Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3df763d9-e9de-3c4e-8fdf-369fdcdab4cc.roa
File:                     3df763d9-e9de-3c4e-8fdf-369fdcdab4cc.roa (raw, json)
Hash identifier:          WKYxugrGvkGXTKDVfDBLs1X3Nlm9MMkNnHGX0tsLZgc=
Subject key identifier:   DA:D2:45:F4:A1:DB:3F:1B:D1:CF:12:DD:22:4F:41:C4:5E:62:AD:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EDF5C8D77FDFC9735466AB600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3df763d9-e9de-3c4e-8fdf-369fdcdab4cc.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1015:a035::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:8d:77:fd:fc:97:35:46:6a:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=0cae3553-6a07-4018-a1b5-3cf14842aa20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:a3:86:b5:77:e6:53:5b:72:65:14:08:ea:
                    92:01:dd:af:92:0e:ef:4b:d5:47:69:73:97:10:72:
                    dc:bb:00:51:f4:1b:fb:df:04:19:a7:e7:6b:35:e3:
                    65:22:9b:94:a2:7f:6e:f3:8a:03:52:38:b1:b5:91:
                    49:6d:4d:33:98:77:b8:67:dc:d0:71:ad:e3:ea:09:
                    38:dc:a4:d2:0e:56:b8:1f:ed:9b:1c:f9:07:fa:be:
                    ad:7e:e6:ec:ba:88:72:8d:d1:01:9d:c8:b4:c8:de:
                    27:c0:47:85:dc:e0:6d:f0:15:3b:d3:65:50:fc:c9:
                    da:64:26:6b:fd:8e:24:9e:4c:2f:84:c7:62:1f:1e:
                    fe:e2:83:f8:e6:bd:4a:60:aa:b2:1b:23:d9:b2:b6:
                    c0:fe:8d:6f:21:b1:a8:e4:f5:24:95:8c:f0:bd:fb:
                    af:2d:43:e8:19:d0:50:b4:e0:4c:76:21:a1:82:66:
                    90:0e:de:ac:95:80:a9:49:b0:bc:46:a1:88:de:9e:
                    fc:db:3a:5e:00:aa:a1:38:f2:9b:ed:5f:6c:53:c8:
                    f5:51:f4:a8:d8:a1:08:26:c0:bd:fb:43:47:03:18:
                    87:c0:6f:9a:16:07:2c:b4:95:70:1c:29:bf:a4:e1:
                    64:24:f2:a9:5a:f8:b2:15:a2:02:d6:6f:bf:de:c4:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:45:F4:A1:DB:3F:1B:D1:CF:12:DD:22:4F:41:C4:5E:62:AD:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3df763d9-e9de-3c4e-8fdf-369fdcdab4cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a035::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b6:cf:94:64:16:1d:7a:14:f0:76:3b:fb:c2:b5:4c:3f:33:
         df:5d:0a:21:c1:51:dc:9c:d7:91:67:64:2b:b2:7d:3b:85:e6:
         c8:64:c1:1e:a3:9a:2b:5e:26:a6:35:67:7d:5a:f0:9c:c7:60:
         cd:57:dc:82:04:a1:d9:15:35:ba:9b:50:9e:ed:6d:ed:2c:df:
         fd:6f:46:f3:f1:de:e4:9a:65:70:a9:31:c0:a9:f0:52:56:4e:
         c7:4b:f9:3c:55:53:b3:f3:6e:4f:2d:3a:94:48:9c:89:49:db:
         eb:9f:9b:55:b6:33:f1:f3:e8:61:56:e5:11:eb:53:d6:e7:c7:
         7b:f5:b1:b4:9f:f6:24:7e:79:5c:2a:c1:58:10:5a:9c:5d:41:
         ae:a1:69:94:8d:62:b6:50:09:7a:9c:43:b3:5f:1f:22:46:5f:
         c4:45:94:d9:b7:c4:f0:9f:12:20:bb:ab:d7:54:ac:74:92:2d:
         95:d2:b5:3a:09:2f:88:0c:11:40:12:48:5d:37:34:d8:34:d2:
         f2:dd:e4:ae:34:42:25:5f:65:1a:8a:01:48:88:f6:1a:d9:ae:
         0e:03:91:4a:51:90:74:52:89:d4:f2:8d:f2:eb:74:1d:f7:7c:
         4b:d4:7d:8d:26:3e:85:9f:dc:6f:8b:0d:de:88:b0:ee:46:17:
         8b:36:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:41:41 2026 by rpki-client