Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a21d23d-5601-3e47-8699-857924c4db7e.roa
File:                     3a21d23d-5601-3e47-8699-857924c4db7e.roa (raw, json)
Hash identifier:          RhkubJXp37So0jt/F2YTvqjdO36QjI4+qkb+Mkx4iC4=
Subject key identifier:   8E:F1:12:8C:DF:BE:96:5F:29:5F:81:2B:D8:7A:B7:D1:2D:E9:8B:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E74CF6CB30EFB27B95228DA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a21d23d-5601-3e47-8699-857924c4db7e.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:f022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:6c:b3:0e:fb:27:b9:52:28:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=50156dc5-bde3-4a84-ab29-1217c80f5d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:26:57:11:4f:05:90:ba:49:b2:98:e3:ef:
                    74:98:e6:48:3f:7d:1b:3e:94:57:b5:1f:85:73:18:
                    42:b6:2c:dd:83:37:7e:dc:ef:be:53:fc:be:96:f4:
                    eb:26:b1:55:96:1a:bf:81:17:03:86:2d:ef:94:3d:
                    9d:c3:71:99:73:dc:17:2c:f0:68:64:3a:7a:ff:81:
                    0d:ab:59:c1:c4:24:45:6b:14:eb:9e:fb:60:a5:33:
                    e6:f4:70:cb:7b:df:34:e4:85:9b:ea:b9:93:12:ce:
                    76:8a:b1:1e:2b:47:c4:1b:87:95:2d:62:58:ba:c5:
                    d6:1f:9c:85:f9:59:ea:1b:05:07:c5:09:b1:14:1e:
                    b2:3b:90:b5:89:80:5e:a0:16:e0:49:e4:77:a8:67:
                    5f:63:0a:59:c6:2a:d8:8a:07:cd:8f:57:0a:b8:cc:
                    08:40:3c:62:a8:5d:59:33:ef:f9:09:5b:85:f2:40:
                    82:cc:ba:ae:64:92:31:26:fb:41:5a:17:9b:b5:8f:
                    b7:44:55:9a:79:92:70:fe:a9:5c:c1:63:ab:bc:f4:
                    e4:48:90:2f:fa:85:89:ff:8c:7b:17:cc:80:f0:39:
                    ed:40:50:93:d5:f4:da:9a:53:c1:c5:d9:d2:97:56:
                    a0:da:51:3f:92:40:74:09:63:ed:11:3a:b2:6e:58:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F1:12:8C:DF:BE:96:5F:29:5F:81:2B:D8:7A:B7:D1:2D:E9:8B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a21d23d-5601-3e47-8699-857924c4db7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:f022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:92:c4:66:12:2b:f5:51:e8:b4:18:f6:5d:74:a0:1b:a5:e2:
         f1:17:f1:66:39:85:4a:6f:57:43:f0:15:7f:03:b2:ba:bf:70:
         02:15:c0:1d:cb:f2:3f:1a:9e:85:5a:77:b3:f2:21:5a:06:dd:
         ed:14:bf:9e:ed:bb:bb:83:0c:b7:d0:59:c3:bf:c7:e3:36:df:
         ee:b6:46:6d:89:f0:bf:85:96:ff:68:65:0a:45:c2:9f:98:9e:
         0c:fd:a8:db:8e:9b:55:55:01:63:96:69:84:b2:05:66:ce:b2:
         48:62:6c:c9:d2:51:32:92:16:23:09:ea:0b:1d:5b:8f:e7:c6:
         fb:7e:eb:8c:39:50:1a:9c:a6:7d:51:f2:04:08:bd:1c:5a:10:
         3d:04:27:44:50:d2:c8:d4:3c:50:17:62:cc:87:a1:36:d1:84:
         f3:53:63:3a:49:ad:35:d9:92:56:ef:9a:05:a3:f3:e3:4a:c0:
         37:9e:41:06:5a:37:a3:e4:50:0d:6c:d8:4b:b0:c2:91:e2:ae:
         0e:6c:1d:1e:57:97:a3:ef:04:ab:26:eb:f0:17:ac:37:80:1f:
         a5:31:8e:e0:56:1d:96:ac:5d:9d:4c:39:3c:6a:83:d3:62:8e:
         d6:6b:ff:61:1d:24:05:4a:ac:c4:00:81:72:56:26:a9:e6:e8:
         9a:32:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:38:29 2026 by rpki-client