Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8f251aa-f2d7-3840-a213-e4cb5446c019.roa
File:                     b8f251aa-f2d7-3840-a213-e4cb5446c019.roa (raw, json)
Hash identifier:          bPFIi3ZnP5vtTqSKFyXSqfLUBT9d9Y+hjTHSgJnr5nw=
Subject key identifier:   DE:8C:F4:4A:4B:7A:3A:7D:C2:65:99:64:1E:68:F0:7D:80:62:16:90
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D30910E3084B3E7954228
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8f251aa-f2d7-3840-a213-e4cb5446c019.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     22394
IP address blocks:        2600:1003::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:30:91:0e:30:84:b3:e7:95:42:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=cf3f0628-c8c7-4b0d-a38c-fe53f2f97336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:02:a2:b0:7e:d3:60:31:8d:92:f1:41:f3:
                    6e:b1:c9:06:f1:69:49:25:2b:5d:14:8a:90:74:85:
                    89:e0:ad:57:31:df:3a:7f:4f:bf:81:92:ee:8c:d0:
                    e7:49:3e:28:5d:66:60:9b:0b:6b:88:f7:7e:9d:03:
                    f3:30:c5:5d:bd:00:90:81:b1:a1:a7:ee:e5:df:49:
                    cd:6f:64:2a:b4:fd:1f:d8:92:90:c6:22:97:e3:e9:
                    a0:75:6f:04:23:69:cf:6b:34:aa:3a:88:f9:8e:68:
                    b1:af:73:04:39:64:29:f1:08:43:d5:ca:55:f3:8d:
                    11:af:38:16:de:93:ae:eb:07:95:5c:95:ec:57:32:
                    48:d9:05:5f:b8:42:fd:08:be:f1:78:ba:8d:ff:c3:
                    fd:48:53:11:b1:53:67:c6:76:3c:73:5c:83:52:dd:
                    54:3e:9b:4a:cd:15:ff:fc:49:c2:60:42:ec:b7:70:
                    d2:55:b4:3c:56:be:f1:71:83:f7:5c:a3:58:ca:53:
                    d9:8e:fc:56:39:30:9b:9f:01:72:89:60:98:3e:55:
                    65:d0:3f:ae:94:93:52:4a:e9:b2:db:a0:75:78:7d:
                    86:59:88:1a:0f:27:f2:4a:6b:78:72:6a:cf:b7:b4:
                    12:6b:c2:c0:a2:d6:52:d5:8a:d4:80:aa:44:41:cc:
                    c3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8C:F4:4A:4B:7A:3A:7D:C2:65:99:64:1E:68:F0:7D:80:62:16:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8f251aa-f2d7-3840-a213-e4cb5446c019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:4a:ce:34:02:ff:17:0e:e0:3b:2e:d9:dd:fa:8f:ee:d9:85:
         0a:4f:05:0c:3f:29:05:11:ee:ec:e4:8b:33:5f:d3:61:c1:f3:
         29:46:da:03:c7:9c:cf:f9:b8:28:96:07:73:73:fc:93:e7:58:
         96:d8:cf:6f:84:da:69:1b:4d:03:6b:05:d4:ab:0f:47:42:f1:
         7e:11:8a:eb:26:c1:6a:2d:76:ff:42:2f:cd:70:dd:c6:6b:45:
         4d:a4:c1:7c:19:1c:0e:9c:6c:3c:c3:06:ce:37:c1:a7:19:9a:
         2f:d2:57:e0:23:96:77:40:0b:7f:d7:f6:a5:e1:b7:6b:0b:23:
         8b:a5:f8:6d:d1:28:1e:65:b6:82:fa:96:d0:93:a3:b3:9b:c9:
         f7:5a:6c:25:66:7e:e8:a8:4e:6e:9a:59:7d:2f:70:da:74:e1:
         51:7f:3d:e6:7e:8f:f1:45:df:df:e1:42:2e:bb:8c:8a:ac:3d:
         a7:1f:02:92:b2:53:71:0e:e8:2e:78:ec:ea:98:de:a3:6f:7b:
         c9:0f:0d:08:9b:82:32:3c:93:2b:50:78:df:4a:6f:7b:0d:d3:
         f5:d2:0e:57:d0:d0:9c:29:45:03:be:21:bf:a3:46:69:80:68:
         3a:da:fc:b6:64:7c:98:2f:ea:dc:ce:d0:ae:ec:2c:bd:07:41:
         3c:e8:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:05:14 2026 by rpki-client