Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fc73939-b98d-3f2d-894a-9c40108fd393.roa
File:                     8fc73939-b98d-3f2d-894a-9c40108fd393.roa (raw, json)
Hash identifier:          B2YrRx0OFPvR/fdG4ZEWA3wb3K/vvWE4S5EvfEg34y8=
Subject key identifier:   0D:1A:11:6D:A8:AF:50:04:18:51:CD:FA:A7:DE:33:B7:E7:FF:1D:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AA98B5210385C728EB400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fc73939-b98d-3f2d-894a-9c40108fd393.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1003:f440::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:a9:8b:52:10:38:5c:72:8e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=854c2ed8-5199-4b79-9ece-45956e8bf624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:2f:34:85:e9:0e:03:69:8c:a9:68:4f:05:
                    bf:0d:c1:a5:c8:c6:d2:cc:f7:7a:f4:70:6a:76:60:
                    0f:ea:7c:fd:a2:29:67:9f:d2:47:83:d9:58:a5:3c:
                    a4:a0:67:99:20:af:e8:d0:f2:80:0e:d1:af:51:d8:
                    96:38:2d:49:7a:bc:72:eb:f0:db:95:50:16:1e:53:
                    e8:1b:98:c3:93:18:cc:81:a6:1d:41:c6:03:f4:02:
                    c5:d7:cc:4b:f4:34:e5:5b:52:25:a4:d9:a8:af:7f:
                    7e:aa:8f:cf:4d:4e:e4:59:f9:1e:0f:84:0a:22:53:
                    43:21:24:f3:67:56:12:ef:12:d1:c6:9f:93:25:ce:
                    82:e7:01:b2:85:8b:18:9c:61:8d:0b:b0:a5:a3:c5:
                    fa:c6:89:08:7d:73:0c:2b:50:12:6f:34:42:7d:c2:
                    30:3d:90:ac:a0:dc:7f:2a:9a:70:aa:f5:65:9e:9c:
                    c5:dd:cb:1e:c4:91:8e:80:1c:f6:ed:60:d2:21:40:
                    55:e4:ba:3a:20:6b:e2:2a:09:a2:6e:07:c0:c6:ac:
                    0f:5e:ec:6a:9b:9a:0b:e7:5c:29:b5:5d:6c:11:ac:
                    3b:30:eb:22:ec:f6:9c:42:9a:ba:11:e2:b9:3f:d9:
                    84:c0:8d:c7:cd:69:ab:27:81:62:19:c2:65:fb:90:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:11:6D:A8:AF:50:04:18:51:CD:FA:A7:DE:33:B7:E7:FF:1D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fc73939-b98d-3f2d-894a-9c40108fd393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:f440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:b3:5e:52:81:6d:17:52:34:aa:83:ac:ae:c2:92:ff:07:
         5a:d8:49:85:ac:db:b6:c7:6e:01:8b:c0:90:c7:37:bf:78:1c:
         de:89:0c:36:1c:ac:c4:fd:bd:d2:69:ed:ee:82:aa:11:e9:57:
         3a:f6:b8:35:11:c2:69:fd:f2:70:e3:b9:09:82:34:9b:2c:1f:
         22:df:11:bb:2c:ea:02:09:a3:4e:70:8e:56:2f:c2:22:f1:3b:
         e0:5f:62:87:fe:9b:29:05:29:b5:6e:0e:04:9f:b6:8e:4d:db:
         d5:ed:90:3c:ef:94:16:91:32:4f:0c:74:e4:27:26:41:95:db:
         cd:d6:84:07:b0:4a:55:c3:6a:45:94:bc:2f:55:05:ae:c7:43:
         de:73:6f:6b:db:4f:38:d5:21:76:7e:1e:fa:02:6b:03:d5:8a:
         50:af:89:41:a9:08:98:41:95:d5:74:91:a4:c4:51:84:83:61:
         c3:a6:99:8a:dd:38:c3:9b:03:7f:e1:41:ba:8e:59:ea:24:4b:
         d3:ac:70:80:5a:38:b4:63:81:f2:2e:1a:a5:9a:56:7d:d9:62:
         55:a4:9b:16:8e:83:74:3f:28:10:36:8c:20:ad:54:a1:0f:9e:
         48:c2:7c:5a:2c:96:4f:74:4f:7b:6c:15:3a:9d:e4:12:a7:5c:
         d5:f9:5b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:00:36 2026 by rpki-client