Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d576ff-fff5-371b-8d62-837da908e387.roa
File:                     91d576ff-fff5-371b-8d62-837da908e387.roa (raw, json)
Hash identifier:          13xcPx5AShK00Qerxj4OhoOfi8Af1/ucLGggzi0FEAo=
Subject key identifier:   64:29:71:A3:8D:BF:1D:EC:B4:4E:2C:92:53:BE:67:59:F1:A6:6E:E4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AA9AD798DA4E89EC38300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d576ff-fff5-371b-8d62-837da908e387.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1004:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:a9:ad:79:8d:a4:e8:9e:c3:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=620e7621-c6fc-4313-9606-f9b0bcb42d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:29:99:d5:7c:e7:c0:db:d2:0b:9b:ff:77:
                    18:be:4c:3e:0a:62:ff:24:71:60:9e:f1:28:a6:4a:
                    c3:38:4f:71:1a:c3:25:79:e0:6e:c1:82:12:f5:07:
                    73:5a:e1:09:f9:2e:99:46:3d:84:94:b5:9b:23:2c:
                    36:a0:43:8f:e2:61:53:f6:86:d0:dc:54:e4:51:1d:
                    69:ba:8b:77:c1:80:56:1f:36:79:a2:e4:fb:e4:91:
                    79:8f:b3:08:5f:56:03:02:5b:34:46:de:fa:f2:78:
                    f1:8a:54:ad:a6:1d:12:0b:7f:a9:c1:c2:c9:b7:a1:
                    5a:2c:a8:d8:6b:cb:1e:c4:5e:e1:cd:b6:af:76:9c:
                    6e:d0:0c:26:3c:49:22:4f:7d:fc:b8:45:cd:19:7b:
                    36:f6:bc:b0:ce:51:14:df:24:d2:bb:e4:3a:1d:50:
                    ef:44:4a:68:98:51:ee:39:cc:be:7b:44:58:13:61:
                    48:10:07:88:d7:c6:8d:27:2d:27:f1:09:ad:94:2d:
                    51:47:8e:9f:d3:81:34:fa:85:6b:de:81:18:d2:ee:
                    6b:28:f8:c3:8b:80:33:77:a4:71:08:0d:2e:b9:47:
                    61:c9:52:d3:ab:1f:a4:f9:22:33:8c:1f:69:15:21:
                    ea:b4:2d:51:14:ba:5a:07:29:ed:3f:7e:09:b2:ed:
                    55:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:71:A3:8D:BF:1D:EC:B4:4E:2C:92:53:BE:67:59:F1:A6:6E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d576ff-fff5-371b-8d62-837da908e387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:85:42:ee:c8:6a:a4:b1:58:d8:b5:25:c2:2c:86:9a:13:
         8e:20:30:23:20:f0:80:0d:23:ed:b9:bb:21:d4:0c:b2:72:31:
         36:c1:40:9d:5a:4f:41:86:99:d0:12:c6:ca:87:29:a1:73:af:
         44:1d:fa:29:36:be:95:75:4b:fc:1a:17:2c:71:d3:ab:30:8f:
         fd:43:ff:5e:9c:b4:7c:b9:d4:98:eb:bd:bc:d2:c6:af:a8:43:
         00:4f:5d:b8:1b:29:25:c9:66:8d:38:b9:95:9a:e2:a0:71:56:
         fe:98:55:5f:53:92:1b:54:fd:8f:ce:21:04:c2:48:d6:4a:42:
         42:55:31:09:af:3e:11:66:ce:53:ac:82:ee:3f:15:4b:15:99:
         d4:d5:8f:03:e8:7f:09:e2:80:ca:c1:30:df:9c:48:7e:3a:38:
         47:3d:84:8e:e7:69:fb:a6:8c:65:bf:b8:58:e1:c3:3b:8e:b8:
         1d:f2:2c:ce:ec:94:f5:15:94:38:69:4c:b9:9d:78:72:e9:5e:
         bb:a4:80:55:11:e9:09:b7:60:33:b1:98:ff:a8:bc:14:21:87:
         ec:7c:d8:ff:77:2e:bd:09:bb:61:79:2e:1f:c3:f3:c8:69:a1:
         46:9e:d1:a9:b3:46:b1:48:ca:ae:32:b0:06:44:df:32:90:cc:
         90:0c:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:45:09 2026 by rpki-client