Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321c3a73-68b7-3d9a-8b0b-cc9d1d0520f0.roa
File:                     321c3a73-68b7-3d9a-8b0b-cc9d1d0520f0.roa (raw, json)
Hash identifier:          jzS9QYILN8vgbggXJ/C1uSfrsJdnvt1Zxl0OHMdbfzQ=
Subject key identifier:   F4:C2:E7:C0:75:CF:AB:C0:4C:7B:48:C9:A0:91:EA:F9:2A:52:45:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79B2AE18B783B66D637D460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321c3a73-68b7-3d9a-8b0b-cc9d1d0520f0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1007:a118::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:2a:e1:8b:78:3b:66:d6:37:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b3d5579e-4195-4a69-9882-9cb63423d909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:53:2f:f4:44:da:49:56:1c:78:b2:fe:5b:75:
                    43:1d:95:9c:38:42:05:3e:aa:50:a6:d6:b7:ce:39:
                    9a:d1:78:d2:11:d7:bf:c0:e3:e0:d4:86:3f:3a:0d:
                    1e:05:e7:59:40:df:99:b3:ba:d1:b1:fc:73:dc:f3:
                    56:d5:92:1e:79:07:6c:e2:6a:68:7b:de:f2:fd:50:
                    8f:f3:fa:75:0d:92:c1:bf:a9:3c:b9:8e:ae:02:f0:
                    ed:89:e6:50:ae:af:37:f7:5a:88:19:72:21:a2:9b:
                    0b:dd:ba:ae:c5:35:8e:4a:89:03:27:5e:7c:c4:ba:
                    db:29:05:46:f4:80:57:c7:11:62:d6:f5:8f:1c:8e:
                    0b:f0:ed:34:1f:78:d2:0c:51:b0:f8:03:a7:76:70:
                    b7:a7:ac:74:92:97:31:d3:31:ed:f4:26:d1:21:61:
                    e5:77:c4:2d:d5:99:c7:2e:38:77:0c:ce:ab:84:fc:
                    2b:c1:94:2b:5d:aa:43:b0:cc:e1:10:90:d7:12:ac:
                    66:49:27:a1:e5:b2:13:b9:a9:2e:cf:bd:ba:14:c4:
                    31:e7:0f:06:7e:83:8b:8b:e1:3a:5d:97:ea:78:1b:
                    84:d8:28:23:48:be:f6:d1:68:d6:d2:2a:18:fd:26:
                    e0:97:65:a6:d6:cd:f2:84:3d:9c:55:30:6d:5a:fe:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C2:E7:C0:75:CF:AB:C0:4C:7B:48:C9:A0:91:EA:F9:2A:52:45:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321c3a73-68b7-3d9a-8b0b-cc9d1d0520f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:a118::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:dc:41:85:7d:6c:05:6f:a8:70:53:1e:77:b0:90:54:e9:e1:
         01:97:30:20:22:1b:fd:3e:fe:bf:36:3e:6f:29:69:39:ad:54:
         85:b2:49:d7:d3:ea:9e:96:36:55:b8:17:dc:16:2f:45:7d:d2:
         72:fc:47:9b:56:8c:be:59:b6:35:b6:c6:af:bc:a9:97:b6:ea:
         ce:cc:07:12:97:73:52:91:5f:82:a5:f1:2a:1c:29:5e:7e:f6:
         35:4b:74:58:13:64:b6:4b:24:35:a3:83:1e:59:67:5f:c0:14:
         c3:dd:f1:eb:2a:62:ca:e0:37:49:aa:65:66:51:72:09:78:53:
         93:77:21:87:1b:f4:43:84:c4:9d:2d:d6:2c:80:db:54:c7:13:
         42:42:7c:05:88:60:49:ed:50:e6:ae:01:80:bc:16:d3:bc:38:
         4f:08:d9:fa:d8:fb:67:07:bf:ea:e0:e8:d0:21:98:ba:92:0a:
         51:b3:b2:c4:f4:fa:04:15:f1:ec:b3:6a:5c:bd:38:f3:07:aa:
         71:07:b7:3e:b7:a7:37:7e:8d:be:04:8a:94:bd:d9:12:1f:4c:
         c8:8b:ad:e6:92:c0:b4:ff:e8:7c:19:fc:de:2c:e5:3c:af:18:
         5d:13:d4:49:54:47:ea:c2:f3:56:bd:2f:05:13:00:22:11:66:
         3e:24:bf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:32:56 2026 by rpki-client