Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa
File:                     59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa (raw, json)
Hash identifier:          zQmcui+eDdp0tDSWE49lZ7ioxVLYfXAoH9oANS5DLQ0=
Subject key identifier:   03:FC:0B:E7:70:76:E7:23:30:E1:15:B7:8A:75:86:91:04:C9:DF:ED
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A8B8E1B97D4DE06426C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1008:b060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:8b:8e:1b:97:d4:de:06:42:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=23d51d09-8b32-4926-8091-456e13439955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:43:86:83:7b:9d:63:da:38:96:26:de:60:
                    68:ff:2d:4b:9e:c0:06:15:be:c3:f0:2e:fc:79:27:
                    0d:b5:8d:81:2a:be:42:e2:5d:6c:6d:0d:13:0c:2e:
                    8c:c4:67:a4:d1:46:18:d8:78:d8:70:72:c9:b3:0e:
                    ef:2e:85:74:d3:21:6c:94:00:db:a4:3b:c1:46:58:
                    d4:b9:9f:14:46:7d:ef:36:a4:21:2c:d9:16:4a:4b:
                    9b:92:1c:00:62:45:c0:75:34:90:c1:05:a5:a8:47:
                    33:f1:7b:e3:49:30:62:3d:91:96:7c:2b:19:a6:df:
                    c9:6b:ad:b7:2f:d4:fc:af:34:1d:07:30:3f:5b:84:
                    83:7a:c5:23:71:22:56:80:48:aa:c2:b2:e1:8b:e1:
                    c2:f4:f8:62:f1:c5:67:db:98:3e:99:bb:06:a0:ce:
                    bb:e1:1b:1e:ce:54:22:10:d1:6c:05:d6:33:46:2f:
                    d3:bd:26:7f:3b:73:3b:21:eb:c7:11:01:64:94:13:
                    d4:b6:91:10:16:08:d6:b1:03:7a:02:72:dc:2e:d7:
                    09:1b:7e:f8:ba:3e:56:a4:59:79:cc:16:de:c9:4d:
                    83:70:10:41:44:f0:49:ad:b3:38:a2:6d:62:13:43:
                    b1:b7:c7:2a:95:aa:a4:ad:81:ff:92:25:14:c2:bc:
                    2c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FC:0B:E7:70:76:E7:23:30:E1:15:B7:8A:75:86:91:04:C9:DF:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:04:61:7a:f9:bc:95:25:5e:58:05:a5:2d:18:8e:d4:3a:8f:
         8f:a1:fa:d3:58:1a:7a:23:8b:ff:46:a5:48:03:0d:3c:41:61:
         df:fb:70:7d:84:e4:fe:d9:7a:b1:3d:2d:90:3d:75:37:d8:40:
         97:65:54:f0:71:5d:3d:e6:d8:3b:af:90:1b:55:0e:84:fa:e8:
         34:ef:f5:88:97:ca:ce:25:56:c2:7e:c4:c5:a4:67:3c:24:ba:
         32:4b:a1:f0:c4:69:f2:61:b5:eb:50:e3:66:41:16:97:65:4b:
         1c:b8:6a:d0:7a:9f:44:d1:f5:9d:5a:81:5f:13:7f:85:14:3c:
         68:3e:93:94:e4:f0:db:e1:f9:bc:2b:a5:b8:0a:d9:c0:c9:cc:
         de:a3:e9:a7:b5:ed:a1:a6:90:33:30:28:e9:76:af:77:4c:ea:
         73:f7:33:7c:5b:9e:51:ec:b1:15:5a:18:85:13:21:0a:2d:ed:
         ff:18:1d:72:e1:bd:99:94:e1:a9:c9:e0:02:c2:3e:d5:23:c5:
         6d:75:1c:a0:f0:df:5c:37:20:09:f6:a6:2d:19:7f:fc:99:82:
         97:83:57:35:cd:92:89:92:c6:76:71:3c:69:30:f1:6f:50:0b:
         c1:c5:d8:16:05:ae:29:94:37:dd:fc:50:52:63:d1:f7:64:bf:
         69:7e:fa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:40 2026 by rpki-client