Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9fa61f86-c709-3b48-b4dd-2fbcc9f3c009.roa
File:                     9fa61f86-c709-3b48-b4dd-2fbcc9f3c009.roa (raw, json)
Hash identifier:          EE6Kh1NSAiA89rHhaFr+FprV4aW82sobDxP2QA2FJRs=
Subject key identifier:   C5:16:29:89:D8:9D:9A:96:7E:48:30:09:58:AE:23:FD:C4:C7:52:4A
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584EA79D5547F691F868B8E65A80
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9fa61f86-c709-3b48-b4dd-2fbcc9f3c009.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2734
IP address blocks:        2605:6c00:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:55:47:f6:91:f8:68:b8:e6:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fdc463d3-f3cb-4ed8-9f7c-37474df88d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:f9:9b:08:53:57:b3:00:55:0e:15:47:11:
                    0c:3f:9e:12:0b:9c:46:4d:16:86:0a:61:14:67:b5:
                    0f:8b:13:72:14:a4:2c:a6:5d:90:47:bf:28:45:ab:
                    02:84:a4:92:00:fe:f5:d4:35:ad:f5:f3:8a:aa:58:
                    5b:af:68:f2:9a:06:73:30:bf:be:e2:2c:a9:10:81:
                    2f:f4:ad:89:52:2a:c3:be:cb:c0:54:80:53:d2:b1:
                    12:c3:b8:97:38:b3:d5:06:02:af:e0:34:75:85:19:
                    99:be:c5:58:f5:6b:3c:e0:f2:34:6e:73:5e:d5:d6:
                    72:e4:ee:b2:dd:f5:b1:d0:a1:5f:71:b7:5f:37:9d:
                    28:b8:dc:ea:fc:c6:0a:c5:34:9b:a2:59:9e:59:45:
                    cb:5a:65:53:15:c8:10:14:fc:13:58:18:8d:5e:d8:
                    e9:eb:f7:73:c0:04:c3:3d:e3:7d:ad:f7:89:1b:1e:
                    6a:3a:54:20:d9:ba:5d:36:f9:0b:d2:e6:56:82:57:
                    3e:be:49:6f:25:1b:ed:35:07:58:50:7f:92:2a:a1:
                    43:e8:23:86:d3:c5:60:ab:6c:ad:91:dd:0c:bb:db:
                    98:ab:73:7e:cc:c4:fa:0a:77:7d:df:32:b5:ed:26:
                    77:bf:29:b0:44:92:b4:c7:14:49:a9:5d:ac:df:fe:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:16:29:89:D8:9D:9A:96:7E:48:30:09:58:AE:23:FD:C4:C7:52:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/9fa61f86-c709-3b48-b4dd-2fbcc9f3c009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:6a:8d:e6:b0:b1:86:f0:62:cb:21:1e:48:47:06:ca:9c:
         d7:6c:63:2b:02:8b:d9:05:8f:f8:76:48:63:32:a7:c0:8a:cd:
         05:d3:30:bc:84:56:20:a3:dd:43:1c:5d:5f:1d:30:d1:12:73:
         22:bf:38:ff:2b:41:e5:ea:be:88:24:af:b8:62:d9:76:fe:d8:
         72:ee:9e:b2:d1:f8:d8:cb:33:19:33:b5:8a:aa:4c:e3:fb:96:
         7b:5a:14:14:f4:50:5d:f0:3b:45:e1:e9:95:f2:b4:d2:18:f6:
         80:19:f5:ef:de:53:c7:49:f6:c8:4f:2d:d1:59:23:08:0d:7b:
         af:ce:45:81:88:5f:49:b1:6a:9e:a1:ae:40:3b:8e:60:6f:ec:
         4d:94:95:c0:7a:55:2f:a8:6e:2e:67:80:2b:4a:2d:7c:c5:57:
         a0:f1:58:97:24:07:64:40:f5:d8:68:2e:1a:e5:44:d6:73:66:
         b1:74:44:2c:0f:7b:3e:17:66:0a:85:71:17:a3:c4:ca:c1:c4:
         c6:92:05:6a:ac:dc:a1:15:11:31:9e:85:7b:52:4b:e7:0d:11:
         af:e4:0a:7e:c1:fd:ed:8a:9a:0f:9b:ec:30:30:85:eb:cd:f5:
         35:b8:af:32:02:08:55:ee:16:3d:15:ff:0c:10:79:c0:a5:1e:
         94:83:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 16:38:27 2026 by rpki-client