Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a8a1331-2a65-35ea-88c9-6e0c1776263f.roa
File:                     2a8a1331-2a65-35ea-88c9-6e0c1776263f.roa (raw, json)
Hash identifier:          /rK9KvsJaCfUG6zPeJ81hFTUbJLdKfCocelGAwBTcUg=
Subject key identifier:   B7:74:68:02:33:4E:52:DB:90:2B:98:18:C2:8E:D5:0B:B3:4C:05:35
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EF2E7841510C5E85478919400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a8a1331-2a65-35ea-88c9-6e0c1776263f.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100f:a027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:84:15:10:c5:e8:54:78:91:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=52866eeb-6639-46df-8995-ff68dc0c37a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:11:e1:95:8c:06:6b:c8:3b:a7:97:d2:ad:
                    bb:9e:cd:b3:9e:8e:19:2c:62:83:8e:ee:43:a3:f7:
                    1c:20:26:5e:6f:1e:23:30:4e:39:23:a8:a2:3d:f7:
                    d3:de:b7:94:df:83:a5:13:ef:a1:99:14:21:c0:82:
                    11:f5:fb:3b:80:5d:20:af:d7:27:c7:a6:f7:0e:3d:
                    03:f7:c7:8d:f8:6b:6c:dc:b1:5c:c9:80:f7:75:ca:
                    fa:2f:fa:dd:34:74:aa:e3:9a:7e:1b:49:dc:72:31:
                    8d:22:9d:d7:e2:67:e6:d8:16:94:78:26:1f:80:a5:
                    23:25:bd:94:e8:e8:92:a0:34:28:c4:91:13:3c:d5:
                    7c:9c:1e:28:31:f8:54:e9:6d:d3:fb:3d:33:23:c8:
                    15:1a:ea:8a:8a:48:aa:03:2a:d0:0f:5f:a4:54:57:
                    7c:dd:12:5c:9e:90:46:68:78:15:d2:56:a9:9e:ec:
                    10:72:24:7a:6e:d5:ab:61:17:28:19:58:02:d1:92:
                    6c:27:60:05:ac:09:fc:8f:58:ed:f3:b7:7b:22:af:
                    8d:59:3b:80:42:00:fa:92:ea:ce:4c:40:f7:eb:5a:
                    ed:aa:40:81:9d:77:5e:fa:f7:84:ee:76:bb:7c:d9:
                    42:b2:84:96:bb:35:a1:08:fc:0c:86:da:a7:7c:94:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:68:02:33:4E:52:DB:90:2B:98:18:C2:8E:D5:0B:B3:4C:05:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a8a1331-2a65-35ea-88c9-6e0c1776263f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:14:dc:c7:7f:26:5d:5d:ac:ae:ea:1b:01:ee:e5:f6:4c:a7:
         08:52:bf:21:25:c6:c2:85:0c:fa:b0:d7:4a:4e:54:27:63:f3:
         dc:79:12:30:19:34:39:cd:ac:57:bb:fe:76:41:a8:45:c8:40:
         f1:64:ff:42:5a:78:89:49:b0:9b:89:b1:ea:ff:6a:cc:43:c2:
         87:40:55:d0:9f:30:d8:2e:7e:78:b6:df:fb:f0:05:25:82:ea:
         4b:5a:ab:ed:c3:b6:98:2e:bd:9e:d3:1c:f5:ae:8c:7e:af:fb:
         e4:55:e4:c5:55:66:b5:02:ea:17:fc:1d:41:4e:50:2c:db:72:
         a3:9e:e0:4b:9e:83:2d:76:5d:39:38:d8:0b:44:74:81:61:a7:
         d7:03:84:1c:8e:38:ef:50:d4:c5:27:d4:b5:b8:50:4c:e4:94:
         8f:de:ab:7c:68:fb:cd:4a:64:69:8c:4b:53:91:fa:6f:51:39:
         6f:bd:f4:8c:d3:ff:13:d9:8b:28:00:fe:c8:d5:6d:51:af:fb:
         b1:ab:e9:d9:3e:06:87:4f:97:d6:72:d1:4d:7e:8f:16:2b:22:
         45:1e:04:fa:0e:b3:2a:4d:e9:85:ae:bb:8e:df:b1:54:49:e5:
         5b:34:93:e6:f0:26:3a:76:8a:d3:17:2a:b7:3a:c9:d1:00:e1:
         bd:3d:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 23:52:48 2026 by rpki-client