Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ef781db-e5af-327e-b493-a1e17fe37366.roa
File:                     3ef781db-e5af-327e-b493-a1e17fe37366.roa (raw, json)
Hash identifier:          sntJl65GxbGPYnSuHd9LUI9I4fNV5KTitmOzHUz1nF0=
Subject key identifier:   AC:E6:41:37:3D:B1:33:63:92:67:A2:B1:69:1A:2C:57:E3:52:68:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AA9B85161B0B8ED7F4B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ef781db-e5af-327e-b493-a1e17fe37366.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1004:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:a9:b8:51:61:b0:b8:ed:7f:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=efb6f509-9478-432d-8c07-b812f5788423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:de:89:72:db:18:e4:04:be:f2:cb:ce:ff:b2:
                    32:68:ee:d1:5c:4d:33:79:8a:eb:6a:52:b3:a6:76:
                    4e:20:01:7f:f8:07:a2:9f:c8:66:cf:58:9b:71:56:
                    da:4b:48:31:aa:31:46:0c:9d:15:e0:9b:9d:7a:23:
                    6f:cb:ff:e4:74:72:a5:b5:71:25:f3:a2:75:a4:62:
                    8f:b5:83:40:c6:48:14:0a:03:b3:38:e9:9a:f7:c4:
                    e6:0f:3c:ed:fa:06:45:c2:85:4b:63:f7:38:0a:5f:
                    83:96:7d:e2:68:0b:6a:98:02:22:c3:50:25:23:3b:
                    05:20:34:3f:01:0d:fa:34:ca:4a:77:cb:37:43:1d:
                    0f:a1:78:b0:d4:30:d7:7e:83:2d:78:0f:2d:1d:6a:
                    c1:f6:25:67:6a:76:b3:19:9d:a4:cd:36:54:d9:54:
                    ee:8b:64:43:cc:02:28:95:6b:ee:67:ae:73:92:96:
                    95:35:76:ea:d4:c9:f9:25:5e:5e:c0:20:39:2d:ff:
                    71:55:13:1f:9d:d2:53:59:2c:b9:d4:51:c2:81:8a:
                    92:d5:cb:41:90:4f:e9:0a:f3:64:a1:6a:9d:d3:ed:
                    a5:01:a8:4f:1d:10:6c:8a:3c:e0:78:51:bd:7c:ff:
                    7f:33:bd:fd:bf:8f:38:ff:ef:4a:9c:fc:b9:84:72:
                    46:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E6:41:37:3D:B1:33:63:92:67:A2:B1:69:1A:2C:57:E3:52:68:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ef781db-e5af-327e-b493-a1e17fe37366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bc:a3:01:ff:4b:54:e7:f1:50:78:9b:f1:5f:f5:3b:72:59:
         a6:af:ed:33:b3:e3:46:d8:4f:fd:b4:ab:e7:ad:25:86:5c:0f:
         f5:05:52:e1:a8:08:a3:6c:5c:cb:71:d7:a7:23:47:68:af:54:
         b4:96:16:62:1a:d4:d2:55:0d:fd:fe:00:52:64:6c:9c:44:65:
         91:a6:1d:ab:a6:0a:c8:2e:b2:c8:2c:99:1c:dc:05:56:ce:98:
         37:71:2a:81:8e:19:52:08:38:e8:cf:30:23:a2:97:de:6a:12:
         31:e4:1b:30:9f:cc:09:95:1e:55:bf:d6:ed:47:e5:2a:85:c7:
         f2:3d:21:f2:fd:1a:07:47:0b:1c:39:34:86:f4:3f:d0:79:16:
         75:da:d8:13:cb:f5:12:6f:2b:26:72:c1:b8:d2:42:69:f9:6c:
         69:41:de:a0:63:7e:c9:30:45:23:56:f9:9b:db:aa:4d:c7:1a:
         b7:aa:e6:9f:25:d5:b8:e7:35:6d:a8:1a:99:98:e3:64:8d:d5:
         01:96:cf:81:20:c3:be:be:7c:bd:fe:64:db:f9:6e:75:7d:a3:
         5c:f1:e8:14:82:56:d5:ff:81:5d:62:66:32:c1:5a:db:1d:a9:
         2e:32:e5:cb:99:5e:d5:30:ce:02:48:bd:96:5a:19:47:1e:8f:
         4e:62:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:02 2026 by rpki-client