Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbff21a6-4f74-3d5e-925b-6c73bd7c004d.roa
File:                     dbff21a6-4f74-3d5e-925b-6c73bd7c004d.roa (raw, json)
Hash identifier:          tpKO6bMVM0hEX2SVgVHlGXr/szRGEtkk7hCYqwdEPO0=
Subject key identifier:   45:FE:1F:AD:CF:AC:F4:99:E9:47:C7:A8:8F:FF:A1:B7:7C:5A:6D:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67D4F9DFFCD8EE435BFB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbff21a6-4f74-3d5e-925b-6c73bd7c004d.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1001:a010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:d4:f9:df:fc:d8:ee:43:5b:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=ea2ca08f-4ec0-46f2-8c8e-34fcbe4d15ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:70:23:0a:cf:85:14:b8:1e:a8:db:8c:57:
                    e7:e5:03:d8:5f:81:3d:8b:68:02:48:98:88:b6:fe:
                    7b:34:a9:16:12:01:e9:10:4a:5f:ab:1b:8c:d9:a9:
                    49:3e:15:4f:71:dc:a9:03:07:2b:fa:55:1e:7e:50:
                    d1:73:73:40:81:cc:80:25:4d:9c:9e:59:61:69:8c:
                    8f:e6:64:68:98:9d:58:b1:4f:ad:ed:25:d5:7c:78:
                    77:1f:82:23:76:00:a3:b2:47:17:61:a3:76:0a:3a:
                    cf:f4:c9:f4:d1:f7:87:ec:1a:de:79:d7:34:cb:6c:
                    4a:23:a5:8b:f0:59:54:94:84:75:81:63:a5:29:8e:
                    b8:65:70:3c:96:e4:fb:d6:12:c4:5e:80:24:3b:27:
                    a2:0c:c4:e1:6e:25:38:e3:a1:52:75:c3:40:a1:49:
                    8c:ee:bb:2d:38:4f:25:14:2e:19:7c:5a:6a:88:f3:
                    d2:26:a7:f0:09:0c:03:41:de:b8:07:d8:ee:25:a1:
                    6e:75:4e:40:07:fb:19:e6:24:22:4d:97:04:a3:e4:
                    08:9c:50:22:20:f3:36:b8:ab:11:5b:04:35:9b:5e:
                    b5:32:2e:27:03:7b:b9:02:e8:12:30:ee:d7:f9:b6:
                    ac:17:48:19:ed:ce:95:25:b8:b8:5c:77:db:ae:8c:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FE:1F:AD:CF:AC:F4:99:E9:47:C7:A8:8F:FF:A1:B7:7C:5A:6D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dbff21a6-4f74-3d5e-925b-6c73bd7c004d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:a010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:11:3b:86:55:61:c0:4c:4b:22:d6:87:6b:73:17:04:71:59:
         22:ed:24:bc:8f:7f:1c:4a:c7:ea:d2:9f:45:21:86:8a:15:e6:
         d7:99:46:b2:1a:fb:72:f6:14:66:d2:91:d0:26:84:31:00:19:
         e9:82:63:28:86:33:9a:7b:00:09:59:75:81:e9:b1:e7:94:27:
         63:5c:09:cb:32:46:c1:b0:ef:91:29:25:ad:4d:d4:26:65:64:
         fb:e0:2f:8e:85:1b:58:51:e7:6a:63:df:50:d6:d8:51:9f:2c:
         05:e9:74:82:6e:17:fc:0b:07:98:c2:f0:c2:64:95:cd:c8:8a:
         65:cb:a4:b7:ce:53:50:bd:7f:15:22:90:59:89:24:ac:ad:cc:
         6d:5e:c2:cd:40:ff:43:35:3f:10:55:a7:27:06:30:eb:51:ac:
         06:2e:66:16:f2:16:14:c9:f8:ea:e2:99:c8:28:97:4a:81:f1:
         a3:56:ff:53:73:a6:59:cb:ff:1d:fd:7a:dc:47:e3:e1:8c:54:
         5f:c0:1a:f3:05:f6:28:9f:e6:96:3c:71:70:46:45:f2:f3:49:
         02:51:29:2b:9c:c5:f2:47:3f:40:a3:98:97:40:bb:90:ad:b8:
         dd:7e:21:5e:98:b9:4e:0b:1d:82:d1:68:7c:e1:64:67:03:5b:
         3f:52:28:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:36 2026 by rpki-client