Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7c2a4d2-ddba-351a-bea7-c7af35302ec6.roa
File:                     e7c2a4d2-ddba-351a-bea7-c7af35302ec6.roa (raw, json)
Hash identifier:          grqedCpeJGFTuFQ/45FvjP21D8i7f/f3+aoltKMn2M4=
Subject key identifier:   AD:1A:87:FF:C1:6F:7C:16:BE:38:9A:7A:07:36:A7:DB:E2:82:2D:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D037D4064C3F6243C62746C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7c2a4d2-ddba-351a-bea7-c7af35302ec6.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     6167
IP address blocks:        2600:100b:b1c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:40:64:c3:f6:24:3c:62:74:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=b28f57b3-66f2-43e4-b011-4b4c2ecb3227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:83:94:52:ab:9a:8d:78:b3:0f:24:ed:db:
                    19:3a:ce:86:fd:18:cf:b1:69:bb:c8:bd:8f:54:46:
                    94:f8:98:4d:93:54:b6:53:11:d4:d1:f9:b9:8a:69:
                    db:68:87:33:d4:df:50:02:77:c0:1a:28:5c:0c:36:
                    3b:7d:15:24:bb:cf:26:fe:0e:c7:d6:09:2d:e2:f0:
                    52:4a:bd:11:89:da:2d:54:4a:dd:b2:f9:13:15:7f:
                    b3:5a:62:c7:2f:0b:55:4e:95:a3:0a:e5:9c:8e:fd:
                    d5:2b:69:66:cd:5b:cc:5d:97:20:4a:4b:4f:ab:f3:
                    9a:c0:a4:4a:3c:aa:b6:7c:11:7c:9d:65:78:7a:ae:
                    87:4a:18:4a:2c:c1:a8:f5:7f:9f:37:64:a6:36:d5:
                    06:41:c5:8f:8c:4b:84:8e:5e:81:d6:9b:e6:18:03:
                    56:76:a9:0c:ba:53:08:c4:c2:a8:5e:5f:f5:1c:50:
                    ff:fd:0b:48:93:1f:13:ab:59:24:dd:7b:0e:d9:74:
                    97:32:ba:1c:4e:eb:e4:57:92:5e:47:86:4d:c1:3b:
                    ce:7f:1b:ce:0e:6c:ab:98:d2:34:70:7b:e0:d9:a8:
                    8c:4c:2e:59:88:50:65:50:68:f2:3e:fa:cc:c0:fc:
                    8a:8f:e7:54:b5:80:06:a1:cd:02:69:19:d9:1f:a2:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1A:87:FF:C1:6F:7C:16:BE:38:9A:7A:07:36:A7:DB:E2:82:2D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7c2a4d2-ddba-351a-bea7-c7af35302ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b1c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:2e:ee:06:99:97:1a:f9:81:ed:3f:55:c2:c7:a4:79:11:
         ca:a6:6e:62:e7:fa:fa:91:ea:f9:45:54:88:cd:84:a8:96:e0:
         4e:ae:f4:49:76:64:92:ce:5c:64:ae:fc:fc:89:37:1a:72:6a:
         d0:34:69:b6:7b:e6:9c:8e:74:1b:35:9e:4c:b5:1d:3c:79:23:
         0f:42:f0:20:41:a7:e7:02:1f:0f:2e:98:46:ba:ef:45:da:a1:
         f1:9c:bc:ab:08:83:ab:7f:a0:c5:57:8b:a4:26:f0:5d:4d:9b:
         12:b1:4f:17:fe:1b:38:17:e0:9d:f3:7c:d9:20:4e:1b:59:54:
         1a:a2:58:79:9b:66:08:a2:a8:a0:4a:a6:11:8e:a1:0a:2c:21:
         cc:38:8d:94:48:37:b2:68:ea:8c:14:38:c8:71:41:43:dd:2e:
         ec:42:6a:55:7d:a1:6f:cc:e5:68:06:d8:93:71:90:7e:50:51:
         39:40:c0:af:af:e9:ff:de:ce:81:22:b8:2a:be:ef:62:ae:b6:
         29:95:ef:22:3c:7d:98:31:54:16:ff:95:dd:41:fe:01:ba:be:
         21:68:fd:e2:18:49:fc:89:39:62:c7:24:cc:a4:04:88:75:79:
         d7:4a:a9:41:e1:de:5b:23:ec:b6:80:94:cc:63:ef:6c:11:85:
         ec:bd:05:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:03:36 2026 by rpki-client