Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfe3a650-6fd5-3af3-b283-9b4f354ad1c1.roa
File:                     dfe3a650-6fd5-3af3-b283-9b4f354ad1c1.roa (raw, json)
Hash identifier:          rZzFGKjimQlUdhxHtAeHQ2cBm32AxjU4iJH8N9Ls7/o=
Subject key identifier:   6A:4B:E4:A5:8F:7A:93:89:0A:A1:E6:15:7D:F3:57:04:0D:89:AC:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D2DAC0AE9E15B1D9C1A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfe3a650-6fd5-3af3-b283-9b4f354ad1c1.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100f:a110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:2d:ac:0a:e9:e1:5b:1d:9c:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=c465c143-3eff-4640-95e5-330877d19da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:41:4c:86:2d:4f:04:71:36:1b:a2:20:8b:
                    19:07:eb:6b:d5:e9:6a:92:80:98:e2:37:db:de:f6:
                    43:4c:cb:5d:93:f8:7c:dd:1b:f0:b2:ef:6b:fc:3e:
                    61:a9:d8:9b:24:8a:de:df:ed:ae:b8:ff:ce:d5:59:
                    92:83:5a:40:d8:b7:87:f7:9e:ce:9b:ef:4e:de:de:
                    20:f7:6d:a4:ec:f5:10:19:cc:09:45:f9:0a:90:76:
                    2b:23:6d:8e:cb:36:d0:bc:a5:97:07:30:de:4f:e0:
                    5c:a8:c1:32:3a:8e:ff:fb:82:34:f9:4b:1f:59:ce:
                    33:14:48:fa:07:7e:8a:1d:e6:82:98:8b:77:73:ae:
                    64:fc:b7:9f:43:9e:17:15:a4:43:0f:a3:34:a4:21:
                    93:6c:08:73:1a:6a:ca:dd:cb:75:47:63:a6:ce:31:
                    71:df:d1:96:59:60:a5:33:0b:4e:9a:6a:e1:87:2a:
                    91:4e:d9:7d:46:5d:83:1b:f6:98:9a:dd:96:b2:8a:
                    6c:68:7e:40:a0:15:c8:b9:65:9e:9e:3e:ec:80:2e:
                    e1:74:bd:2f:ed:92:5c:e7:f8:42:e2:3a:6c:f0:be:
                    46:80:c8:b8:75:61:24:64:62:26:73:14:b1:d9:4c:
                    3e:56:b7:33:dd:6c:f2:4e:f5:3d:ec:7c:c9:3f:ee:
                    05:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4B:E4:A5:8F:7A:93:89:0A:A1:E6:15:7D:F3:57:04:0D:89:AC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfe3a650-6fd5-3af3-b283-9b4f354ad1c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:24:31:09:74:85:6a:8a:8a:30:78:42:bf:66:5c:7c:11:16:
         09:73:01:aa:b6:87:19:ed:07:fa:46:a8:93:fa:3e:44:37:5e:
         4b:79:8a:5f:ae:01:77:a6:43:59:65:74:da:10:c0:a5:0f:01:
         48:65:90:c4:24:09:a1:13:ce:a1:54:11:6d:91:ba:82:af:3b:
         3c:09:e7:53:fa:55:b0:77:e1:47:fc:f9:56:94:cb:ef:cf:52:
         4f:da:69:15:8d:e9:7b:74:c4:1b:76:e5:4d:27:58:69:6c:43:
         23:f1:c3:21:46:4b:11:aa:9a:8f:00:77:6e:62:75:68:02:e0:
         64:88:f4:a0:39:9c:ae:7b:dd:c4:27:6b:7d:98:ac:5b:f9:0d:
         45:4e:c6:52:d7:15:8c:13:26:f7:95:7d:04:ba:b0:3f:7c:f8:
         8d:e1:03:c6:92:b9:d4:89:fe:cb:3f:f9:b6:5a:cc:86:3d:2a:
         e6:d2:aa:40:2d:48:c0:63:38:f5:ca:5d:9c:08:d3:0b:d7:d1:
         f7:e4:c7:22:21:3c:c9:b6:89:c2:73:2a:0e:e3:b3:76:69:2a:
         f0:1e:b9:35:f5:e3:e6:9e:20:a6:20:a5:7a:9f:fa:96:f4:c3:
         7f:1c:c5:4f:13:fd:35:b8:a5:53:27:ad:1f:7c:70:cc:17:1d:
         cd:9a:64:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:07:00 2026 by rpki-client