Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9aca9799-7119-39b0-82e5-e6c00e0864b7.roa
File:                     9aca9799-7119-39b0-82e5-e6c00e0864b7.roa (raw, json)
Hash identifier:          eojK6kWsBvKs+tYbx1E9W8sNJ/Jrjeno9N1dyILKLsA=
Subject key identifier:   4E:FE:08:A2:5F:01:6B:1E:D3:4B:99:E0:FA:1C:37:8E:0A:CF:6C:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A852DCD53CF599A15D460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9aca9799-7119-39b0-82e5-e6c00e0864b7.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1005:b0e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:85:2d:cd:53:cf:59:9a:15:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=7141be61-d4cf-4ebf-b83d-14635656e527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:ac:7c:d1:8d:9b:dc:c1:d0:52:cd:58:fa:
                    dd:50:fa:71:cb:98:bd:f6:21:56:77:12:82:03:9d:
                    35:61:76:e8:81:7e:7b:67:27:1d:05:c3:ed:d5:34:
                    33:35:ae:46:f0:10:7b:af:d4:40:11:d9:f0:da:c3:
                    ac:b5:4a:32:91:c7:bd:4d:f5:0a:59:c9:0a:e5:9e:
                    e3:b3:d6:a3:a4:e0:ad:38:70:5d:da:6f:5b:d6:8c:
                    5e:23:99:1a:96:75:5f:45:f5:40:3c:93:ce:f3:51:
                    42:0f:d2:55:79:12:7a:b4:1d:25:4c:cf:10:96:8c:
                    3a:d2:e0:98:ca:4f:90:6a:1d:bc:ef:28:99:ec:c1:
                    19:34:b9:ee:fa:47:fe:60:f1:9d:21:8c:ac:38:cd:
                    7e:ee:06:42:85:35:2e:19:d9:99:a2:bc:42:a1:cd:
                    62:12:90:3b:02:ba:fe:12:bf:96:ef:0d:09:a9:23:
                    13:13:3c:2b:26:f5:04:86:21:89:b5:40:77:fe:ec:
                    72:39:39:c3:1a:55:7d:ea:2f:88:de:0a:51:c0:e6:
                    10:11:2d:e0:c8:a4:93:e5:4c:ce:d5:e8:38:bd:94:
                    1e:aa:2e:82:17:57:3a:c0:37:69:f2:63:9d:77:be:
                    eb:4e:b6:11:3e:84:d5:c6:bc:a1:3c:18:65:e0:c3:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:08:A2:5F:01:6B:1E:D3:4B:99:E0:FA:1C:37:8E:0A:CF:6C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9aca9799-7119-39b0-82e5-e6c00e0864b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a7:66:44:01:ab:23:21:29:d5:59:48:59:ca:83:e6:22:f5:
         e5:9c:5e:eb:f0:c5:93:fd:37:65:66:e3:46:1a:c3:61:77:b2:
         c9:00:08:5b:59:8c:a1:a7:03:9b:5e:df:df:b1:3d:5c:8b:0d:
         34:7a:6c:c0:b5:07:6d:dc:c0:4a:a5:d1:c6:c9:7d:22:a3:5a:
         e2:c0:b7:e9:37:e3:92:eb:ba:62:a7:0d:d3:7a:42:95:52:03:
         1d:ea:8c:37:21:3e:86:b5:31:14:b7:b8:11:49:58:f5:75:c6:
         b4:4b:3c:7b:a2:9b:b2:4e:b8:9d:3a:55:d4:8a:55:31:83:d9:
         ba:5c:f3:06:7d:b2:55:72:84:64:38:c9:0c:e3:2a:83:14:04:
         11:de:75:04:f3:d1:44:a6:05:89:ed:cf:a9:81:29:5b:ae:d4:
         5e:d2:e3:26:9e:6d:c5:53:ca:91:ac:30:10:34:1c:05:18:bb:
         b2:21:84:f0:3e:77:3b:71:e7:d4:e8:c5:c7:04:3e:de:63:2a:
         93:1d:ed:c7:49:a6:ca:61:fd:e9:28:c4:4a:69:5a:69:98:c8:
         6a:db:f0:72:9a:fd:3e:71:fe:b5:51:74:bf:ae:88:ec:79:34:
         4b:7f:70:6a:2e:81:35:a0:19:b0:db:dc:86:35:b4:db:ab:1e:
         7c:80:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:58:28 2026 by rpki-client