Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2dd2f2f-5771-3e4f-b6bd-f0caef88426f.roa
File:                     a2dd2f2f-5771-3e4f-b6bd-f0caef88426f.roa (raw, json)
Hash identifier:          +dw53FFOjUrWuDXJ2YCelvGy57aE7n5pGi0cF9svgMI=
Subject key identifier:   F7:0A:F8:F2:A4:D1:0F:7D:B8:01:F8:A3:E2:55:7F:E8:C8:BF:01:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D2F2B4D33EE98B6894E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2dd2f2f-5771-3e4f-b6bd-f0caef88426f.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100f:b1b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:2f:2b:4d:33:ee:98:b6:89:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=d875ff56-0604-46a1-b651-9c2e7e31882a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:04:84:94:b1:06:96:cd:3b:6b:28:56:dd:f8:
                    85:8f:67:6a:01:dc:15:7a:3e:1d:a6:5c:0a:a9:a9:
                    46:26:0c:3f:1a:01:58:be:2e:1e:ab:86:97:be:22:
                    87:78:05:c3:24:73:71:d6:35:95:fe:02:eb:33:e8:
                    3c:74:80:02:6a:47:02:fe:94:62:f2:c9:10:5a:01:
                    ac:02:7c:31:eb:68:8c:89:6f:72:46:9c:e9:bb:81:
                    62:74:5a:66:3d:2e:b8:dc:09:a4:38:8c:42:78:c9:
                    4b:30:60:77:86:04:87:ad:85:8e:7a:d7:6d:d9:8a:
                    e3:e8:15:a0:21:c4:e7:f7:81:36:e3:21:7d:c2:fd:
                    fb:c7:22:6f:50:2f:b0:51:fd:6a:8d:8d:06:42:e3:
                    7b:df:c2:0c:60:48:f8:8f:39:2d:83:14:44:bb:32:
                    d2:4d:1f:25:5d:a0:3c:c6:f0:b4:cc:84:45:41:26:
                    d6:30:c5:84:48:f9:d3:62:2f:b9:a5:0d:90:7b:0b:
                    5c:02:02:ab:58:ac:52:2a:c8:13:98:33:25:2c:39:
                    35:6b:6d:d7:57:fe:24:1b:5b:da:55:7e:29:f3:d9:
                    68:bf:d0:7d:49:2b:38:24:0d:16:98:e1:b4:65:a9:
                    1c:eb:1d:62:9d:52:73:98:77:50:4a:94:81:fc:ba:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0A:F8:F2:A4:D1:0F:7D:B8:01:F8:A3:E2:55:7F:E8:C8:BF:01:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a2dd2f2f-5771-3e4f-b6bd-f0caef88426f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:b1b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:40:c6:d8:b3:b6:19:a5:03:af:12:a2:62:57:9d:19:c8:
         0e:53:27:a3:37:1f:b8:3c:46:e6:bf:4c:48:66:fe:55:57:53:
         e1:b0:c6:47:01:b5:73:dc:16:be:f3:0a:ef:18:bd:d5:04:2e:
         3b:20:d2:39:7c:e6:11:fa:a7:a1:f4:34:ac:c0:1e:a8:02:0a:
         11:28:9a:66:72:09:81:ee:97:d2:b4:49:dc:c8:0e:89:ff:41:
         a4:0e:ba:f6:73:d6:83:ba:38:ee:b8:eb:48:c3:15:25:6f:bb:
         d7:b0:63:6e:ff:58:a7:fa:35:28:25:37:e3:d7:08:c9:aa:46:
         15:eb:c9:d1:4f:f7:38:eb:ae:86:c6:2e:86:4f:3f:a1:ad:69:
         1d:0d:9c:26:ff:33:67:95:45:2e:f4:f6:cf:71:a1:ec:7f:03:
         bc:42:ca:37:36:3c:95:6b:ad:4e:a3:af:72:11:27:78:d1:9e:
         68:c0:51:9d:74:1a:3d:15:9e:93:d1:4e:be:1a:00:af:19:01:
         2f:1a:38:fb:83:a3:56:1b:85:7c:a4:2c:2e:5d:f2:f4:f7:c7:
         b6:d0:98:e2:e0:b5:ca:89:1d:6c:3d:72:9a:fa:84:dc:c7:8b:
         09:eb:3f:2a:91:14:d2:9f:f0:5e:33:60:66:f5:d3:4b:07:7f:
         a2:92:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:14 2026 by rpki-client