Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba3636ec-fb2f-3851-a2dd-a5feed37b0c0.roa
File:                     ba3636ec-fb2f-3851-a2dd-a5feed37b0c0.roa (raw, json)
Hash identifier:          7Pf56ltq6t+Dkor/zl4E2PBeAHAHgnN3qRMTcBf9ayw=
Subject key identifier:   95:C5:68:47:1F:60:21:D1:B6:B5:07:11:C4:08:9D:D6:21:77:30:C7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D25C8B95E5C57CAC77F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba3636ec-fb2f-3851-a2dd-a5feed37b0c0.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100d:fe00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:25:c8:b9:5e:5c:57:ca:c7:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=29f7d4cd-e632-46ca-9107-abe4870ba454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:54:07:1a:db:c8:19:7a:5d:5b:73:38:e0:85:
                    92:8b:c8:76:8a:af:20:bf:79:c3:5b:6f:40:fc:a9:
                    37:ed:75:40:f4:52:44:91:68:4b:1d:ea:ae:56:6d:
                    7a:c3:fa:68:17:00:64:3b:73:4e:8f:6b:69:97:a3:
                    0a:fb:76:c8:c4:6b:d6:e9:71:15:81:c4:b6:0e:4e:
                    cb:27:22:ac:75:a2:fe:e7:fe:d9:d6:f8:ac:c2:ac:
                    15:41:b2:c3:cb:a7:fc:38:61:c0:cc:7a:2c:d8:57:
                    8f:e6:d1:e5:2f:e0:3e:c6:a7:7f:5b:61:86:d1:cd:
                    c4:be:94:97:7f:89:98:2a:69:81:d4:e1:42:5c:45:
                    39:a7:bc:67:2c:1b:5e:7b:8d:db:27:a4:93:90:97:
                    84:f5:c7:fa:68:8b:f8:2e:4e:de:37:8d:4a:d5:11:
                    64:17:ab:d0:63:0e:ca:0b:e4:cd:5c:f9:d9:51:ee:
                    35:b6:84:05:46:a1:69:51:0d:28:57:6d:a5:65:a2:
                    80:d9:d8:0f:25:b6:8b:9e:43:68:f6:a3:51:04:ec:
                    db:cd:5d:9d:09:71:62:ce:65:2d:d0:94:76:c3:62:
                    81:50:f5:80:2c:65:11:f6:45:fc:35:2a:45:92:47:
                    96:72:b9:cc:66:f0:ff:0c:e7:52:c4:0c:44:eb:8a:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C5:68:47:1F:60:21:D1:B6:B5:07:11:C4:08:9D:D6:21:77:30:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba3636ec-fb2f-3851-a2dd-a5feed37b0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:fe00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:a4:60:e9:1c:33:a8:86:8a:b2:c6:40:8f:e8:31:dc:ba:8f:
         3d:2d:a1:8e:f9:b7:78:90:cd:d6:51:b6:fe:1e:0b:d0:b4:0e:
         7b:01:06:fe:c6:7c:e8:14:68:d0:6c:0d:63:d5:22:5d:50:2b:
         93:85:e9:2a:0b:f9:d8:e6:ae:70:4a:a3:d9:ca:4c:35:d6:2d:
         f3:54:d5:b8:cb:93:8c:5b:e7:7e:00:cd:9d:25:f4:ae:7a:ba:
         49:55:c3:f2:86:ed:8d:d6:91:7b:e7:25:57:e5:f1:bc:bf:6e:
         cb:2f:48:12:e2:75:78:6d:d0:18:f9:35:d1:69:cc:2f:9a:07:
         93:6f:7d:46:b9:41:38:7e:45:f2:f8:a8:1b:28:79:13:23:52:
         eb:34:65:44:8e:6b:d7:e4:77:8f:9c:77:84:dc:f2:49:58:a4:
         98:8f:be:94:29:55:54:6b:df:74:b5:01:38:21:67:3b:df:96:
         a0:4b:29:17:c8:c8:35:81:0e:86:c4:32:20:2b:35:eb:3d:61:
         0f:39:76:0b:c6:7d:23:1a:18:da:75:61:6d:99:36:d9:9d:b6:
         74:02:03:53:f0:5a:02:78:80:34:e7:8b:d2:31:bb:b8:8f:45:
         92:c3:79:5b:6b:b0:41:90:84:62:0f:57:a9:60:2b:18:a9:a4:
         48:e5:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:30 2026 by rpki-client