Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf7efbd5-76cd-38c3-b94f-56c35ddc0d5a.roa
File:                     cf7efbd5-76cd-38c3-b94f-56c35ddc0d5a.roa (raw, json)
Hash identifier:          TJQQvNehTKMzkwhbZ7U/VZ/2mxDo9fGMqVoK1BTxwf4=
Subject key identifier:   F5:CA:03:1E:85:ED:B0:09:9A:C8:C5:20:FF:D1:73:EF:62:86:DE:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A99DF3B79DD97BA68FB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf7efbd5-76cd-38c3-b94f-56c35ddc0d5a.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        2600:4040:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:99:df:3b:79:dd:97:ba:68:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=383cbf2e-40d9-4f6e-b7f0-e40aa07f79d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:49:73:28:ae:b3:60:5e:f5:79:04:97:ff:
                    6e:84:65:fd:68:d4:56:4a:17:4e:2b:e6:1e:71:1f:
                    4c:43:57:7b:a0:b6:4f:fe:16:c2:78:90:cd:48:68:
                    32:95:97:c9:4c:02:fe:51:78:63:3d:76:ea:03:7a:
                    a3:ac:bd:db:35:03:f5:46:74:b5:bd:a8:c5:4a:1a:
                    e1:90:44:6a:ab:9a:1d:70:81:ed:6a:2b:29:21:d0:
                    89:c8:cc:d5:4b:36:51:1b:16:54:c6:82:7e:87:e0:
                    02:96:b8:81:3f:38:f4:dc:05:ed:3d:61:ed:cd:21:
                    b7:c8:25:72:44:36:91:8f:6e:36:34:14:8d:30:8d:
                    80:3e:84:34:d8:4c:f1:63:19:3f:96:6b:f3:24:ea:
                    ec:00:1c:4d:47:a6:76:08:5a:5a:7c:31:44:0d:e4:
                    0e:7e:33:c0:66:e5:c4:0d:f1:c3:fa:15:68:ab:f9:
                    2a:ee:b5:70:ab:1f:ed:76:fb:0a:34:41:b0:75:e3:
                    82:2e:b7:ee:eb:47:6a:5f:50:74:ab:f5:aa:0f:d5:
                    85:25:8c:f6:3e:ec:c4:c0:62:af:d7:45:9b:18:ac:
                    fa:6a:d5:8d:7e:37:cf:04:33:4f:90:4a:90:70:a0:
                    3f:4e:ac:70:a8:bb:c4:18:13:b9:8b:5b:1c:8f:0e:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CA:03:1E:85:ED:B0:09:9A:C8:C5:20:FF:D1:73:EF:62:86:DE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf7efbd5-76cd-38c3-b94f-56c35ddc0d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:4040:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fb:95:0d:81:2a:80:54:90:14:e3:b8:b6:74:b9:a0:d8:c4:
         3e:fd:3e:68:f7:2c:37:6c:35:00:6e:83:41:af:40:86:3c:2d:
         67:e7:be:e5:d4:02:1e:a6:03:9c:e6:e9:16:94:84:49:02:aa:
         72:59:15:6d:61:f7:5e:ea:d1:46:fe:dc:5b:9b:8f:35:26:a2:
         cd:22:b3:c6:be:8e:12:42:25:e1:45:3c:e7:ae:26:e1:e0:cb:
         23:69:04:f9:62:6d:4a:c2:62:47:f6:e2:a8:75:d0:cc:97:dd:
         2a:67:3c:ab:24:27:0f:c5:97:08:8b:49:ab:7f:14:a8:6a:0b:
         c0:b1:27:a3:a3:ce:5d:db:82:cf:0b:e9:bb:18:b6:45:fe:9b:
         aa:f3:8d:36:58:54:83:26:e0:09:76:f9:94:c5:7e:54:33:9b:
         db:80:c8:e7:a1:53:07:06:da:5f:b6:7f:9f:83:eb:1a:af:a5:
         d1:a2:f9:80:aa:5a:7e:7e:8c:b3:13:e0:c4:03:ee:18:2a:6a:
         ea:c0:00:fb:59:85:5f:c3:cf:37:56:81:26:9c:4e:9d:17:d9:
         f0:3a:ac:6c:a7:03:39:d6:19:cb:d8:2e:ab:bf:48:0f:c4:5b:
         1d:ff:ab:cc:c8:c2:aa:fb:8f:3f:fb:59:e9:95:0e:b6:43:14:
         3d:de:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:29:02 2026 by rpki-client