Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f4aeb61-c00c-342c-8cea-ab456db0388a.roa
File:                     5f4aeb61-c00c-342c-8cea-ab456db0388a.roa (raw, json)
Hash identifier:          b5nk824sdPdBU8OQN+NsNLMXfXUBKu73wv5i3SxN4CQ=
Subject key identifier:   34:4B:82:79:1A:D0:7C:1E:AF:B0:2B:D1:59:02:31:63:8F:7F:84:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA78705CD2DE107586D99BE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f4aeb61-c00c-342c-8cea-ab456db0388a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2607:f160:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:05:cd:2d:e1:07:58:6d:99:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d200d1a6-471e-4dce-9644-08cb272c7a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:08:fe:ee:bb:b5:ca:f9:ba:b9:68:df:6a:
                    73:8a:b7:74:5f:f8:4c:18:c8:62:9d:4b:8e:92:be:
                    59:a6:3a:3a:c3:d7:81:ca:27:05:1a:88:e5:9e:1a:
                    2b:38:2b:8e:db:a7:c0:b7:9f:91:46:15:da:80:20:
                    71:f9:ad:36:e1:a2:b4:ec:e0:78:e5:ec:e6:76:50:
                    82:92:9d:e9:08:66:87:46:ce:d3:f2:c8:e3:a7:65:
                    ba:b2:8b:94:d7:f0:d6:3a:22:7c:4c:23:26:a6:78:
                    a1:d0:6e:22:67:86:23:d1:31:5b:ce:f4:bc:a7:8d:
                    86:77:de:69:81:36:6e:19:39:bd:d7:5a:75:ff:f2:
                    20:c3:e6:f3:a5:ad:bf:ad:cd:76:67:18:be:f4:37:
                    6b:e3:c5:6a:3d:a2:77:67:13:3e:5f:99:f8:43:a5:
                    20:66:0b:64:cf:18:7f:e8:78:15:2d:c1:a6:f8:ed:
                    72:d6:ad:93:9b:48:92:2d:6a:1f:fd:af:6d:ce:a9:
                    0d:74:d2:90:ee:57:d6:26:ff:21:fc:6c:83:c6:e0:
                    a4:5f:ae:6d:29:ab:2c:68:e3:5c:2c:ea:51:df:e2:
                    e3:02:b4:bc:4e:3c:68:d2:72:91:78:61:5e:ae:f2:
                    de:e5:5c:c6:6d:33:a3:8a:fc:3c:7f:96:70:c0:c2:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4B:82:79:1A:D0:7C:1E:AF:B0:2B:D1:59:02:31:63:8F:7F:84:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f4aeb61-c00c-342c-8cea-ab456db0388a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:cd:05:40:a7:1e:1d:85:a9:25:65:8c:85:34:12:ba:da:e9:
         ea:68:60:12:84:b6:12:9c:87:7b:fc:e0:6a:78:70:7a:c5:ab:
         df:21:99:71:a4:e6:93:2c:85:6b:1d:9f:d1:67:c8:4e:6d:f6:
         aa:65:b3:14:8c:95:51:1a:7e:db:de:99:6e:f7:6d:44:79:75:
         53:d2:53:3a:eb:fb:37:b7:3b:21:78:9a:55:56:7f:1f:33:70:
         6a:b4:81:5f:93:03:7c:89:0c:b5:d6:a8:7b:4a:a2:72:d1:33:
         ef:66:a1:2f:f4:f8:78:af:28:05:73:af:50:6a:60:47:7c:51:
         ec:fd:11:93:ad:e2:61:0f:f6:69:e6:ef:d1:e6:e6:f8:9d:4e:
         b7:23:c6:b5:67:bd:5f:13:62:e3:1b:75:3d:5e:6f:f7:47:77:
         da:23:78:1d:68:9f:e8:30:a9:49:2c:ce:fe:b3:e2:03:aa:95:
         fa:ae:43:92:10:2c:7a:8a:d9:dd:40:49:a0:02:ec:72:75:0f:
         eb:99:31:4e:c0:70:51:72:c5:a8:e7:b7:f3:57:38:63:3b:76:
         b1:9a:48:38:9a:de:8c:6b:f9:4f:07:91:ca:b4:29:fd:75:1f:
         cf:0c:59:20:8b:67:a8:12:a1:10:c5:46:89:71:6d:81:a0:9e:
         c0:18:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:52 2026 by rpki-client