Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a5985cc-1523-3fdf-ae7c-3b6679f3d772.roa
File:                     6a5985cc-1523-3fdf-ae7c-3b6679f3d772.roa (raw, json)
Hash identifier:          pNWpfypggiqPh/bbCcynehBmXZ9qqzhiwLUkR45Igbs=
Subject key identifier:   37:EC:0F:98:1C:DB:67:6E:23:DB:FA:CD:D4:E3:CD:F2:8F:81:4C:46
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67D6B323C8F34E129FB740
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a5985cc-1523-3fdf-ae7c-3b6679f3d772.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1001:b138::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:d6:b3:23:c8:f3:4e:12:9f:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=3f4f29a9-262d-42c3-a2e9-3aa804d82cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b4:50:ee:92:f4:74:1f:a8:85:5c:2b:2e:9c:
                    f5:4f:f9:30:b2:e8:13:8f:a0:38:63:de:56:15:4e:
                    5d:0f:ed:2c:17:6d:b6:3e:35:db:71:4e:a0:2c:85:
                    f1:73:f3:5d:86:20:74:ed:a4:6e:bf:be:58:bc:8d:
                    c7:d5:a4:0e:66:34:0a:72:4f:f7:2d:d1:44:67:af:
                    21:45:c3:eb:d3:f4:38:20:24:c6:96:85:df:a5:9d:
                    f8:d5:b8:f8:eb:cb:59:78:33:eb:53:e5:3c:26:12:
                    a3:75:44:34:ea:2b:16:75:71:f5:5d:40:45:b3:f2:
                    6b:57:6a:0f:64:30:52:60:a9:df:9d:dc:69:94:07:
                    79:cf:27:3c:90:14:07:94:92:a4:bc:2b:c2:61:45:
                    d0:30:42:4d:01:71:ae:fa:bd:0e:28:2f:45:a0:c5:
                    67:c4:94:1b:9b:b5:5b:7d:d6:8d:0b:d0:ee:1d:64:
                    82:98:d7:bb:c3:56:f7:f3:8e:58:4a:0b:2b:09:b3:
                    46:93:32:a0:56:f2:28:8e:b0:f4:c1:8e:01:ea:61:
                    e2:cd:23:b0:f0:ae:b7:67:5d:89:6f:82:51:c2:77:
                    37:b5:60:dc:c9:82:5b:23:49:dc:58:fe:bd:6d:1a:
                    cf:3e:c2:b7:b3:81:1b:70:ef:04:6c:81:b0:42:6a:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EC:0F:98:1C:DB:67:6E:23:DB:FA:CD:D4:E3:CD:F2:8F:81:4C:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6a5985cc-1523-3fdf-ae7c-3b6679f3d772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b138::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:48:69:a3:5f:cd:92:c5:b3:cb:c1:e3:07:69:68:cf:d0:3c:
         35:9a:5d:d4:c7:c5:43:00:84:01:58:65:cf:18:67:26:03:f2:
         2c:ba:5e:8c:a5:08:8a:ea:ce:d0:6f:9f:4d:1f:69:eb:f8:50:
         d9:a4:f0:f7:66:d7:78:09:dc:05:9f:d6:0b:02:71:fd:d2:e6:
         da:09:bc:dc:37:14:87:3c:fe:03:6b:29:00:e7:91:bf:c9:83:
         81:c3:a6:10:9d:ca:68:31:3e:c7:81:7b:52:f3:57:2e:51:63:
         d7:3e:15:4d:10:21:57:22:be:96:21:11:b4:63:f9:5a:d5:6e:
         93:4a:65:d7:98:29:1e:52:85:55:62:d1:8c:a8:bd:65:35:85:
         9b:99:54:0c:72:34:3d:a1:0e:14:cc:60:32:b1:13:b0:8d:a1:
         bf:01:74:e6:14:f1:5d:a2:9f:55:f2:aa:83:58:57:47:27:cf:
         30:b2:71:99:7e:2a:7f:33:75:61:a8:99:90:36:ac:fd:a9:78:
         a0:c5:87:93:e6:40:92:a6:4d:a6:f7:92:c3:b9:e6:4a:a3:67:
         b7:8f:a8:70:3f:f8:21:4f:49:73:f4:6d:37:09:bd:d5:b4:80:
         7d:d5:61:64:3f:df:ad:6d:ba:a2:d2:35:e1:5e:a6:30:23:ee:
         99:a1:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:05:25 2026 by rpki-client