Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/256f6900-e601-320c-9a80-54e01f3fec62.roa
File:                     256f6900-e601-320c-9a80-54e01f3fec62.roa (raw, json)
Hash identifier:          3F7hlw5yjIOZfXCX+L0LGyW1C5b0RhqbC2jAV1iG/hU=
Subject key identifier:   D7:F6:EA:0D:F0:2D:AA:0B:A0:10:5B:24:EB:B7:32:73:75:91:24:09
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A83DFDE9A4A5EF32291C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/256f6900-e601-320c-9a80-54e01f3fec62.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1004:d150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:83:df:de:9a:4a:5e:f3:22:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=f1ee4c35-196d-4af4-90c1-8a329d15811f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:85:4b:56:1b:f9:0f:f5:2b:63:13:fd:c4:
                    73:b3:67:38:75:33:e5:9c:7e:a5:2d:17:27:cd:e0:
                    a9:16:e5:40:32:37:47:19:e7:ca:26:d1:ca:79:1b:
                    3e:d6:ce:e1:01:80:9b:09:45:2f:c5:6c:04:02:3f:
                    d9:06:48:c3:e6:25:c4:31:df:2d:35:81:3c:96:17:
                    9b:5f:70:04:79:36:24:37:93:86:c2:6a:a5:6e:11:
                    d9:2c:d6:93:f2:5c:de:2b:50:ad:8e:2e:36:3e:0f:
                    9a:34:31:5d:9f:54:f7:86:fd:f0:94:d9:e6:ba:87:
                    59:21:6c:bb:dd:69:b4:22:df:58:58:03:bc:7a:c8:
                    9c:ac:53:6a:75:0b:d6:bd:d0:4d:f0:01:85:37:19:
                    6f:35:28:d7:ad:e9:db:27:a4:f3:71:c4:a2:a9:25:
                    3f:27:c2:b4:82:93:a8:3f:8b:ad:9c:8c:81:73:bd:
                    92:98:47:b2:64:8c:cd:52:d4:a8:52:f5:23:8a:48:
                    d1:ce:1c:02:9a:92:1f:c5:ae:7f:a5:1c:76:cd:2f:
                    01:e7:f0:b9:4b:47:37:a4:1b:38:0f:3b:90:ba:8a:
                    18:f5:1d:40:82:9c:38:a6:37:a2:7c:df:ad:3d:ca:
                    b0:3e:99:0d:1c:eb:f8:0f:2d:8b:01:43:41:79:68:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F6:EA:0D:F0:2D:AA:0B:A0:10:5B:24:EB:B7:32:73:75:91:24:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/256f6900-e601-320c-9a80-54e01f3fec62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:d150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b8:1d:ec:e6:f2:4b:56:3e:a6:18:a9:4b:7a:79:5d:48:e4:
         51:f3:62:da:7e:b8:a0:fa:c0:5a:43:ef:fb:af:7e:c0:c5:7f:
         7a:86:cf:69:1a:c7:92:cf:ea:1e:40:6a:10:45:a1:34:d1:c5:
         a7:db:94:90:ec:e7:db:d1:70:0d:48:03:86:59:2b:50:1e:75:
         42:ca:f1:09:8f:ab:28:7d:c7:e8:c6:f5:f0:87:3c:12:88:69:
         35:f5:68:36:8e:4f:f8:7d:10:a6:fc:e8:20:1b:a4:fb:36:ea:
         d2:af:f7:04:83:cc:ad:e5:15:6a:0f:9e:58:d8:46:64:03:88:
         5a:51:e9:57:b2:c0:66:65:6d:b7:cf:23:3b:5c:a3:04:1b:ee:
         d9:b8:9b:43:5c:d9:b8:6e:74:b5:9b:48:44:ab:55:95:d1:be:
         59:55:a9:86:50:59:9c:d6:94:79:87:d6:2b:e1:67:a3:8a:f0:
         d3:d2:3e:ab:4e:d9:c1:53:01:d3:67:51:7c:85:3c:8c:a7:86:
         1b:94:b3:7b:a1:ce:46:a5:8b:ac:ef:0f:46:c7:1a:e6:6d:ff:
         4b:49:8d:13:76:79:a2:3c:04:57:b7:aa:19:ef:76:b5:ea:2b:
         df:7e:db:5f:bf:ce:1a:95:d8:57:d3:3f:b1:ef:97:ac:92:7a:
         12:70:d2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:09:21 2026 by rpki-client