Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18cf0e57-5abb-3e67-857d-cf9ef06740e3.roa
File:                     18cf0e57-5abb-3e67-857d-cf9ef06740e3.roa (raw, json)
Hash identifier:          ZU1ewK/it1qKgjCkX+O6a1KqX30D0ZbcuC+bxBpLlJA=
Subject key identifier:   1B:F8:36:BB:0C:7D:29:21:AD:02:D7:60:31:FD:A8:BE:69:33:18:F3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AAA1846BE1A77C910A200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18cf0e57-5abb-3e67-857d-cf9ef06740e3.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1004:a121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:aa:18:46:be:1a:77:c9:10:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=23932180-40be-44c5-87a7-dd167ba28567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:2d:2a:51:cd:8a:67:25:39:8c:ab:a1:8f:
                    48:e1:1c:fe:f2:80:cc:82:47:97:26:8c:cf:c4:db:
                    7a:fc:90:35:3b:5a:c8:2d:df:db:88:8f:a4:e4:24:
                    07:06:e5:37:09:30:82:fc:53:3f:9a:f9:90:0c:3c:
                    00:54:da:88:a5:81:bf:71:2c:93:98:3e:c1:eb:03:
                    98:77:e8:d4:22:13:c2:d0:94:16:49:8e:bb:9e:dc:
                    c1:75:80:e9:f6:d8:73:87:09:eb:b1:63:1e:27:12:
                    34:f1:28:31:b4:eb:dc:18:ac:b9:4d:e9:80:83:49:
                    86:df:b3:f2:1b:2f:52:a2:38:4c:d3:d1:59:59:4f:
                    fd:fd:b7:73:c0:5e:13:d5:f2:6c:ea:64:72:a5:7c:
                    0c:36:a0:8f:84:94:ac:22:42:5d:72:7f:d6:f3:1d:
                    82:80:71:7b:e2:1f:0e:3a:e7:44:37:35:43:08:95:
                    b0:b3:45:25:3e:a5:2a:54:52:96:95:8d:75:dc:3e:
                    6c:05:2f:3b:34:2e:c6:a1:80:d5:db:de:b2:1a:45:
                    5d:c1:5e:6e:e6:f8:8a:85:a0:3d:93:6c:fc:84:ca:
                    f7:e9:95:36:34:80:53:f4:44:ac:f2:ad:9c:42:61:
                    64:53:58:35:85:f2:93:54:00:39:59:01:e1:2c:3a:
                    9a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F8:36:BB:0C:7D:29:21:AD:02:D7:60:31:FD:A8:BE:69:33:18:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18cf0e57-5abb-3e67-857d-cf9ef06740e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:f4:bb:eb:e8:d5:f2:5b:7c:60:50:5c:5d:85:be:35:38:
         cf:df:39:06:fd:59:7c:cf:62:dc:41:62:c2:51:c3:4e:8e:22:
         b1:64:45:5e:36:b7:b4:f1:27:d4:59:cf:e6:07:6b:50:3d:ea:
         7b:e0:41:67:a6:9a:6c:8b:7c:43:6e:e7:c8:1c:c1:0a:34:5d:
         c0:6e:d7:ab:3f:d8:07:d7:0a:b3:07:f5:0c:60:c4:2b:32:10:
         b5:38:fa:05:95:db:0b:cf:6b:d5:88:c9:d9:ee:88:2b:20:53:
         d8:cd:39:56:68:3a:c8:74:e7:bb:26:cc:c6:13:10:d1:f5:65:
         b8:cd:35:55:aa:3d:60:50:a0:52:f6:27:fb:e8:24:3e:45:ba:
         16:4e:90:04:54:0f:7a:59:21:d4:93:0d:71:a4:1e:7d:a7:ee:
         bb:e5:ce:9a:58:e9:5f:a3:03:0b:96:52:90:c5:61:16:88:6a:
         41:83:76:a3:a4:10:96:4e:8d:f7:f7:18:08:24:ce:f4:25:cc:
         49:e8:89:e6:72:0a:73:6b:77:b8:38:8b:7a:fd:ed:82:3c:ea:
         89:9a:6d:0e:d2:ed:1b:a2:a7:98:ca:14:71:f7:bd:ec:48:1a:
         30:bf:27:5a:ac:0b:69:bb:d0:99:0b:f8:a1:ab:ba:82:0e:cf:
         19:c1:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:11:11 2026 by rpki-client