Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98057d9d-fa6c-3577-84f4-75492024e11c.roa
File:                     98057d9d-fa6c-3577-84f4-75492024e11c.roa (raw, json)
Hash identifier:          sGR0ve+dsJlueEqZiCVvWgFSi69wYHME4Vnwa05khH0=
Subject key identifier:   C5:CF:43:B7:EC:10:53:83:5E:54:EF:AC:EB:38:7E:9F:4F:7B:9B:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AAA2F8DF3142E2D6168D0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98057d9d-fa6c-3577-84f4-75492024e11c.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1004:a130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:aa:2f:8d:f3:14:2e:2d:61:68:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=804f2673-eebe-4cb5-b230-3d25bb64dfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7c:ef:10:9d:de:02:cf:6a:97:9a:38:f6:b1:
                    11:10:00:52:31:c7:0a:a3:d0:9c:2f:c7:34:57:5d:
                    2d:39:20:ed:ef:f9:50:6e:fe:3d:87:e0:c3:a0:4a:
                    c3:58:8c:c4:45:4b:5e:64:d1:42:ea:8e:6d:be:ba:
                    a1:dd:a7:6d:11:5b:92:40:ef:cf:e3:7f:8d:c0:78:
                    41:24:c1:bd:64:76:15:ef:4a:30:43:eb:78:f7:09:
                    ec:ca:4f:10:c0:a9:ec:10:1f:f4:a7:d6:f3:66:67:
                    b6:b1:19:4d:e7:57:7b:46:cf:43:b7:0a:07:b3:69:
                    b5:ea:af:51:59:7b:ec:7e:19:72:d4:63:5f:70:a9:
                    82:f8:c1:85:ac:f9:aa:1b:d8:60:0d:8a:5b:fd:20:
                    ac:a6:9c:ca:b1:5c:92:8d:ee:27:81:cd:0d:2b:d0:
                    71:5f:55:b1:60:76:a3:a2:05:e1:1d:8e:40:39:0c:
                    74:1a:0d:a3:4d:1a:d0:71:6e:fa:56:ee:4d:5e:02:
                    81:78:f5:49:f8:99:5d:24:8e:66:15:0f:86:83:c9:
                    d8:9e:4e:56:d1:79:10:84:85:02:d5:db:93:f6:d5:
                    bd:5c:7f:96:a3:1e:b9:b3:1b:f9:80:f6:bb:85:83:
                    28:79:39:12:32:d9:97:f7:fc:9c:ca:af:93:1b:c5:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CF:43:B7:EC:10:53:83:5E:54:EF:AC:EB:38:7E:9F:4F:7B:9B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98057d9d-fa6c-3577-84f4-75492024e11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ff:6e:30:de:72:d5:56:64:29:43:7c:c1:ae:66:18:0d:47:
         d5:92:50:2e:0d:64:78:82:22:f0:f8:cd:6e:83:e4:14:9e:fa:
         61:0f:83:1f:3c:62:71:38:74:78:48:af:8a:73:8d:4b:ec:1f:
         f4:e2:b5:1a:4a:80:e2:42:d7:62:60:bd:ed:a5:52:75:3d:a6:
         c6:85:5a:1b:e4:b4:5e:ce:ca:87:db:7c:a3:a1:bf:b8:5e:ad:
         28:94:91:b0:06:a5:bf:df:f6:2a:cb:a6:0b:2c:dd:94:48:e2:
         f3:aa:cd:b6:34:52:e2:8d:8b:9b:4b:16:28:e3:63:2b:8a:bf:
         2a:f5:7d:d2:4e:3f:be:24:f5:a4:c9:b9:2d:d7:a7:3b:92:30:
         ee:e4:8e:3d:08:41:42:23:29:a9:33:ff:5c:d1:a7:84:a3:69:
         2f:b8:16:4e:7b:4a:22:6f:34:1a:9a:89:db:97:9f:45:27:ba:
         4a:a9:ea:87:2e:91:68:94:ae:05:a2:5a:ee:28:c7:cc:fa:b0:
         0a:da:c1:2c:2f:80:0a:06:5d:93:ef:fa:82:8d:e5:86:64:cd:
         89:74:22:90:6c:dd:6e:9c:05:0a:76:48:0e:73:f0:76:98:37:
         21:62:a0:bd:04:91:b9:c4:61:bd:6b:47:5a:8e:de:ab:a5:f4:
         87:60:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:17:13 2026 by rpki-client