Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f4f20b2-256c-3ef7-8942-c56c7f77d7c8.roa
File:                     2f4f20b2-256c-3ef7-8942-c56c7f77d7c8.roa (raw, json)
Hash identifier:          2Tf4BF9vt12KkrTRoqLk+ypJJw4U//1lEag862yZ40Q=
Subject key identifier:   7D:95:33:9E:3A:46:8A:8D:4C:B4:71:FA:27:1D:5A:1A:CE:91:15:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79C55FB26663BA565DF04F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f4f20b2-256c-3ef7-8942-c56c7f77d7c8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1014:a112::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:55:fb:26:66:3b:a5:65:df:04:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=08d67c70-512a-4f09-b65a-6c876be14cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:90:03:3a:42:3e:e3:5a:fb:bb:02:6b:3d:06:
                    d3:66:35:9f:38:99:89:b0:36:aa:ad:1f:61:fd:5b:
                    00:4c:d2:a0:b7:2b:d9:76:f9:bf:98:fc:09:89:b4:
                    44:e0:97:ae:2a:60:6a:b4:c2:42:b6:e7:e1:6b:c4:
                    a6:cf:b4:6d:e2:e0:64:bb:03:aa:c6:d0:29:16:40:
                    19:ba:2d:dd:18:f3:3d:2c:45:cc:07:73:a7:8d:05:
                    e1:5f:b4:18:87:c0:6d:a9:80:ab:0d:40:0f:9c:76:
                    e0:ff:01:fa:69:99:a5:29:32:3a:88:9c:1f:4a:94:
                    3f:e0:9d:2e:bc:93:0a:1c:11:38:33:86:4c:53:68:
                    e8:22:46:75:f8:f9:58:b8:9c:59:a4:1c:22:04:12:
                    7f:72:1e:59:ca:1b:f9:af:41:6f:7b:14:37:0a:7b:
                    73:c9:1e:76:f9:9a:60:1a:72:09:58:4d:9f:78:7c:
                    6a:e0:10:68:97:72:40:02:ca:df:71:a5:e1:fc:fa:
                    81:64:3a:a9:ff:4f:36:a5:dc:71:95:38:80:3f:98:
                    99:34:73:7e:7c:29:7a:54:66:e9:f5:8f:2b:d0:9a:
                    23:a1:49:ed:43:dd:29:9b:4e:f7:bb:91:31:b8:03:
                    ca:fa:08:ec:a7:a2:11:a2:b7:6a:7a:e2:52:40:27:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:95:33:9E:3A:46:8A:8D:4C:B4:71:FA:27:1D:5A:1A:CE:91:15:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2f4f20b2-256c-3ef7-8942-c56c7f77d7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:a112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e0:f2:75:13:4b:5f:98:46:68:81:bb:aa:4c:f7:50:a3:00:
         cc:6c:9d:e9:02:31:6a:90:ef:9f:56:f3:07:2e:a9:88:3c:19:
         1a:ec:bc:67:0a:b6:bb:40:52:ab:31:ee:57:e3:74:66:a6:60:
         d7:a4:68:db:85:2e:00:a3:18:6b:21:08:7a:15:d3:38:9e:38:
         7d:19:13:08:1c:93:34:aa:03:75:47:23:68:e4:4e:ad:37:83:
         44:ee:39:7c:91:1e:e3:a6:21:34:c7:5f:96:ff:da:7c:aa:01:
         f8:ba:21:84:40:8d:e4:68:71:51:88:01:56:c7:86:ee:fc:79:
         36:87:09:89:ff:13:ab:c7:65:67:fb:9f:32:e1:bb:50:5a:22:
         eb:c3:7b:87:90:c2:15:b5:ea:15:78:3e:2a:44:5d:b8:1a:82:
         fd:de:16:de:7f:79:7b:94:a6:61:d7:5c:47:e3:cb:d1:c6:66:
         9f:5d:03:ae:02:ce:db:f1:d4:ef:32:8d:05:6d:e4:04:5b:7f:
         4a:88:13:03:80:b2:ec:b7:97:10:22:56:31:38:2a:7d:4d:c2:
         6b:46:86:ca:1a:03:81:67:32:d8:3f:21:59:17:94:54:a1:78:
         6d:60:f9:53:3e:67:5c:fb:3c:19:f4:5a:f7:6f:be:7f:eb:26:
         c5:b3:b6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:56:27 2026 by rpki-client