Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4bce448-2305-31dc-804b-5ab4eabb083e.roa
File:                     c4bce448-2305-31dc-804b-5ab4eabb083e.roa (raw, json)
Hash identifier:          koTus9zEnUrEl3PerTCusiQmdnOVoNwkPA7/n7dnYqw=
Subject key identifier:   9D:B2:54:A7:A6:FF:AD:E1:EB:86:21:C0:4A:E4:78:DF:C8:FB:99:2A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790F4ABA81083B4E895FCD0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4bce448-2305-31dc-804b-5ab4eabb083e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1009:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:f4:ab:a8:10:83:b4:e8:95:fc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=816b5ca9-2da2-4bf5-9d35-942a9f1d49d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:de:a3:a5:b7:f2:28:da:60:54:4d:1a:69:
                    b8:20:60:2a:dd:30:0b:f1:42:15:0f:7b:a7:1f:16:
                    10:07:4e:c1:00:e5:3d:d3:fe:a9:8b:70:b7:00:43:
                    25:c6:ed:00:30:16:4b:4a:84:ed:d9:b3:e8:cf:87:
                    96:92:31:8e:74:c4:69:ef:61:78:be:cb:e1:5f:46:
                    31:bf:59:a0:c9:09:f2:39:d9:ab:1d:a7:b9:f4:b1:
                    0f:88:b4:c7:68:e1:92:23:29:bb:15:a2:f0:18:3a:
                    0e:2a:70:bb:69:67:f9:04:13:aa:ea:a6:cc:82:9c:
                    7e:4e:70:71:ac:51:2b:fa:b8:bc:1b:e6:26:a5:fa:
                    7d:58:43:53:ff:09:de:78:32:b7:30:30:a1:c0:99:
                    52:8b:cf:61:58:86:7f:28:a7:d2:76:a4:46:29:c8:
                    00:5b:73:4e:2b:0c:bc:ff:28:a5:c8:06:fc:ff:4a:
                    57:4b:24:a3:0f:7d:f5:7f:c8:9a:a1:36:72:95:14:
                    0f:5e:2d:c6:b1:34:e1:f8:93:bf:90:c1:c1:ca:c4:
                    95:64:fa:41:55:aa:e0:a4:22:5e:f7:d3:5a:c9:22:
                    a4:54:1b:72:23:47:b7:f1:89:56:ce:10:49:0c:01:
                    27:ef:92:7d:dc:6d:cb:52:ab:a3:5c:76:9a:c2:f1:
                    ae:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B2:54:A7:A6:FF:AD:E1:EB:86:21:C0:4A:E4:78:DF:C8:FB:99:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4bce448-2305-31dc-804b-5ab4eabb083e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:61:0b:95:6c:c9:57:1a:ec:18:33:88:b6:a7:c5:39:7d:09:
         50:87:1a:9c:cf:90:3a:01:92:99:ef:3b:fb:61:f5:4f:ac:41:
         a9:a3:1d:f4:09:e4:3e:c7:16:1b:e1:d9:8e:eb:5b:32:50:9f:
         67:71:73:a4:2b:4b:14:aa:2c:27:6a:f3:9d:41:8c:7f:f1:93:
         f0:ce:54:d2:8f:9a:0c:9b:78:92:23:d7:14:29:82:b3:6b:1a:
         b4:45:44:23:a3:ea:bd:ec:80:f1:bb:8c:84:ca:ea:77:2f:06:
         8c:6d:a0:8c:a3:7f:35:fa:e7:c8:80:77:87:05:ef:d8:5f:7d:
         ec:ae:e3:01:4b:27:5d:b1:f1:52:5f:d1:bf:33:a1:a1:1f:6c:
         80:7f:a5:6e:0d:d6:83:e7:16:b2:bb:67:ad:66:b1:cc:9c:7f:
         54:1a:a9:19:7e:b7:23:4c:6c:55:49:ff:22:18:2c:8d:f4:4a:
         7d:2a:fa:ff:4d:b0:06:11:61:0f:7b:57:5f:5f:30:83:b2:0f:
         d6:85:7e:f7:c9:bd:87:73:85:df:e4:c8:ab:0a:1b:64:1f:15:
         64:b1:b3:d6:a7:74:1d:a1:6c:89:23:d6:6b:88:c4:bc:10:4d:
         b3:d7:a5:e7:e5:76:ec:b4:8f:0d:2c:a7:9d:eb:e6:07:8a:3c:
         05:e8:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:53 2026 by rpki-client