Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07d5b77f-272b-33e5-bfcb-ae7e1c65a10c.roa
File:                     07d5b77f-272b-33e5-bfcb-ae7e1c65a10c.roa (raw, json)
Hash identifier:          nmESk4ce+Fdp0YgIZgbFHKMeHoerq0AA60Kj9kX7jfA=
Subject key identifier:   E7:B6:FB:DA:61:80:C4:00:C8:E9:18:7E:63:E5:4E:4F:31:D8:A1:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A823E7D35FEBEA05FBA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07d5b77f-272b-33e5-bfcb-ae7e1c65a10c.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1002:b120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:82:3e:7d:35:fe:be:a0:5f:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=3ffca573-9904-4dfa-9404-ddde891b2ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:ad:9f:da:fe:16:10:4f:4a:4a:6f:94:4a:
                    e8:16:39:99:98:89:2e:96:08:e2:ce:85:5f:a2:eb:
                    af:40:43:a6:36:0a:e8:3e:80:94:46:17:9a:7c:57:
                    e8:ce:7b:16:aa:3c:e9:7e:72:15:84:97:20:d3:bd:
                    0b:b2:2a:ec:11:c2:85:5a:c9:d0:ae:a9:b9:04:62:
                    4b:8f:ec:01:5e:8c:bc:cc:a9:0b:21:c9:21:2a:a6:
                    7f:70:be:2e:d4:43:15:c8:5c:f0:4c:65:fe:21:e1:
                    48:7a:a8:26:32:9b:ae:35:76:0f:1a:ec:9b:a9:51:
                    00:0e:68:2f:59:97:e5:81:2e:3b:11:75:73:2a:e5:
                    c8:1f:d7:63:97:ca:34:8c:e9:a1:9d:92:95:8e:0d:
                    70:aa:0b:d2:51:0b:84:6c:22:4b:37:67:30:f4:a0:
                    43:a8:cd:b7:16:f2:c2:86:d1:29:5f:f0:e8:71:af:
                    3c:53:f1:bf:59:dc:d2:2a:0a:8b:84:23:a1:e0:9c:
                    2e:28:ad:8e:b6:0c:8e:a7:46:7a:a4:fa:9a:f6:e4:
                    6e:f7:51:f4:15:78:7a:d1:2a:76:2a:39:52:30:f9:
                    6b:49:b4:13:9c:2a:f7:57:98:03:71:ec:72:15:50:
                    36:ec:a5:b4:9f:87:a1:02:ce:e4:ef:5b:1f:ef:74:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B6:FB:DA:61:80:C4:00:C8:E9:18:7E:63:E5:4E:4F:31:D8:A1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/07d5b77f-272b-33e5-bfcb-ae7e1c65a10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9a:42:b5:2f:ef:74:31:8e:b3:f3:cc:52:da:0e:8b:3a:ac:
         bc:eb:44:a4:66:9d:67:f3:c5:07:bb:ec:87:04:6f:d4:4b:e7:
         67:16:53:43:9b:b7:c5:c0:fc:1b:69:46:73:13:f3:ce:9f:73:
         03:cb:27:70:f2:c7:88:da:3f:7b:f3:65:fb:18:24:79:8c:62:
         39:a8:77:db:ad:15:e8:d8:72:4e:21:22:82:20:03:55:37:2f:
         eb:e3:c2:00:80:ba:28:c0:c1:dd:6e:21:f0:6a:82:d7:4d:9e:
         7c:91:ab:7b:74:c3:c8:8a:96:8c:8b:af:a2:d9:43:ab:20:a4:
         30:9a:ac:f5:63:30:60:3b:47:1a:78:9a:10:6b:10:ee:f5:85:
         29:74:3d:e6:a5:ed:00:18:43:72:2a:aa:35:8c:0e:b1:f1:24:
         96:b3:d6:3f:89:29:59:09:66:d1:74:be:cd:0f:25:27:05:67:
         4e:ef:ef:55:d2:40:8a:ec:c2:76:39:7a:ae:bd:a4:bd:13:80:
         71:85:22:a0:a5:f5:68:a3:4a:13:02:3c:63:6a:76:9c:aa:cf:
         52:05:5b:cd:d3:74:d8:dc:ec:e6:db:0a:63:f9:4d:9d:2d:22:
         55:36:42:1c:c5:d0:d5:7f:7e:b1:be:88:51:9d:0f:04:b8:21:
         f7:37:cb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:16:32 2026 by rpki-client