Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6c437c-5dfd-380a-ad32-d96028b1e955.roa
File:                     ba6c437c-5dfd-380a-ad32-d96028b1e955.roa (raw, json)
Hash identifier:          oFaye4XwLWxxIRdv8F+sc+uXL+24C7PvZEBMcLsba+Q=
Subject key identifier:   42:F8:E2:BB:45:34:EC:13:55:85:3A:66:5E:CF:CE:92:FC:CD:C6:A9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7870D17103295FEEEC64E1C
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6c437c-5dfd-380a-ad32-d96028b1e955.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11145
IP address blocks:        2607:f160:47::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:0d:17:10:32:95:fe:ee:c6:4e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bb78c6aa-1c51-4cdc-9016-6f11f0573d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:75:6d:13:c0:15:e7:81:64:82:bd:6b:27:
                    f8:ed:58:c9:ef:06:7f:b6:58:5e:3f:84:4f:30:e8:
                    50:a7:d0:92:50:17:be:64:d8:f6:76:4d:03:ad:08:
                    ea:b5:ee:19:29:7f:e8:08:46:a4:01:66:8b:fb:f9:
                    87:e5:9d:28:16:b9:2a:71:95:d0:4c:63:b6:51:b8:
                    b1:38:f4:a8:6f:bc:0f:92:18:ce:6e:49:ea:97:b6:
                    22:54:34:8c:a1:78:e7:32:82:a5:3d:ae:01:e3:39:
                    06:b2:76:54:aa:59:b1:93:08:81:fc:dc:a6:3a:b5:
                    57:52:00:c1:16:de:b4:2f:2f:b0:c3:90:09:e0:55:
                    62:84:e2:cd:6c:34:2b:8d:ed:90:9e:ef:f5:9b:79:
                    61:fb:7e:fc:d9:85:21:d6:29:1c:5d:fd:be:44:af:
                    0b:ef:13:cc:1c:fc:7a:9a:f1:ba:9d:88:23:4d:13:
                    a7:84:4b:e4:25:b1:69:6c:52:03:b7:45:23:3e:31:
                    f6:e0:b6:89:12:fa:6f:09:8b:4f:19:3e:85:38:15:
                    dc:3c:44:20:37:2c:58:9a:0a:ab:a9:b8:40:35:3b:
                    c1:14:7c:b0:58:8d:cc:20:87:cd:ed:3b:f9:ff:47:
                    86:00:1b:ed:59:70:6c:3d:bb:ba:06:88:1a:17:b7:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F8:E2:BB:45:34:EC:13:55:85:3A:66:5E:CF:CE:92:FC:CD:C6:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6c437c-5dfd-380a-ad32-d96028b1e955.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:bf:73:c4:28:ac:e6:8e:a4:cb:c3:14:cc:0d:f2:67:1a:85:
         0e:b7:8a:1e:38:3d:c4:3f:80:7c:c7:8d:e0:1d:eb:31:77:c9:
         e6:43:a6:c8:56:84:be:2c:04:4d:3f:05:ca:53:54:24:5f:d5:
         fa:a9:6a:f4:61:79:d3:10:97:27:63:23:58:92:8e:c2:45:bf:
         c4:85:b9:3d:54:cb:d7:bf:e7:d3:2e:b3:07:e8:7b:7c:d9:bb:
         24:64:d8:4b:84:3e:b1:06:57:ee:e0:f9:59:ca:58:30:73:16:
         8e:6a:a3:ea:48:2d:d3:c0:23:43:14:c2:d7:6a:cd:d2:6e:dc:
         2d:c1:06:21:6d:50:d9:88:ec:94:4e:10:f2:79:e3:d0:9e:35:
         3c:71:5d:e0:b5:2d:9c:cb:91:9c:3f:1a:d9:57:ff:48:3d:d8:
         d5:04:59:78:93:96:97:07:57:b0:71:0c:40:80:d1:49:51:05:
         ea:05:5b:a1:bc:db:82:bf:61:cd:c3:4d:b2:bd:67:d0:1e:33:
         cd:94:df:53:41:3a:c6:59:a4:84:66:01:9c:c2:50:e9:64:c5:
         6a:a5:c9:1c:82:b9:42:5e:06:d0:40:5f:4e:4c:3a:b3:7b:e7:
         a8:62:15:e2:3a:9e:5a:6d:7f:dc:55:18:40:c5:8c:1b:dc:66:
         be:9c:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:09:55 2026 by rpki-client