Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa
File:                     b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa (raw, json)
Hash identifier:          Q1q3rnm86BU3Kw2Xoi6MJ9icFWcctvg/JpcawXk3Ul0=
Subject key identifier:   D0:25:BA:E7:DB:0B:E0:F4:77:33:D8:7C:E5:79:21:AA:64:24:1D:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E04360CE5DEDBC8DCC428A9C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        2600:100c:b298::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:0c:e5:de:db:c8:dc:c4:28:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=b9f08cf1-855d-409b-bc9a-a7798844e5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:5c:c1:8e:95:1e:29:90:70:b8:23:95:5e:
                    13:51:f5:41:a8:47:d8:db:d8:16:28:c6:04:cf:3f:
                    5b:1d:3b:49:85:a5:77:93:26:45:f0:a9:9f:9d:a3:
                    a5:e4:03:8b:97:49:58:f9:1f:f3:7e:0b:dc:d5:25:
                    9d:69:2c:53:53:bd:40:6a:ef:94:3b:4f:d3:9b:4e:
                    8c:8f:5b:92:7d:e4:2a:d1:5d:5f:5a:7a:02:0e:2f:
                    a4:dc:66:b1:6d:69:c5:bc:df:87:ee:64:13:e5:12:
                    bf:72:fd:72:c0:87:81:80:f7:d1:36:eb:f9:cb:b0:
                    64:89:8a:e1:7a:f0:2a:46:76:4a:0c:ea:40:1d:33:
                    33:aa:9d:6d:05:f9:2c:5b:62:f8:9c:1e:62:db:91:
                    83:4b:08:5f:88:31:f5:d7:bf:81:1e:6b:8c:0c:7c:
                    32:9e:23:d3:c9:46:99:6a:08:37:2d:9c:11:d0:69:
                    e2:65:e8:3c:76:76:3c:a7:87:a5:59:95:3e:26:e3:
                    d6:4d:fa:c9:15:ad:8c:41:be:b7:3e:6f:a7:c0:ab:
                    c9:cf:04:b2:cb:0f:1f:d9:94:5f:49:81:f4:9b:36:
                    18:0a:5f:39:45:f0:48:4d:30:71:3e:23:a8:83:57:
                    30:ca:1b:42:ed:8c:aa:04:7a:4d:f0:ff:e4:f6:32:
                    ed:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:25:BA:E7:DB:0B:E0:F4:77:33:D8:7C:E5:79:21:AA:64:24:1D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9dbf0a2-73cf-38ac-b297-7ea19e17b44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b298::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:de:f4:df:1e:5c:dd:43:6b:a1:eb:2b:30:12:07:d9:e5:3d:
         ea:ce:92:f1:f3:da:11:2e:1a:cf:37:6c:e9:b2:bf:7d:ea:26:
         9c:de:fe:1f:67:91:74:98:2c:63:39:86:97:bb:bc:fe:e9:fc:
         bc:5a:30:ca:83:c0:8d:d0:1d:64:55:56:46:32:4a:90:65:d1:
         d6:49:1a:3d:cb:90:b5:62:91:81:95:3d:c0:c6:ea:56:10:b2:
         67:29:f6:95:0e:62:79:f8:b4:20:01:2e:e4:f2:46:bb:3a:d6:
         84:0a:c4:7d:6f:16:45:8b:83:38:56:05:04:e0:ae:41:1c:a1:
         e1:f9:aa:3e:bf:6a:7c:6e:28:d5:4d:4f:59:be:ff:50:25:82:
         aa:3f:61:dc:cb:85:d9:4d:18:c7:4d:2d:c2:2c:5b:db:ee:c1:
         24:38:2b:ab:81:a5:50:29:63:2a:7f:be:20:d5:95:63:e8:27:
         e4:ce:8b:e4:00:b8:cb:f9:b9:c2:0f:45:1d:25:9b:fd:0c:82:
         4f:77:b0:b5:32:28:4d:10:e2:30:6f:25:61:40:21:db:af:a4:
         c9:5d:3e:26:1e:5d:d5:ad:55:09:10:3b:71:f5:27:e2:17:13:
         15:f1:e7:85:65:9d:f8:e3:a6:e1:35:43:43:f3:74:cd:a8:b7:
         df:d6:f9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:41 2026 by rpki-client