Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa
File:                     95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa (raw, json)
Hash identifier:          abfNYZnkRuzqza11w+1jCCcqa2vYcl+EbutxTqY8NpU=
Subject key identifier:   84:A2:92:76:35:81:83:9D:FB:FB:FE:36:F2:D8:69:A8:7F:AF:4E:31
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D24510AD34D92FDDF0A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100d:b1ca::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:24:51:0a:d3:4d:92:fd:df:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=324be798-37e2-4fca-945a-51930c62fe4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:6d:6c:51:37:12:fe:80:83:77:35:1a:89:
                    56:e8:0b:ee:70:90:b0:80:ed:0c:59:d0:ed:08:9c:
                    04:36:c9:88:c5:c9:93:e2:37:f1:74:52:3a:c1:23:
                    36:44:a7:1c:17:2c:4a:7d:70:74:0f:3f:7f:c9:1a:
                    14:d0:3e:fe:09:d2:8f:90:95:d4:4a:43:a5:59:1f:
                    64:ac:19:9f:1b:27:47:32:52:33:7e:cf:26:6c:47:
                    e7:a0:7d:61:82:7e:a2:5b:8e:c7:4f:10:d6:fb:19:
                    52:04:7f:c3:f7:4b:c3:c7:ed:f3:d0:70:42:81:f7:
                    77:fa:e3:ba:7e:ae:d0:a4:97:76:d4:25:d2:02:48:
                    b9:d7:f0:b2:bf:4e:29:31:39:ec:06:ad:59:58:32:
                    a9:0f:6d:71:b0:23:7e:60:22:72:8a:9c:ef:7e:69:
                    b9:a5:93:91:cd:d8:f3:c1:0f:64:34:74:d6:c6:0e:
                    03:f1:fc:3b:7f:3f:f6:1c:5c:43:f6:06:3a:81:53:
                    26:7a:59:9a:2b:ad:a9:b3:90:fd:b1:ba:5d:7f:0c:
                    49:89:5d:87:4a:60:7f:aa:9e:a2:15:1d:bb:ed:b0:
                    65:b8:37:0f:43:60:6c:11:86:27:ca:d7:e3:40:6e:
                    e6:87:37:88:dc:b7:e6:12:16:5f:6c:b0:d1:12:f6:
                    6d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A2:92:76:35:81:83:9D:FB:FB:FE:36:F2:D8:69:A8:7F:AF:4E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/95b0ed1b-bc12-3ae3-a9be-a739fb77d869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1ca::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ef:c1:2c:97:28:ed:13:52:94:a8:e7:9f:be:ed:b4:35:43:
         17:f6:54:f0:5a:24:40:5f:ea:e1:70:6d:d3:20:ef:b7:ce:c1:
         bd:57:05:3d:c8:3a:a1:9b:01:cf:e8:19:c7:34:74:18:03:2e:
         55:2d:6c:a2:0e:0b:cd:c9:e9:cc:21:84:bf:92:f3:21:01:43:
         d8:a9:a0:de:43:be:3d:af:d9:26:a2:f4:a0:b8:83:90:8a:cc:
         50:9b:e3:3a:df:8a:ce:92:d1:83:a3:7b:c8:08:f7:5b:1d:f8:
         70:af:01:ad:e2:dc:e3:ab:71:ff:ea:2e:e0:73:18:d1:20:15:
         d8:22:b3:22:75:ef:a0:89:11:db:1d:66:8d:4c:99:fb:ec:c3:
         ae:29:68:12:cd:34:a2:72:5e:0d:7d:d2:b1:cc:10:7b:61:76:
         ae:60:12:e7:70:fa:80:5f:d6:28:f6:81:d5:51:36:93:33:8b:
         ba:ac:1f:10:9c:ab:cb:d7:8a:cf:a8:f9:37:85:51:cd:a4:73:
         7e:02:39:f5:28:ca:a3:e4:ab:1e:22:83:70:e0:f8:d8:ee:e7:
         58:8b:66:cf:f5:c1:f0:5d:56:8a:56:44:27:7c:63:c1:cd:66:
         0b:54:64:f4:8a:4d:9e:2c:60:5a:b2:61:a2:84:f9:b8:79:d4:
         26:ed:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:07:19 2026 by rpki-client