Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa
File:                     cfcc50c5-85a1-3171-9f0f-8655231e6995.roa (raw, json)
Hash identifier:          JotdodK5dFDdvz1W4Gli7YCoIB08Jvf6sTlG9WYMm6U=
Subject key identifier:   56:1F:0C:E0:54:F5:C1:DD:F8:44:F0:95:1C:9A:79:7B:9A:CC:DA:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A81BE81A071968DE6AC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1002:b020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:81:be:81:a0:71:96:8d:e6:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=f8ab57c4-6af7-4b95-bb01-82cb85de0fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:99:97:ad:57:ed:af:49:5a:aa:88:49:e5:61:
                    11:7c:b7:3e:11:59:c9:1f:f4:9c:b8:c1:a7:35:6c:
                    07:24:4e:5d:13:5b:df:c4:f0:95:83:39:2c:bd:04:
                    f5:ed:39:62:c3:5c:d2:3a:8a:99:e5:5c:0b:0e:33:
                    57:ca:24:b2:39:55:da:fc:ea:7a:d5:10:5d:cf:29:
                    df:c3:f1:08:32:66:96:67:45:b2:55:79:04:71:7d:
                    c9:5f:e9:c1:73:21:bc:0b:02:4b:13:1d:5b:8f:2c:
                    5c:30:87:78:6e:07:88:45:02:34:7e:f7:26:7d:10:
                    82:b2:0b:a4:5a:b9:68:e4:19:79:0c:e7:57:36:1e:
                    92:bf:e1:12:c5:eb:d1:76:3f:68:ef:32:6b:58:0b:
                    5d:62:93:61:5e:39:25:cf:f7:55:52:bf:58:e6:e9:
                    ac:c8:e2:bf:ed:bc:ca:b4:b9:2a:d3:d3:c2:78:8b:
                    6c:d2:90:7f:e9:36:2c:74:48:88:2f:89:20:ca:ef:
                    cc:10:70:a2:e8:26:a2:da:2a:39:24:61:1a:1b:e3:
                    19:0c:b7:05:0a:5b:77:bf:88:67:75:ca:73:9e:89:
                    20:4b:5c:fa:79:6f:ce:9b:d0:64:c5:48:dd:ab:53:
                    f6:f0:0f:d1:8d:5e:bb:93:6a:cb:5f:11:91:5f:19:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1F:0C:E0:54:F5:C1:DD:F8:44:F0:95:1C:9A:79:7B:9A:CC:DA:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cfcc50c5-85a1-3171-9f0f-8655231e6995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:b020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:4e:38:b1:45:79:f1:41:82:94:b8:5f:22:85:6b:e9:ec:
         0a:30:15:50:47:0d:40:40:cf:ae:b2:37:05:d6:5f:90:cb:4f:
         f9:82:36:1d:41:21:56:76:84:30:ce:f1:9d:36:59:73:dd:b4:
         e3:bc:ed:e2:4b:fa:3e:25:a9:ae:3a:bb:d7:2b:9a:f3:00:c0:
         c9:75:bc:f7:58:82:39:e5:6c:8e:9b:78:ea:54:3e:98:f1:5b:
         85:fe:87:63:45:bd:43:59:30:59:af:05:97:d2:3d:a5:e8:2f:
         4e:3b:70:6d:6f:92:90:b5:6d:4b:eb:8d:12:a0:28:bd:ae:32:
         5b:2d:f4:27:73:23:ec:7e:7c:28:03:6f:44:41:df:51:1f:9d:
         9d:80:1c:10:51:4f:d6:85:df:52:ab:e7:92:56:96:f9:7f:0c:
         a9:96:a6:2f:fd:10:50:d8:2b:dd:d6:76:5d:83:40:e1:3e:b2:
         55:d9:6b:e6:0e:1b:90:ab:74:c9:21:b0:8f:6e:24:0d:bf:38:
         9e:1a:02:bf:d7:0e:32:66:1a:48:44:2c:49:ac:5f:f5:40:52:
         fc:6b:8b:c5:6b:6f:4f:3e:44:41:08:b0:f6:cb:69:da:4e:b2:
         47:31:44:56:d3:7e:0e:06:c2:bd:fd:d7:06:93:1e:a4:e4:bf:
         c6:1a:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:03:17 2026 by rpki-client