Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3df763d9-e9de-3c4e-8fdf-369fdcdab4cc.roa
File:                     3df763d9-e9de-3c4e-8fdf-369fdcdab4cc.roa (raw, json)
Hash identifier:          x+RrEFohrNwYED8tR/2JOtRQqokpDttarxljF4EzXw8=
Subject key identifier:   FC:9B:36:3E:DE:B1:B5:01:1E:DC:61:E5:FF:FA:20:74:F6:94:7A:8D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E3CF9C84229D9E7DB8793DCC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3df763d9-e9de-3c4e-8fdf-369fdcdab4cc.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        2600:1015:a035::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c8:42:29:d9:e7:db:87:93:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=05c587cd-0ae1-4bf8-8393-bb06fff30253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:78:7a:fd:55:00:f5:7d:d6:71:52:f8:cb:
                    fd:17:7a:ab:5c:bf:0b:c4:b6:6c:3a:f5:56:eb:01:
                    5b:8f:83:d4:b5:b6:b1:55:5b:86:5b:a8:93:01:f9:
                    aa:8e:bd:db:58:3c:26:a5:4f:b9:df:f2:4a:0b:5e:
                    5e:b1:d0:28:2c:63:33:f0:c2:da:3f:45:12:82:5a:
                    90:1b:f4:14:80:0a:36:60:72:a9:b8:75:05:f4:02:
                    1d:50:dd:b0:42:6a:63:b2:d3:96:0a:98:dd:97:93:
                    f6:7e:13:71:52:50:04:9c:38:fd:06:e2:f2:3e:60:
                    23:d1:d9:24:74:05:22:a6:c9:50:86:43:cb:2b:ca:
                    19:d8:56:15:36:f7:f7:b3:71:e5:cf:f9:64:30:98:
                    8c:81:eb:94:64:81:95:f5:b4:d9:8b:5d:85:71:ab:
                    d3:f8:29:0b:dd:27:17:5d:fd:2f:d1:aa:1d:e0:ce:
                    1f:a3:9e:a4:bb:54:db:ef:51:d1:d1:74:ce:01:78:
                    81:d1:9e:7e:af:d3:3d:db:e3:18:10:0e:e7:82:a8:
                    7d:29:ae:70:84:da:44:96:a4:22:19:e4:cd:af:4f:
                    6e:94:4a:44:ce:7d:fb:a1:e0:f4:54:ab:e8:b2:c2:
                    58:b7:6d:29:57:76:e0:cf:83:b3:3a:a4:db:f9:78:
                    f0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9B:36:3E:DE:B1:B5:01:1E:DC:61:E5:FF:FA:20:74:F6:94:7A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3df763d9-e9de-3c4e-8fdf-369fdcdab4cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:a035::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:d7:ef:33:60:8b:26:8e:82:8d:03:58:5a:30:ae:b2:c8:
         a5:5a:f2:02:f7:35:4b:6c:ec:40:08:c0:3e:52:a0:0a:2d:b4:
         93:33:40:2e:3e:6d:93:59:96:e7:79:63:f4:1a:47:e6:16:92:
         86:a3:3a:59:2d:44:1e:a3:fc:1c:5e:fc:e3:c8:6a:7a:b0:f7:
         31:f3:e2:f9:18:4f:52:c2:39:4f:54:4c:6d:fd:5b:1c:c7:57:
         de:2d:79:91:24:bf:17:81:d6:5a:ae:d2:ec:0f:1f:29:6f:0c:
         74:c6:8d:e0:f1:90:48:2b:85:96:20:a5:f1:34:4d:67:f2:dd:
         d7:9e:d2:0c:60:e3:25:76:42:aa:87:56:cc:a4:3f:09:b4:15:
         9b:d8:c0:59:78:21:5f:bc:04:f8:d3:f1:45:07:5d:7c:9c:4b:
         22:42:46:5e:97:21:88:ef:11:35:f8:c9:84:55:01:aa:21:c4:
         5d:d9:71:76:07:7f:ac:61:37:61:89:32:76:f4:a8:7d:d9:48:
         c5:fa:af:0c:53:13:bb:fc:c2:76:b6:2d:b4:0c:7c:b8:df:02:
         e2:f4:ff:d2:b4:d0:fd:d3:55:42:85:cf:dc:bb:cd:ec:30:1f:
         21:70:06:7f:2f:9f:92:34:16:21:f5:0c:ba:f0:fd:42:23:e2:
         cd:8e:34:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:35:54 2026 by rpki-client