Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcb1715e-4160-33b3-9acd-5037d569e3e6.roa
File:                     dcb1715e-4160-33b3-9acd-5037d569e3e6.roa (raw, json)
Hash identifier:          zRI9rJ4wm9Zd13P5cQY698HJjsoytdfER4yNmEpiyqo=
Subject key identifier:   B0:2B:34:C3:A2:93:EC:DB:B1:9F:59:CF:32:C3:C9:77:EA:AB:27:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DE41B4A8857EF9919E669E480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcb1715e-4160-33b3-9acd-5037d569e3e6.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     6167
IP address blocks:        2600:1009:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:4a:88:57:ef:99:19:e6:69:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=069677cd-2f30-4a0b-b189-89d3886346e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:64:0c:07:b7:e1:7c:43:61:92:79:0b:74:
                    24:94:dc:71:f0:30:71:dd:3a:45:2f:5a:4e:84:89:
                    57:4d:c9:5d:47:5f:8c:a4:e9:d2:bc:76:2a:f1:f6:
                    ef:09:76:93:00:66:ad:7b:bb:1a:f4:c1:05:6c:39:
                    0b:86:2f:76:5c:7b:47:29:b6:42:be:53:66:bc:35:
                    2a:3d:0b:b3:85:78:64:bf:26:10:bf:1c:95:3c:22:
                    71:fc:56:76:59:3b:5d:72:d4:19:8e:e4:38:77:ae:
                    93:ad:b2:29:14:c9:01:e6:13:97:50:08:74:2c:0e:
                    ac:9c:f7:7b:f0:2a:4e:77:38:ba:85:e3:37:b0:a3:
                    51:7f:ab:8f:9b:d7:df:a8:d5:3a:c4:4d:4c:b6:ca:
                    04:f0:56:7c:55:0b:0e:04:00:33:bd:d6:72:0b:34:
                    ad:4f:ce:7e:83:98:29:10:de:72:10:94:42:65:8c:
                    02:41:76:8c:a9:3d:e1:9d:64:17:1a:10:09:48:2a:
                    22:46:ab:0f:6f:d3:83:4c:5d:c1:58:63:82:cf:6b:
                    d8:29:aa:1a:21:06:33:6f:f4:47:d0:4a:6c:fd:95:
                    c2:c4:cb:7a:bb:cd:3b:e8:00:90:a4:9f:bc:1e:b5:
                    5d:28:7e:6a:41:df:e6:25:4b:1e:49:27:0e:3e:45:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:34:C3:A2:93:EC:DB:B1:9F:59:CF:32:C3:C9:77:EA:AB:27:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dcb1715e-4160-33b3-9acd-5037d569e3e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:83:ea:55:7d:a8:a8:72:a2:a0:21:53:c5:a9:3a:3e:35:4e:
         3e:4c:75:f3:30:e9:55:c7:ba:b2:74:63:e8:85:47:42:b6:7a:
         3e:62:5e:91:b4:33:86:d1:b6:bb:98:5a:7d:a7:5e:81:48:6b:
         bd:80:88:f9:be:a6:ca:c4:3f:6d:3c:81:c3:7c:4a:28:21:91:
         bd:b2:d3:84:58:c8:78:71:2c:85:7b:ae:03:f2:2f:26:cd:39:
         08:d8:fd:36:16:55:35:47:76:8f:ec:2f:9e:44:e5:ea:c3:4b:
         7a:dc:b1:9b:6f:ee:68:84:4f:e8:e8:4b:0e:45:db:96:57:88:
         f1:f6:97:ec:c6:56:86:57:89:ad:ff:bc:58:59:91:4b:97:55:
         02:a1:0e:4a:48:8e:46:ff:a7:66:8a:05:a0:33:69:3e:f0:28:
         c3:77:15:3d:17:96:40:a0:eb:7d:f0:f6:1d:e0:3f:ee:80:7c:
         14:87:15:d1:f3:6f:96:ad:ba:56:d0:96:48:4b:41:eb:83:55:
         cf:f5:6d:18:6d:f4:f2:b3:61:17:f6:f2:fa:f9:89:48:7f:4b:
         d0:29:e9:fa:60:9e:d1:50:d8:ca:e7:52:4d:48:76:b7:a9:c3:
         83:84:b4:0a:9a:de:f7:66:4f:6e:d5:47:fd:00:19:d3:01:29:
         77:21:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:38:49 2026 by rpki-client