Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de70d75b-f5cf-3941-960f-4e52567c2d24.roa
File:                     de70d75b-f5cf-3941-960f-4e52567c2d24.roa (raw, json)
Hash identifier:          NlFH9JWuwzaLSere6mbzZNjGu6Hvq2fQUiQFQULV06k=
Subject key identifier:   65:BE:B5:92:3E:B4:A1:12:1C:5A:4B:25:F7:7F:9E:B3:0C:B8:7E:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67D8C6EB86CE3B357F73A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de70d75b-f5cf-3941-960f-4e52567c2d24.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6167
IP address blocks:        2600:1003:b158::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:d8:c6:eb:86:ce:3b:35:7f:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=12dc3caa-f34c-4ec5-b97e-2dd0c6da17a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:1b:25:fb:22:c2:37:2f:16:e8:d1:e7:31:
                    34:3b:9a:61:18:db:4b:7f:5e:7e:68:14:26:c6:60:
                    dc:42:00:35:52:02:1a:78:57:bc:7a:2d:c7:48:be:
                    88:f0:9a:d2:f8:3d:64:d8:4d:a7:37:5a:4d:4d:cf:
                    61:0d:03:df:cb:00:67:ff:65:54:e0:30:c1:41:55:
                    66:66:7c:c8:50:77:37:5b:83:99:c1:fc:3a:c2:68:
                    1c:1a:ea:2d:70:45:29:d0:08:4e:70:f2:cd:9b:e8:
                    24:b2:23:f5:ee:4b:1a:0e:48:eb:4d:be:91:77:d7:
                    6e:f0:7c:5e:07:dc:8d:d7:77:64:89:ff:42:1b:01:
                    74:98:1d:c0:2f:94:12:79:57:04:40:88:c0:18:35:
                    b2:cb:fb:db:1c:bc:9e:6f:96:ec:1b:96:16:85:90:
                    fd:91:91:47:64:de:a6:75:b7:65:67:c7:af:2b:a5:
                    30:db:87:8d:91:fd:af:6e:f1:91:d4:28:39:7f:d3:
                    af:c0:ce:7b:55:bc:6e:88:f2:c2:19:bb:63:07:d7:
                    2f:b6:35:1c:6d:98:e4:11:7a:f3:74:1b:6d:6d:54:
                    04:d1:33:56:dc:cf:c2:a1:20:66:a6:40:11:1d:00:
                    bc:f3:3c:77:5b:4e:4f:4c:7d:ad:b3:ec:f5:10:f8:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BE:B5:92:3E:B4:A1:12:1C:5A:4B:25:F7:7F:9E:B3:0C:B8:7E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de70d75b-f5cf-3941-960f-4e52567c2d24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b158::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b1:04:e7:86:e6:2b:94:42:3f:b0:df:bb:b3:55:5d:54:5c:
         02:be:49:83:90:5c:6c:7d:c2:c8:fa:36:85:f3:1e:c4:c5:c8:
         dd:60:45:50:2d:21:f3:21:6e:03:63:36:ab:5f:0c:fa:69:f1:
         ba:ad:04:00:22:f5:3f:6e:ee:6d:db:20:d1:bd:d8:f0:b0:41:
         8e:31:df:c2:92:be:0f:08:af:91:f8:42:97:43:51:ba:0e:14:
         bf:b2:fe:07:d0:c7:5c:d9:13:40:b6:cd:9d:3b:7c:3f:13:d8:
         ae:f7:70:74:94:25:b1:98:d1:18:fe:0f:09:d9:67:4a:f9:b4:
         df:63:5f:45:11:d5:d6:03:63:e3:9b:04:ef:c5:e7:76:9c:40:
         11:fa:03:5d:a6:f8:59:67:17:c9:c0:52:d3:f5:9f:06:cc:ec:
         5e:9b:5a:4d:a5:32:e6:35:bb:10:ba:30:8d:94:3d:74:99:a5:
         89:90:82:74:24:30:82:ec:c8:39:8c:72:4f:29:e2:49:6a:40:
         7d:b5:7b:e6:17:22:be:64:70:3c:70:a9:0c:f1:09:5d:61:eb:
         c7:fd:a8:56:56:dc:b3:5e:f7:6e:52:bf:cf:a5:4f:0e:8c:f2:
         d2:22:7b:3b:cb:00:e5:f1:dd:a8:cd:98:30:bf:5c:d7:f5:21:
         c3:7d:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:05 2026 by rpki-client