Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c28c7326-31fc-30ea-9d82-47123b36efd8.roa
File:                     c28c7326-31fc-30ea-9d82-47123b36efd8.roa (raw, json)
Hash identifier:          imTsNiGyEcutnFSVmIYreooBak4HQqV+FUO6c623rnk=
Subject key identifier:   54:C4:B3:14:16:07:60:F2:89:63:E3:60:2B:38:EE:50:DC:B0:25:9A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A835FF00084C269224EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c28c7326-31fc-30ea-9d82-47123b36efd8.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1003:a810::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:83:5f:f0:00:84:c2:69:22:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=eebb5e79-73a2-45d4-bd47-6f4d22cba58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:8e:f7:c5:a1:15:5d:98:12:33:0d:52:19:
                    3c:ff:04:b7:8b:a6:48:32:7d:fd:bc:65:bd:c7:fa:
                    33:35:1c:dc:64:05:92:0a:90:d0:73:01:87:f7:6f:
                    44:e3:54:88:9c:d3:07:90:36:56:3b:66:d1:36:88:
                    5f:b3:d1:65:5a:13:4d:d0:d3:26:be:f1:a2:1c:b8:
                    7a:42:af:36:59:06:60:02:cf:61:2f:ac:2d:1a:a2:
                    f8:02:b1:8c:c8:4b:39:94:76:e4:5a:ed:83:f9:53:
                    ec:6b:f2:c7:5f:d4:fc:aa:22:e9:01:97:9c:51:da:
                    db:d6:80:bc:d2:65:2b:e5:be:ae:15:29:a6:3d:2e:
                    12:09:bf:54:94:3d:17:69:75:ce:6f:65:ac:75:f5:
                    8b:73:26:79:d3:9e:fa:f0:bd:00:b3:f2:29:e4:8f:
                    29:fb:c5:53:86:3b:01:b1:bb:44:ee:28:63:29:ee:
                    d3:69:9f:09:3b:c3:82:4b:8c:dc:b7:b8:e0:be:29:
                    23:6d:ac:44:3b:d7:d3:f0:69:4b:17:30:e1:75:fb:
                    ea:79:53:d2:b4:b2:bb:37:af:0e:7d:3d:3a:2a:27:
                    6e:8a:56:12:6b:a2:d8:ca:95:b0:fb:36:95:45:a8:
                    a6:2e:2e:b5:01:a1:e5:2d:b5:52:a7:13:4f:c0:33:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C4:B3:14:16:07:60:F2:89:63:E3:60:2B:38:EE:50:DC:B0:25:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c28c7326-31fc-30ea-9d82-47123b36efd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a810::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:96:f6:38:19:69:14:65:91:ad:0e:d9:79:92:89:a8:69:60:
         1f:9c:84:1d:8f:64:c5:9c:1a:7c:25:8b:56:73:31:4c:f3:34:
         fc:0d:77:d3:8d:20:18:22:b5:64:f7:e8:ed:bf:ff:00:81:83:
         e8:01:c2:53:81:11:86:be:94:08:a9:12:eb:d3:33:1a:5e:82:
         4b:ce:cb:fc:7c:91:7e:ec:02:20:6a:cd:30:af:41:f0:2e:38:
         8c:78:5b:52:74:e4:d6:c3:d6:ce:2d:4e:52:da:fc:e3:3f:29:
         d7:bf:11:73:b0:60:3c:eb:cd:ba:ef:c7:c2:94:2a:91:73:14:
         7a:86:89:a8:61:fa:b6:d4:ab:89:18:6a:4c:3f:50:bf:db:9b:
         20:32:62:4e:2f:ee:b0:14:9c:88:8c:da:1f:e4:2e:b6:b7:4e:
         11:9d:ec:25:c3:7c:9b:9b:dd:f4:c4:33:a9:8b:a1:d6:da:fc:
         ed:74:03:08:42:e7:19:df:36:a5:8d:14:32:62:60:63:9e:14:
         56:db:ee:89:e5:14:1f:00:16:a8:70:9c:e0:60:e5:85:34:a6:
         10:69:85:f6:fe:82:5a:ca:37:3c:1b:30:12:0d:a9:f5:be:c4:
         b1:eb:80:15:45:d4:f2:ee:14:e5:b0:39:82:3a:36:95:a2:51:
         4f:e4:03:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:57 2026 by rpki-client