Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/713441f8-36f1-36d5-a50c-2635e4547291.roa
File:                     713441f8-36f1-36d5-a50c-2635e4547291.roa (raw, json)
Hash identifier:          KFdmJuMbQbOo6nFJAkeNufyuxAKyVIoW3ShHoID1VJ0=
Subject key identifier:   60:CC:F8:CB:AA:A4:23:A2:73:EC:19:43:AC:98:04:36:A1:58:E0:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D8100A73F28B5679D7B7F0D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/713441f8-36f1-36d5-a50c-2635e4547291.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        2600:1014:b320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:a7:3f:28:b5:67:9d:7b:7f:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=93f06c3f-6b44-4138-a44d-a4914243e54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:d2:41:40:ae:d2:56:9a:36:ba:98:c9:f6:
                    ea:1c:36:2d:a9:e6:5c:46:fa:37:14:47:e2:46:17:
                    fb:84:e5:fc:d8:36:ab:7c:5a:13:b6:02:e4:f4:4c:
                    ee:fb:77:45:8a:29:dc:c7:ab:8e:ba:b5:5b:a2:9f:
                    26:bf:91:41:85:48:65:71:fd:3c:b1:92:4f:47:41:
                    8c:9a:df:f3:e6:58:69:6d:0d:9d:13:9a:10:a7:df:
                    c6:2e:fd:02:ba:93:bd:db:6a:af:4f:0e:ff:e0:0b:
                    e1:33:5b:1f:c1:34:42:f1:ad:4f:ec:d3:57:72:80:
                    e6:28:a5:dc:99:29:38:d0:51:23:dd:5a:2f:d9:c8:
                    fd:06:25:3f:9f:ac:91:b8:df:4f:84:2d:6f:71:6e:
                    8a:e9:a0:ca:5b:73:be:9e:e9:b8:d3:6f:a4:87:99:
                    05:ba:34:1f:6b:2b:7f:90:9b:c1:b7:86:00:0b:9e:
                    bd:91:f1:d8:1c:d0:5e:ac:c9:68:b3:9d:84:2e:95:
                    df:fc:a3:2a:0e:06:12:ce:3c:32:66:22:82:da:be:
                    5d:9c:6c:49:bb:d3:f7:fa:55:00:82:0f:e1:11:b6:
                    45:ad:c7:22:c0:b3:8b:8c:ac:a0:4f:d1:36:d2:55:
                    64:7c:16:09:2c:48:7c:ba:31:98:3b:df:ce:92:91:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:F8:CB:AA:A4:23:A2:73:EC:19:43:AC:98:04:36:A1:58:E0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/713441f8-36f1-36d5-a50c-2635e4547291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:a0:2c:c8:e5:28:06:52:7c:9c:88:1e:69:73:af:99:81:
         51:16:45:8b:51:dd:b2:e6:7c:20:01:79:83:04:cc:52:64:80:
         8f:95:4f:20:00:c8:53:9a:c8:c8:9f:31:5b:aa:32:5f:a8:08:
         0a:d6:d7:51:3d:d6:ab:49:d0:71:18:d1:03:83:a1:86:de:ba:
         72:d5:ca:60:c7:46:4d:5c:68:f8:3e:0f:19:c9:4f:9c:e0:9b:
         bf:26:bc:63:47:1a:ba:9f:e8:54:d9:cc:e8:48:43:e3:eb:a7:
         f9:34:4b:77:cd:4f:f9:0f:40:5f:1f:99:dd:a0:14:ce:66:b6:
         a2:3a:8e:81:99:ea:6e:60:7a:8a:a1:0b:e0:b8:97:1b:d2:99:
         c1:af:12:da:e5:63:8a:5d:37:70:17:76:ea:c7:eb:cc:19:8f:
         7b:45:0d:c1:27:71:70:07:d2:9f:ad:f3:12:70:91:d5:11:b4:
         7a:e1:39:5f:fb:bd:81:8c:0f:6f:51:e3:a0:a5:1c:29:84:f8:
         b7:6a:a8:9d:fb:42:b1:b9:b9:5a:f6:c2:18:aa:c3:b7:41:ff:
         f9:03:12:52:a8:b3:77:b7:b9:3c:5f:02:79:75:c3:15:a8:b1:
         df:5b:7b:e5:39:a8:61:73:33:a2:28:00:c6:3e:ca:c4:b7:5e:
         dc:f6:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:32:11 2026 by rpki-client