:b8:5e:68:
                    f5:d6:fe:28:78:7d:9d:03:59:b5:24:50:84:49:63:
                    ea:59:97:22:5c:a2:27:cf:f7:21:3c:0a:5f:85:c1:
                    f8:d2:fd:8b:aa:56:b3:42:4e:bf:73:76:ea:2a:45:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:11:82:20:3E:4B:6A:F5:CC:B5:42:CD:2C:32:3F:77:F0:F0:36:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ea6e594-9582-38ef-ae02-cefadd432a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:c5:db:ab:4a:ea:c7:20:4e:1d:1e:74:3a:f9:65:4b:86:
         3f:36:42:36:a9:6c:0f:2a:dd:be:0c:9a:2b:93:5f:eb:f8:3e:
         2d:28:d3:31:87:71:46:5a:56:d8:37:e5:66:45:6d:50:5e:d5:
         fc:87:5e:c9:36:ba:63:4c:de:3d:27:28:e3:2b:17:a7:50:93:
         5d:25:c2:52:1c:c3:2b:d6:a7:16:80:b7:ff:f0:d1:15:16:66:
         ba:b1:8f:34:5b:e6:2d:9c:55:a7:9a:02:cb:9d:e3:5e:98:e7:
         39:46:eb:58:ec:89:8b:a9:22:0d:f6:0c:1e:75:5f:67:8d:d7:
         3b:11:1a:9d:d5:41:ed:86:29:6e:ad:ea:1d:f5:85:3c:2e:7c:
         2a:7c:11:ca:bf:fb:8a:41:44:52:7f:3d:62:f0:90:11:92:83:
         80:23:21:0b:9f:9e:50:2e:07:97:df:d1:06:43:a0:a1:07:f8:
         fb:b3:89:3b:19:fb:2e:92:1d:7d:68:b8:d9:60:d3:ca:a7:f7:
         34:aa:6d:9e:e7:41:09:8e:6f:0e:a2:8a:b6:b2:9e:18:a7:2f:
         6c:38:45:32:3a:44:82:f5:5d:61:fc:dc:1d:7e:42:84:b8:07:
         7d:41:5e:39:4f:1f:39:13:ad:0d:f9:53:1c:95:e4:a6:4c:ad:
         6c:57:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:26 2026 by rpki-client