Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03342ed8-5a54-35b4-96a5-5d41c3614901.roa
File:                     03342ed8-5a54-35b4-96a5-5d41c3614901.roa (raw, json)
Hash identifier:          VM7YVlVbQ6mkRIFs+0l2ImzrRytz0NOZecbHnG+Wr2I=
Subject key identifier:   D9:3C:88:21:6A:22:EF:A7:99:B0:51:B6:EE:38:1A:BC:1C:AA:BF:C0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF2E7606ED77B692F9D845800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03342ed8-5a54-35b4-96a5-5d41c3614901.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100f:a116::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:60:6e:d7:7b:69:2f:9d:84:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=b1f0cfc3-1a50-4ab7-af1b-759b0b9e195a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:a9:87:60:3c:72:ae:0e:95:46:88:66:6b:
                    ff:e3:1b:46:99:99:77:da:6a:eb:2e:22:a5:ff:6f:
                    62:73:2a:2f:40:2e:87:f8:2a:19:c3:15:d5:96:95:
                    7c:67:68:53:a2:e2:7b:91:c7:f7:55:e3:5f:86:50:
                    88:3e:7e:da:ff:86:96:9d:13:93:4a:75:92:20:b0:
                    49:9e:67:4b:f7:5c:2d:95:67:53:d2:1b:9a:f6:c1:
                    32:22:da:33:54:f5:37:ff:73:29:13:3c:8b:ff:7e:
                    bd:0b:00:11:3e:4d:a2:59:ee:c6:9a:36:ca:63:bd:
                    c7:82:83:d1:ae:32:c3:68:2c:ae:80:8d:5f:b0:4b:
                    6b:ca:33:bd:27:14:7f:bd:87:90:f9:36:17:a8:be:
                    81:41:bc:39:3d:b5:a1:d1:5d:a4:eb:5c:b7:34:ea:
                    71:05:cc:18:27:27:ff:ca:8b:39:31:0b:2a:e8:77:
                    9d:88:55:76:97:5b:a7:42:2e:5a:ea:b0:65:3b:d1:
                    75:6c:5d:2e:51:38:59:4d:e0:db:86:88:2e:92:8a:
                    13:10:75:8c:cd:d1:c7:66:60:ab:4e:c2:65:25:d9:
                    2f:5b:56:7c:1f:2b:bd:30:5a:e7:3d:65:ab:8a:b3:
                    c0:bb:88:14:4d:17:58:8a:06:8c:65:84:61:8a:e2:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3C:88:21:6A:22:EF:A7:99:B0:51:B6:EE:38:1A:BC:1C:AA:BF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/03342ed8-5a54-35b4-96a5-5d41c3614901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a116::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:1b:94:1b:bf:b1:9f:36:7f:f7:4f:4a:59:4d:eb:cb:bf:54:
         c7:6a:df:85:fb:9e:8f:75:29:28:4c:78:79:ac:d9:a5:1a:65:
         3b:eb:da:94:a4:20:bd:2e:65:71:b0:59:0e:b9:e2:2a:ba:ad:
         a3:42:e8:da:b1:bc:e5:9e:43:b9:ca:f7:45:39:b0:bd:2f:3a:
         62:cc:13:ca:9f:fc:80:68:c9:60:70:a5:f3:b6:31:8a:fe:68:
         1a:d2:da:69:92:cd:9e:f1:a6:0b:7f:42:48:fc:c4:c5:eb:12:
         bc:2c:82:51:e1:3c:14:ae:59:7d:65:e8:0a:b1:ce:93:67:1f:
         cf:8f:a6:bc:84:d3:ee:93:1f:ef:24:ee:e8:36:6d:94:47:98:
         3c:5a:01:ca:30:56:09:31:55:23:fd:12:52:8a:1c:48:c4:cd:
         1d:1d:29:9a:c3:f3:ce:b0:82:4a:19:08:49:7d:e3:22:7f:98:
         fd:d2:89:97:94:a8:44:1c:d2:9f:d3:01:fc:f2:75:a9:72:e7:
         6d:af:c4:98:e8:d9:01:e2:b9:99:dc:d7:ca:f7:96:e8:b9:da:
         67:7d:c3:d5:75:21:8c:5b:7b:87:1c:54:2e:a3:39:29:e1:17:
         9b:15:be:aa:7a:e5:5c:2c:79:e3:05:56:7c:60:7a:83:39:8b:
         2c:ef:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:51:22 2026 by rpki-client