Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d598205-41b5-359a-98ad-66c4a91274a1.roa
File:                     1d598205-41b5-359a-98ad-66c4a91274a1.roa (raw, json)
Hash identifier:          3vEbtaJMOeqa2JWG7RPRuAXvWmV2gAeoLy2cHJY5qHM=
Subject key identifier:   62:06:CE:D7:36:D5:84:B6:D8:6D:C5:03:C0:EB:AD:5D:2D:75:78:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790FCFE217F276AB52D2040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d598205-41b5-359a-98ad-66c4a91274a1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100b:b100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:fc:fe:21:7f:27:6a:b5:2d:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=323d6b21-c8ad-4435-bbb9-7071524f2e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:8b:5e:30:a5:cc:74:27:59:53:77:5b:8a:
                    6f:4b:49:87:7c:c0:b8:aa:57:24:fe:70:e7:a7:ad:
                    32:d5:50:11:60:e5:3a:41:0b:de:ef:f6:97:8e:a2:
                    f3:29:ce:36:17:33:ff:51:16:b8:11:51:55:a0:e7:
                    b4:9f:7a:d0:a4:76:a2:14:68:9f:9a:14:5a:96:1b:
                    02:c0:8e:3a:4c:0e:8d:9e:b8:34:1e:37:fb:89:c5:
                    6f:22:94:c1:a6:8e:46:59:73:af:44:82:19:9d:61:
                    79:93:1d:2a:fe:20:9a:fb:f3:40:b3:36:5c:78:30:
                    0c:d1:ad:e4:f0:b7:bd:6a:13:7c:90:4f:42:1f:af:
                    f8:c2:f5:af:5d:77:a3:28:69:a2:90:d6:22:51:07:
                    88:a1:54:31:4e:66:e5:2a:d4:67:0d:d0:37:80:55:
                    8c:fa:08:97:db:72:d2:3f:9a:a1:6d:c6:62:02:3a:
                    9c:21:a3:19:89:fa:0e:fd:6e:ec:55:f7:fd:c3:d3:
                    f6:81:69:91:28:2e:ed:b8:48:0b:fa:9e:c6:e8:fc:
                    01:96:de:5d:93:6d:06:6b:d2:09:cd:3b:66:44:b5:
                    b9:80:2d:f1:71:55:23:76:71:33:f4:4e:6a:15:d6:
                    39:fb:72:2a:ae:c9:4e:fe:a7:09:c0:d0:ed:a1:55:
                    c4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:06:CE:D7:36:D5:84:B6:D8:6D:C5:03:C0:EB:AD:5D:2D:75:78:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d598205-41b5-359a-98ad-66c4a91274a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100b:b100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1b:0d:76:30:65:ff:0b:00:1f:50:ea:ca:85:c8:cf:a0:fe:
         46:d8:87:39:21:15:c0:b8:05:3b:86:66:94:de:e6:ed:0b:15:
         55:bb:00:d9:90:c4:be:9e:6c:ac:8b:60:e6:69:0e:c6:fa:bc:
         9a:d7:9d:c3:9a:3b:8b:98:4e:26:94:34:36:14:a3:e6:e4:3a:
         d7:71:39:cc:08:c4:7c:41:99:7b:79:87:b2:b4:81:26:56:58:
         17:d6:66:5d:c9:cd:8b:3a:c3:dc:84:38:4a:e5:aa:5f:8e:0a:
         db:e5:9d:8e:08:d0:0e:21:ce:92:69:9c:06:7b:f1:c2:ad:ee:
         1c:64:de:8f:c2:98:99:03:9f:eb:70:35:2c:d0:f4:6e:be:ce:
         1c:c4:52:e3:5b:54:13:ed:64:77:ae:25:b7:70:0d:c7:b1:60:
         3e:ae:f6:b0:eb:91:3f:eb:2f:ef:af:23:af:ff:7c:f3:8a:63:
         ae:43:f3:e6:5a:98:a0:7f:82:8c:c7:f7:51:91:c7:36:35:31:
         3e:af:58:69:fe:92:d1:55:59:cc:d2:03:2b:ec:06:37:29:f1:
         6c:4d:8d:a9:db:66:c1:20:12:da:40:36:4e:23:64:68:f9:a7:
         50:5f:0e:7f:d4:4d:24:85:8e:85:c7:df:40:27:33:c1:ec:c6:
         55:f4:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:54:15 2026 by rpki-client