Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa
File:                     f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa (raw, json)
Hash identifier:          E+3R46TZrp195Kbd5tj4rKbqZRsJgJFsnZ/cpxtagCs=
Subject key identifier:   EB:FF:3C:07:65:C6:AF:41:2E:62:D4:28:6D:F3:7C:BB:E3:E5:ED:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E04360F9545AC569C30F28D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     6167
IP address blocks:        2600:100f:a021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:0f:95:45:ac:56:9c:30:f2:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=da21341c-3032-4c79-88c5-743613ce431d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ea:a3:85:e6:ac:05:5d:dc:95:3a:2a:ad:98:
                    cc:be:d6:3c:58:ca:06:31:00:64:c3:ba:c5:5d:8f:
                    64:b1:7b:cb:e5:ca:83:a4:66:6b:fb:09:af:aa:db:
                    49:e2:b5:79:6d:d1:a3:57:f4:0e:d7:7e:ce:62:b4:
                    a0:14:e5:9e:a4:1c:84:ff:fb:db:8e:c5:b2:69:c8:
                    23:bc:a3:71:14:2c:cb:72:25:8f:77:6b:76:9a:b2:
                    87:ef:03:3e:ce:57:91:74:ab:9a:21:a1:48:71:04:
                    69:aa:0c:8f:c5:93:e1:61:4f:3f:be:dc:dd:a0:fd:
                    f7:b8:ed:c1:31:b8:2d:8a:13:e6:62:48:96:98:51:
                    fd:ff:ca:2c:20:13:c3:80:7c:01:1c:b9:1d:50:0b:
                    89:b7:6a:6b:bf:9b:54:0b:e4:4b:43:af:7d:e0:e6:
                    b0:52:5e:40:64:b1:6d:c7:0a:d8:b8:24:98:8b:6e:
                    f5:c7:4d:b5:d3:b8:2f:e1:76:59:16:b8:1a:4d:e6:
                    00:02:cd:90:07:8e:f5:5b:86:26:95:89:6a:b4:25:
                    15:3f:35:f6:38:19:cf:1d:ce:ed:4d:86:b8:95:4a:
                    a0:4e:af:1c:db:d3:0e:ed:e5:63:a5:9c:95:02:ef:
                    60:a3:60:54:15:b2:79:45:17:5f:fa:18:dd:c1:17:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FF:3C:07:65:C6:AF:41:2E:62:D4:28:6D:F3:7C:BB:E3:E5:ED:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2f6b8b5-bfb7-371d-85e3-cada4d7d3553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:53:47:4c:80:bb:fe:c9:ad:4c:89:7e:15:66:18:be:27:ca:
         34:46:50:59:58:75:b6:a3:a7:96:59:cd:59:a5:ba:0a:df:b8:
         d6:51:0e:d0:64:49:5d:43:35:dc:f9:28:6e:7e:9e:b2:e6:dc:
         c3:2a:13:1b:6c:0a:f3:11:57:b8:7b:c5:d4:91:57:6c:9c:25:
         c2:3f:21:ba:44:81:d5:6b:b0:91:eb:09:3f:50:f3:b6:cf:d1:
         4c:52:f7:61:8b:58:42:71:7e:e6:85:61:68:32:74:04:cf:87:
         26:82:21:c9:a4:a1:41:5b:4f:d7:c9:ac:6b:20:fe:f8:ca:3b:
         2f:47:e6:05:df:51:4d:9b:10:80:4f:67:80:63:0b:f7:67:08:
         cb:af:c4:18:5e:1b:e4:8a:06:e7:24:1a:f0:b4:15:aa:58:da:
         bc:2a:85:9e:eb:7b:32:88:30:29:b9:03:9d:36:ee:c1:16:17:
         39:44:b8:26:d2:82:f2:e2:b7:a1:f3:25:0a:3b:f6:4e:a4:15:
         83:07:62:ea:39:36:8c:d8:a1:8a:64:99:2e:ee:63:05:88:8d:
         5d:ae:d8:e5:93:a8:46:01:1f:26:cd:9b:82:a0:ff:65:ce:87:
         fe:51:77:2e:a0:7d:ff:67:cd:c3:56:7b:5e:88:28:cf:57:8e:
         32:d8:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:22:49 2026 by rpki-client