Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1dabcaa-20e1-3b23-b1e4-7940f9fa1813.roa
File:                     b1dabcaa-20e1-3b23-b1e4-7940f9fa1813.roa (raw, json)
Hash identifier:          3As/bUdnfmgA0A/qtiS3pBaiwyWCwBSFnrie/Xr5htk=
Subject key identifier:   32:ED:3F:E1:9D:10:C6:A2:CF:FE:D6:53:7C:7F:17:42:0A:25:04:10
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D83CAD70160D4FE30AD0E9DA0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1dabcaa-20e1-3b23-b1e4-7940f9fa1813.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        2607:f160:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:d7:01:60:d4:fe:30:ad:0e:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=bb25e0c1-ae94-4916-8c3b-51fe69ea4beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0d:91:ae:56:4f:ab:95:d2:e6:b8:43:82:8b:
                    78:f2:d9:14:3b:03:82:09:f9:1c:26:f7:11:fe:bb:
                    3a:ed:e0:9e:c0:50:60:3f:89:a2:c6:65:48:43:bc:
                    af:d1:56:24:ea:6b:5a:43:a2:6e:1d:4c:c5:44:f0:
                    23:84:77:cd:2b:fa:fc:2b:f4:f1:45:0b:f2:0c:cd:
                    b1:8d:2d:64:ab:04:39:b9:0c:f1:47:ca:8a:e0:37:
                    5b:db:be:d8:f6:52:59:f3:0f:56:f5:16:a8:3b:a2:
                    e4:73:9e:3b:18:c7:fe:cc:9d:98:77:87:88:d5:83:
                    b8:4d:76:13:16:69:92:a3:e1:9b:7d:3c:25:9c:b4:
                    2d:aa:7d:2e:f3:65:35:bb:7c:ee:1a:06:36:9c:95:
                    8e:81:ba:83:6c:7c:57:af:df:53:47:09:79:74:61:
                    ec:58:ed:a1:6e:cb:46:9d:af:13:58:5b:48:c6:59:
                    2a:e8:79:07:a5:38:ea:8c:f9:cb:d4:9b:60:17:35:
                    12:8d:af:8f:68:43:c6:e6:50:8e:b5:ac:9a:1d:81:
                    ec:5f:89:65:6c:52:8d:08:3a:ef:89:b2:38:2f:d8:
                    55:b3:a3:54:ee:c0:eb:af:02:1b:5b:67:0f:dd:4c:
                    14:7e:1e:55:1c:9a:cd:39:da:7c:ee:7b:68:29:3c:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:ED:3F:E1:9D:10:C6:A2:CF:FE:D6:53:7C:7F:17:42:0A:25:04:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1dabcaa-20e1-3b23-b1e4-7940f9fa1813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:ff00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d6:f1:0b:d7:70:01:5a:f2:7e:08:16:91:c2:03:ff:b1:62:
         a1:42:77:d9:0d:d4:8d:8e:79:40:cd:a1:b2:c8:98:6f:5b:cb:
         f8:ae:f1:ef:d9:a6:5f:0c:5e:44:ef:18:13:44:4f:8e:5c:05:
         84:c3:aa:e0:7c:97:e5:9c:4d:18:09:46:dd:af:53:03:a4:d1:
         a6:ca:7a:7f:06:16:c4:2b:e1:fb:67:c9:ae:68:e2:01:c2:09:
         97:8e:07:ef:46:3f:fe:19:03:31:b1:79:8d:b8:58:c2:32:0f:
         7d:6b:ae:1b:a3:fe:62:14:0d:fe:6a:bb:36:14:b3:a7:54:81:
         81:c6:ca:04:a5:99:21:c7:fe:58:b9:51:f7:cc:b0:94:76:82:
         1d:99:58:c9:1a:b3:33:76:16:87:9c:79:ef:ea:c9:1e:72:89:
         1e:08:17:84:44:8d:f4:86:0f:11:7e:8b:a3:4f:80:a6:bb:7a:
         3a:a5:8f:32:5b:67:5b:08:0a:64:1b:2c:76:b9:ad:8d:f1:41:
         85:5a:e3:60:a9:eb:a0:d6:5b:28:02:26:e0:df:a4:7f:52:6f:
         0e:9b:78:6a:ca:9a:6b:d3:53:43:1f:d1:fd:65:e3:2e:74:35:
         f3:5e:2f:1d:f5:b8:c2:e7:80:44:0c:63:7f:be:02:ad:c4:43:
         e7:95:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:58 2026 by rpki-client