Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c33ed2-5f22-34f4-993b-444164286790.roa
File:                     d9c33ed2-5f22-34f4-993b-444164286790.roa (raw, json)
Hash identifier:          SsOxwuhzyVCQZVrAtalgQZA9AtQlX7BCL/cX+9Xmamg=
Subject key identifier:   7E:BB:69:EB:0F:40:97:87:59:A5:43:CA:92:B3:66:2E:6E:13:14:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67ABF4CD472DDB17F472D8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c33ed2-5f22-34f4-993b-444164286790.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1008:a030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:ab:f4:cd:47:2d:db:17:f4:72:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=56047ad6-2677-41a0-b145-3e2be0c222b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:45:33:8c:8a:9d:0d:a4:fb:b3:40:38:42:a5:
                    68:e5:85:3e:ad:ca:a9:a6:32:72:69:df:bc:5f:fc:
                    c1:2f:5f:44:6e:e2:d5:30:c5:a8:42:45:cf:ce:64:
                    60:05:63:27:5b:5a:37:9c:e2:ac:48:8a:fa:fc:47:
                    af:89:21:61:75:3f:01:0f:5d:79:4f:55:83:93:3a:
                    61:f8:a4:b9:5d:03:b4:98:11:8f:a0:4f:0e:b6:f0:
                    b8:86:c4:93:8c:fc:a3:a5:cc:76:63:67:44:b1:89:
                    08:08:5d:5a:82:3f:3e:d1:c4:69:af:dc:f7:95:49:
                    f5:14:04:dd:09:67:c8:f4:4d:11:ef:ba:ac:83:49:
                    d0:7e:1e:10:52:f3:4f:b2:6d:e2:d6:5a:4b:f8:3e:
                    62:d3:86:c3:dd:71:0e:bb:33:18:a7:ba:ed:cd:39:
                    c4:40:c5:b7:77:f9:34:9a:4e:1e:23:55:a2:81:8c:
                    fc:ae:b6:c6:60:e3:1f:a1:ea:62:1e:63:d2:d5:7b:
                    43:33:03:7d:f7:b8:a9:c8:ba:5a:13:fb:f5:d1:d6:
                    74:18:1e:ea:60:73:2a:1d:a7:f3:82:cc:16:c2:9f:
                    0b:9b:b4:60:c0:18:8f:f1:f8:31:4f:4d:b3:04:b6:
                    6f:95:cc:66:9a:a5:64:dd:92:05:bc:ec:82:7f:d0:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BB:69:EB:0F:40:97:87:59:A5:43:CA:92:B3:66:2E:6E:13:14:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c33ed2-5f22-34f4-993b-444164286790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:a030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ee:a3:8b:56:f4:ec:a0:a2:f5:d0:24:f0:c1:0b:9d:5a:8a:
         1b:77:b5:02:8c:83:62:cd:02:c6:b1:a6:9d:2b:05:3d:6e:91:
         85:e0:de:8c:85:7a:15:85:2d:91:34:5a:83:c6:2d:42:ba:df:
         90:51:23:54:2d:04:4a:ca:28:63:c7:d9:15:bb:c5:4c:d0:8f:
         d4:68:24:9a:98:59:aa:37:30:ea:ab:52:84:49:92:c1:84:0c:
         c3:3f:4d:45:e5:98:45:f7:77:da:57:bc:d9:7a:2e:5e:46:75:
         62:3e:20:6e:58:33:d0:74:43:a9:35:ad:5e:91:37:9f:cd:be:
         26:68:62:68:27:d9:ef:65:6a:4c:ec:b9:20:61:c9:73:84:e2:
         99:ff:92:a6:63:17:e3:79:5d:ca:2b:5b:2a:3e:7d:24:55:9c:
         9d:1e:fd:1d:5b:69:52:d8:f8:c1:49:05:48:94:3b:53:92:fe:
         c8:28:14:2a:52:69:33:ea:7a:52:8c:be:96:ca:1b:40:ba:d4:
         d2:fc:c0:cf:1c:d3:f7:9c:6c:0a:9d:b4:17:e0:d1:5d:02:e1:
         f5:f6:10:74:58:48:77:f3:59:ab:39:2f:aa:66:d3:6e:67:e5:
         70:97:65:0c:f1:d6:f4:de:90:a0:3a:02:8b:70:9b:75:16:48:
         3d:52:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:41 2026 by rpki-client