Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f43f5f4-7eab-3ece-b661-b25ea6a21227.roa
File:                     0f43f5f4-7eab-3ece-b661-b25ea6a21227.roa (raw, json)
Hash identifier:          RPSAICX4E2FhRjafrozgj42DTq6Nuiiinh/s+WIcdfo=
Subject key identifier:   38:AC:D6:90:65:53:37:B5:5B:50:B6:BC:72:86:76:DB:7B:01:B8:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA787651ECCAE20570472CE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f43f5f4-7eab-3ece-b661-b25ea6a21227.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1006:a135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:65:1e:cc:ae:20:57:04:72:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4c057b5d-08d3-48e1-a355-9860c4b5ca3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:26:01:e0:b7:3d:b9:67:88:62:cb:c5:99:
                    67:9b:c8:9a:a3:dd:0d:ac:7a:a5:a7:63:fe:30:71:
                    33:44:32:02:be:1e:28:c0:e8:d9:08:3a:ae:53:da:
                    6c:e3:e2:5e:a5:88:53:0c:78:9e:58:11:08:e3:7e:
                    b4:75:6c:d2:d7:6d:52:9e:f5:eb:bf:2c:70:18:fb:
                    1f:22:dd:e7:b9:f9:3b:ff:d4:be:b5:3c:6a:1a:a1:
                    af:79:33:c2:15:f0:21:ab:1f:fc:d6:3b:8c:09:75:
                    a9:20:7b:5d:9e:78:83:8b:37:85:22:7f:05:89:63:
                    90:d1:fe:e4:7e:06:df:4a:a3:ef:b0:fc:1a:ca:b0:
                    78:7e:1c:2f:ab:ce:aa:7c:2a:9f:b9:3f:c8:b2:40:
                    c2:16:47:81:9f:6e:16:bc:fe:62:4a:69:3b:f3:7b:
                    c1:8d:09:ef:4f:70:fe:e9:85:3e:77:0a:92:ae:24:
                    ec:0a:48:75:fa:f5:e7:03:e4:ac:30:4b:d7:41:f1:
                    f9:67:14:ab:74:82:a4:5c:9b:9c:fc:05:ce:f5:60:
                    8f:1f:e5:05:1d:62:c3:30:4a:dc:1b:6a:0d:e7:7e:
                    83:b9:40:1e:ec:ce:84:e7:60:6b:3f:53:2c:06:e3:
                    7f:36:5f:08:91:1e:24:a2:23:d0:09:92:3c:f1:05:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AC:D6:90:65:53:37:B5:5B:50:B6:BC:72:86:76:DB:7B:01:B8:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f43f5f4-7eab-3ece-b661-b25ea6a21227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:22:96:2f:d9:24:76:48:f5:bd:f3:67:5a:8e:d1:b6:f8:e8:
         22:2b:f3:5d:25:bc:e3:56:cd:e1:12:88:82:32:aa:7e:6f:b3:
         1e:3a:26:99:94:53:54:7b:a6:d8:ad:4a:32:0f:05:b7:fd:44:
         cb:52:b6:d9:73:75:f7:c9:f3:1a:61:da:ec:fb:b2:8e:90:8b:
         a9:2c:4e:01:fe:4a:3c:5d:96:d5:3e:c9:81:87:aa:44:ec:c0:
         84:d3:3b:4b:af:b4:a8:9e:cb:c7:a1:f0:c1:bb:80:27:3e:04:
         28:5d:ab:c7:f8:ab:14:fa:19:8a:b1:05:7c:b4:01:ed:f9:81:
         14:6a:31:67:6a:ad:83:c6:42:a2:70:d1:80:6c:a8:03:60:bb:
         a7:ac:24:ed:84:1f:19:68:5e:10:6f:bd:d6:1e:e3:16:ac:26:
         7e:d7:ab:a4:d8:09:3d:ed:4f:c3:3b:05:42:90:0a:a6:13:fb:
         cf:56:8b:d6:ab:c7:7f:da:0a:93:36:28:74:c6:e5:f1:35:6e:
         c7:6b:e7:81:b1:88:d6:75:e6:49:f1:b2:3b:d1:c6:b8:69:47:
         84:54:d5:ce:28:39:7f:6a:25:0b:74:1d:05:4f:3a:73:04:95:
         3c:cb:be:4a:82:1f:7b:20:f9:dc:c1:29:86:7c:c4:41:12:fe:
         70:7c:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:38 2026 by rpki-client