Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9336bfd8-4dbf-39d4-98be-7ac9b8fe5908.roa
File:                     9336bfd8-4dbf-39d4-98be-7ac9b8fe5908.roa (raw, json)
Hash identifier:          ZcKq0/y9QAq2bcUEIT4azXMXCF+iYkA4n54bnI9Gi+E=
Subject key identifier:   95:0B:1E:2D:8A:01:72:46:E1:E3:63:4C:35:FF:AB:41:B5:98:A4:80
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790F967D4444BE12045A600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9336bfd8-4dbf-39d4-98be-7ac9b8fe5908.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100a:b030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:f9:67:d4:44:4b:e1:20:45:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d16a7f03-6c44-4853-98c2-ed499aadef3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a3:87:8a:57:d2:d0:36:e9:c7:0a:4b:f4:82:
                    e5:e4:23:5e:da:22:7d:11:bd:d6:ea:ff:91:24:78:
                    3a:c8:33:a7:0a:07:aa:d4:80:c7:1d:bd:e7:0d:0c:
                    c4:dd:aa:0f:b6:ab:64:53:b9:4c:30:a1:f7:1f:93:
                    e0:10:20:3e:c7:c1:87:a9:93:53:27:49:21:9e:4d:
                    03:5e:02:52:15:b6:40:9c:ea:f2:da:cc:b1:7e:2e:
                    26:f2:fd:24:0e:54:92:b4:79:42:0c:33:1f:50:78:
                    1c:b0:56:af:91:25:b5:01:2d:1f:d3:8b:ab:e7:ef:
                    b3:be:90:3c:bd:21:7a:68:2f:3b:4f:53:6b:a9:b0:
                    9c:a4:06:db:c4:db:ce:d6:b6:04:cf:a6:bb:bd:4a:
                    d3:ae:c0:ed:51:a3:83:90:d2:61:79:0a:b7:e6:e8:
                    61:dc:e2:0e:c1:03:2e:08:22:51:83:16:01:d5:61:
                    8c:16:3b:0b:39:2c:40:44:76:08:e0:c7:e8:32:9d:
                    92:dd:0a:0e:40:32:96:8b:b3:2f:77:0d:b8:f6:ed:
                    4e:13:fc:a7:c2:4c:f9:30:3c:87:9f:2b:8c:0a:db:
                    71:5e:1e:4c:2e:cc:c8:d4:ab:c8:0a:c4:e2:b6:94:
                    cf:20:9a:10:55:9e:ae:e5:84:14:e8:67:c0:3f:39:
                    41:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0B:1E:2D:8A:01:72:46:E1:E3:63:4C:35:FF:AB:41:B5:98:A4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9336bfd8-4dbf-39d4-98be-7ac9b8fe5908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:b030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:35:03:5e:09:56:d4:e6:28:b4:e9:0d:d1:25:3a:96:93:be:
         2c:c2:11:76:e8:b5:18:8b:8f:0c:7a:25:8d:d9:80:1e:ba:28:
         f8:fe:5d:80:ee:cf:39:9c:55:9f:df:1d:73:51:a0:6f:90:b3:
         fb:17:09:ec:d4:b5:7a:d1:8c:18:2d:8c:9c:0b:8f:bd:a4:2a:
         60:cb:57:85:a9:60:d4:80:90:da:00:26:90:4a:83:e3:ae:00:
         65:ed:cd:42:e0:f1:b2:c7:9b:39:6d:d0:a7:76:77:cc:54:f1:
         49:f3:20:57:d2:99:2e:4c:48:8d:e4:e3:3f:32:1d:f5:39:44:
         8b:5e:c5:7a:82:d6:26:8b:d1:17:0e:20:32:a7:f3:bb:b2:15:
         9a:1c:d4:00:7c:ab:f8:af:4c:07:7f:07:8c:89:6b:80:9a:59:
         14:a9:ac:5a:ee:68:7e:39:60:2d:a4:de:87:04:bb:67:00:e6:
         67:39:0c:fc:1e:df:df:09:36:f1:e3:30:85:46:76:66:a5:19:
         7c:cd:09:b3:ee:7c:42:97:29:fd:9a:cc:33:ed:47:84:5d:c7:
         d0:3d:d4:84:d4:9e:7e:bd:58:e1:3c:30:ad:07:de:ab:a5:23:
         c6:99:21:04:11:63:5b:7b:8e:34:c1:b7:ca:6e:88:6d:ee:0d:
         0d:cc:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:59:34 2026 by rpki-client