Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/674f7f79-a2ad-305e-8db5-9253b2f8cce1.roa
File:                     674f7f79-a2ad-305e-8db5-9253b2f8cce1.roa (raw, json)
Hash identifier:          aLLTftghDSR64KwlG390KbqTikWtNCZ8e8C6YIwGhhE=
Subject key identifier:   D4:87:E2:EB:79:A1:FF:CC:BA:3B:11:E3:F8:2B:63:E3:54:3B:BA:99
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790C459FCCC3E520C2B9EE7
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/674f7f79-a2ad-305e-8db5-9253b2f8cce1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:b180::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:c4:59:fc:cc:3e:52:0c:2b:9e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7009d553-da3e-46f2-8876-fea2f8789bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:57:e8:4e:f2:26:c1:a5:1b:f0:63:5c:0f:
                    17:ec:3e:f1:1b:51:17:43:36:fa:b1:90:df:7f:87:
                    2c:49:ec:bd:96:aa:60:7c:90:11:cb:fa:f8:04:4c:
                    02:c5:9a:4f:62:51:51:35:03:75:a8:1f:7e:fc:de:
                    19:64:d0:70:5b:ea:83:3f:f9:4f:47:08:b9:0a:c6:
                    e9:d2:7a:a3:d3:0b:c2:e3:d3:e7:c9:99:d5:ae:fb:
                    4c:c5:cd:72:0e:6b:01:1f:1b:1f:6d:ae:07:27:32:
                    36:25:47:ab:ce:5e:19:69:9c:70:0d:8f:8a:3c:c5:
                    79:cc:5c:14:90:8e:72:f4:71:9c:af:13:f5:ce:63:
                    e6:a2:ec:12:10:62:8a:eb:a8:3d:4b:f1:1d:47:d7:
                    37:fa:95:9f:ac:08:3d:4f:7c:c0:3f:52:2a:16:52:
                    3d:40:3b:61:eb:3d:5d:4d:82:98:54:02:ce:d0:b3:
                    3a:78:92:c5:19:83:21:71:98:9a:ad:ab:ce:42:0d:
                    c9:2e:a4:5b:b5:6f:f1:ed:69:86:9d:7a:b4:c3:07:
                    7b:92:97:4d:88:38:d9:43:39:85:06:48:e2:2d:1a:
                    a6:a1:7c:7c:e4:a9:9b:e2:13:a1:a3:c1:ff:80:c3:
                    dc:20:11:a5:de:7c:ab:58:38:e7:9c:1b:fe:43:19:
                    eb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:87:E2:EB:79:A1:FF:CC:BA:3B:11:E3:F8:2B:63:E3:54:3B:BA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/674f7f79-a2ad-305e-8db5-9253b2f8cce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:29:98:8d:2f:18:71:46:69:6c:2f:5c:71:fc:2e:39:af:ee:
         4d:d1:ac:48:46:7c:e0:2f:17:65:84:cf:29:0e:a5:0e:fd:e6:
         98:25:3b:09:1a:b0:76:e4:c4:63:99:db:fb:75:3d:c5:67:48:
         36:e2:fd:7d:73:6d:33:78:3d:d8:db:c8:f7:4e:b8:63:9a:45:
         41:58:38:11:7e:6e:96:0c:8a:da:7a:97:98:04:b2:e5:42:72:
         db:2e:43:80:5b:64:32:df:1b:48:11:22:03:55:dc:61:ee:34:
         6d:4b:85:f2:6e:8b:b2:b7:ae:bd:23:ec:29:52:38:ed:26:01:
         a8:f4:fa:67:53:75:16:39:58:1a:95:e7:47:19:7f:d6:2f:7e:
         6b:74:25:f9:4a:37:02:44:30:f5:8d:18:2a:4e:2d:8a:39:11:
         ef:fb:73:b4:ed:f4:82:fb:92:e1:d0:cf:32:d0:dd:7e:98:35:
         d5:47:19:df:f9:21:9d:f2:c8:a7:47:4c:b7:a0:7d:a1:79:0d:
         ff:ea:8a:7a:10:a2:bb:7f:1c:ea:62:c2:4f:2c:32:6d:50:6b:
         a0:f0:65:16:8f:f6:47:c8:13:14:c2:0b:49:c7:03:1d:22:0c:
         50:b7:cb:19:3e:26:ad:c9:3e:51:93:f1:9f:c5:fb:4a:bb:2e:
         a8:73:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:36:47 2026 by rpki-client