Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e52720e-c4ea-36e0-b056-56e4bc71b374.roa
File:                     1e52720e-c4ea-36e0-b056-56e4bc71b374.roa (raw, json)
Hash identifier:          do01YqQvXuY4zupSp9HsTRcZyzc86iY2LpuJCUPh1gU=
Subject key identifier:   27:E9:CF:92:14:C2:9F:7C:1D:F5:C0:63:E4:22:A4:A5:91:59:C1:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AA95D3A081EF6FB612DC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e52720e-c4ea-36e0-b056-56e4bc71b374.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1003:d400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:a9:5d:3a:08:1e:f6:fb:61:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=65baac67-d471-497f-95e3-f33baaf71a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:37:90:16:7a:9b:4a:2a:f4:10:ed:53:60:
                    fb:de:03:2c:a0:e2:5b:ac:e3:82:02:28:36:54:c8:
                    14:38:93:c3:de:e2:61:73:0e:d2:45:5b:0c:e9:7e:
                    21:b5:04:91:b5:b4:74:6e:85:3f:c1:28:64:60:cc:
                    65:4f:8a:27:af:1d:ba:8e:2b:84:a1:10:87:d8:f6:
                    5a:3e:ec:1e:58:1f:59:b9:44:2d:7b:f9:58:d0:52:
                    79:ec:e0:0e:c0:dd:76:5a:1f:f1:39:1b:66:bd:22:
                    a0:f0:18:a3:20:95:89:f3:e7:12:81:68:6d:4e:d5:
                    85:af:ef:6e:50:58:8c:75:bd:3f:4e:c4:02:0d:c4:
                    7b:7f:7d:a9:8f:11:23:2d:b9:62:07:2f:1b:04:98:
                    66:8a:37:41:08:aa:f7:5d:9d:1d:36:0f:10:cb:40:
                    d2:36:b9:0f:a6:57:6c:da:99:41:06:a1:95:55:f5:
                    96:5a:8b:88:a2:db:77:30:1e:fe:ad:9b:03:6b:d8:
                    5b:61:97:9f:c8:2e:cd:25:93:d5:dc:57:7b:1b:03:
                    27:40:59:3c:28:f0:ac:bf:36:fe:83:f0:4a:15:01:
                    67:63:f1:85:45:a1:8a:41:ab:48:3c:f8:ea:09:78:
                    fc:78:d8:6c:83:c3:40:05:f0:0a:60:58:2f:24:65:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E9:CF:92:14:C2:9F:7C:1D:F5:C0:63:E4:22:A4:A5:91:59:C1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e52720e-c4ea-36e0-b056-56e4bc71b374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:d400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:2f:d9:6b:80:30:20:10:2f:34:33:0f:6c:80:a3:b8:4e:8a:
         66:87:80:43:11:d0:8b:a4:18:2e:e0:c1:8a:b8:81:5b:cd:57:
         0d:2c:83:da:c2:89:a9:94:99:6f:4d:32:ab:a7:2d:f9:55:12:
         a2:9f:f2:c6:e9:b9:78:64:fd:3d:93:52:fb:f9:89:9d:d1:db:
         1b:dc:bc:85:73:ec:12:ce:ad:0e:cd:e2:45:98:5a:b9:1b:1b:
         9c:4a:7e:d0:c8:d9:d4:38:c5:29:bf:34:8f:2f:ca:97:66:49:
         d1:66:20:a9:fb:a0:2e:81:79:55:59:b9:04:1d:0f:31:53:9a:
         8b:4e:cc:62:59:3f:74:de:7c:c4:ed:14:1b:a1:6d:89:13:f6:
         13:c2:f6:bb:ed:a1:b9:04:d4:0a:94:9d:a8:da:35:d5:cd:d6:
         86:a9:aa:ff:f1:c6:6f:54:f6:c9:32:28:6e:dc:79:e1:d2:2f:
         32:4c:45:d2:47:5e:3e:d3:88:e7:97:cf:42:16:20:10:db:86:
         be:14:93:44:3b:3e:7b:f5:a1:ad:43:d6:bc:f6:6d:83:ef:95:
         62:a7:62:af:37:ba:b2:60:b7:7d:e0:97:de:4e:62:44:2a:03:
         1c:79:38:27:42:9b:1a:a7:1d:ef:86:dc:a0:26:7c:b1:90:59:
         d7:86:e9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:15 2026 by rpki-client