Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef1a11f-7f03-3eab-bc1d-a65d24dde862.roa
File:                     8ef1a11f-7f03-3eab-bc1d-a65d24dde862.roa (raw, json)
Hash identifier:          U4ei3psS9/w1g7lvgADCy3BWM5+ehwLUimjwlGa0djQ=
Subject key identifier:   51:5F:92:3B:35:17:66:55:D9:31:72:2D:45:CD:B0:F0:9E:1B:04:3D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67D38D8F20BBB1E6344420
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef1a11f-7f03-3eab-bc1d-a65d24dde862.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1000:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:d3:8d:8f:20:bb:b1:e6:34:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=98636710-b8ff-4633-9d42-ec1d37416f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:c4:75:0b:fd:b3:f8:28:72:cb:bb:5e:42:
                    45:13:26:32:00:04:c5:28:a6:ff:09:d8:91:2e:4c:
                    e5:24:76:34:d8:1e:83:2e:88:b0:45:51:3a:9d:99:
                    4b:da:23:18:5e:33:3b:13:8e:52:cf:fa:33:cc:5f:
                    03:92:78:4a:34:82:94:8a:e3:ad:39:cd:50:95:4f:
                    70:e0:18:b2:07:ca:42:66:e3:4d:42:45:4b:64:33:
                    70:75:0a:2c:0d:ee:6a:df:0e:b7:26:b6:0a:22:51:
                    db:8f:ea:a9:b8:db:56:6a:2b:18:56:d2:21:eb:3d:
                    d2:7c:6a:0a:24:1f:c7:7f:8c:85:07:e1:35:6b:66:
                    4f:3c:d4:a5:df:c5:90:07:5c:94:49:da:8d:87:46:
                    a6:e7:38:93:92:4e:5f:44:78:21:24:d2:9e:1f:81:
                    c3:5e:9c:8f:e9:64:0d:b6:71:3d:a7:99:2f:c1:20:
                    5d:f4:da:22:c2:fd:d4:84:83:70:7b:fb:61:38:c7:
                    b5:1d:d8:8d:2e:43:e5:30:ab:7a:46:cd:99:6b:57:
                    73:98:63:f4:48:5a:6f:00:7f:d5:8b:da:aa:25:cb:
                    0c:08:98:6a:e8:07:2d:1c:3e:14:11:ed:6a:73:1f:
                    02:81:ee:dd:cd:13:3d:5a:fe:d2:a7:29:d0:03:20:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:92:3B:35:17:66:55:D9:31:72:2D:45:CD:B0:F0:9E:1B:04:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef1a11f-7f03-3eab-bc1d-a65d24dde862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ea:0c:69:d1:90:b3:b7:3c:93:b9:77:d5:6a:ef:47:c4:dc:
         10:e2:9c:d7:74:69:3d:71:ce:28:1b:81:90:3a:82:4b:58:58:
         1e:b2:c9:87:d4:d0:71:01:11:08:3c:93:51:66:4b:65:5d:14:
         67:6c:33:aa:98:6e:25:68:cd:42:99:9e:dd:9a:b9:fe:71:5a:
         54:c6:45:77:94:ce:80:b6:14:bc:55:07:62:09:e3:7c:08:59:
         c4:c6:cf:4a:84:3b:71:73:e7:aa:b6:ac:ad:53:b0:91:83:b8:
         8d:49:55:35:05:3d:34:8b:17:01:0d:f5:9c:6d:42:bd:ab:c1:
         f8:19:3c:8d:2f:10:21:57:6b:6c:5b:c9:10:2f:bb:8c:b1:40:
         b8:7a:dc:92:2a:b7:e5:58:9a:a1:05:00:24:d6:71:f9:27:41:
         41:6d:5f:7a:05:60:7f:d9:63:3b:ef:2d:9b:d0:88:b0:73:fd:
         60:ef:3d:41:c5:e4:f0:b3:63:13:e0:0c:aa:d7:e1:cf:fb:a9:
         72:04:da:d2:46:fb:fe:70:2b:92:02:c4:67:60:1f:e7:b0:f6:
         24:6b:9c:ff:7f:cc:08:22:d2:b1:f1:07:66:29:4f:62:6e:c2:
         fd:85:8b:89:08:1d:02:58:5a:fb:78:e3:dd:78:2d:64:5a:30:
         21:cd:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:59 2026 by rpki-client