Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ed3c9b9-bfdc-3e70-998d-f11a80c207f1.roa
File:                     2ed3c9b9-bfdc-3e70-998d-f11a80c207f1.roa (raw, json)
Hash identifier:          qdor4+3PoO++GWRH9jdbW3rnIsQ5ZXHA5wm11PUXlhM=
Subject key identifier:   7E:16:DE:2C:60:88:CC:F3:67:0B:4A:47:1F:EA:B1:73:91:15:BD:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A81C9EC13B9CE71E08B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ed3c9b9-bfdc-3e70-998d-f11a80c207f1.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1002:b030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:81:c9:ec:13:b9:ce:71:e0:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=a24d6641-c477-4055-bcf1-1fa4fa52c60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:ca:62:cc:5a:f2:d8:76:56:7b:69:05:66:
                    31:54:4a:fd:46:fc:8d:ba:8d:0e:fc:ba:6c:06:39:
                    d1:0d:45:11:44:e9:a6:a8:1b:33:bf:7d:af:f8:d1:
                    41:07:f5:37:cd:ba:ea:2f:78:14:99:78:4f:de:f9:
                    3b:4b:ff:61:ab:1b:3b:a3:9f:b7:83:12:e7:ed:79:
                    34:b1:83:00:88:b1:f4:7b:4f:56:44:8c:fa:b4:99:
                    9c:44:ba:33:fa:96:8f:48:9a:fb:cd:38:45:5b:c7:
                    72:82:6e:d4:1e:69:d1:34:07:8a:f9:7b:77:a9:70:
                    62:76:67:88:9a:f3:e7:bc:e2:1a:08:6d:d6:f3:28:
                    40:a5:3a:68:25:7c:98:35:f5:c9:de:fd:f1:09:6b:
                    a1:fb:bc:92:2e:dc:ba:7c:38:ee:e1:b7:d7:b3:7e:
                    a8:41:fb:90:41:6d:68:a7:86:b3:c0:3b:e2:47:8b:
                    36:75:36:2b:29:97:13:17:79:8e:f0:79:4d:d9:e9:
                    3a:32:46:ae:66:02:4d:45:41:89:2b:29:8d:39:e6:
                    0e:ba:67:db:fb:96:40:2e:f2:a1:cb:ad:ab:be:f7:
                    2b:5f:1b:62:dc:da:c7:79:4a:b5:71:0b:1b:17:c8:
                    b4:07:60:26:8e:70:f9:27:24:42:1b:b5:6d:bd:1d:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:DE:2C:60:88:CC:F3:67:0B:4A:47:1F:EA:B1:73:91:15:BD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ed3c9b9-bfdc-3e70-998d-f11a80c207f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:86:f5:6d:e6:6c:ef:5b:ff:8c:b2:a6:ad:a5:8b:7a:ea:20:
         88:58:78:15:6c:77:c3:f2:c4:9f:aa:ff:3b:0c:23:20:d1:35:
         6e:7c:bb:2d:28:ec:d9:d5:7d:5a:4a:e4:95:9c:ce:c6:4b:fb:
         7c:53:26:7f:01:33:ef:03:be:2f:9a:34:28:00:17:07:be:e4:
         24:22:60:f8:5b:a6:59:3d:d5:af:c3:01:20:ee:a9:18:aa:3c:
         20:12:37:fd:99:ad:e7:da:0e:cc:7e:58:1e:c4:ea:e2:d8:44:
         d6:4d:ee:16:8c:ba:95:d7:f9:6c:45:3d:78:55:12:30:34:16:
         a8:3a:a9:93:c9:cc:69:54:26:f3:04:82:8a:2a:63:4a:0a:e5:
         64:8c:4e:70:b2:90:5f:5f:e3:01:60:3b:88:a9:eb:62:f1:3d:
         90:b8:c1:b2:6e:25:bb:a1:7d:ea:04:c5:0e:4f:32:fa:55:95:
         75:c6:52:43:61:fb:c1:5c:51:84:e7:be:f0:4b:a3:7e:1e:0e:
         ad:41:27:f4:22:e6:02:fa:14:fe:ae:80:85:60:96:bc:8f:1c:
         31:93:b4:1d:ca:56:e7:97:22:33:c2:97:a2:0a:ce:28:46:a0:
         5c:21:54:a2:8f:a8:7c:a9:a9:27:e0:a8:86:1e:73:22:d6:0d:
         d4:f1:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:38 2026 by rpki-client