Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ed2b358-17b7-3b08-8e34-1e98ce348109.roa
File:                     3ed2b358-17b7-3b08-8e34-1e98ce348109.roa (raw, json)
Hash identifier:          cKZwnEUiXbs/OVEjCPZ6zXggNxwnOFFbuImV8ii5U2A=
Subject key identifier:   E9:E4:BC:E1:C9:81:3B:6F:B0:C5:FD:55:5A:9A:30:95:3E:CF:92:D1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E428F30AF091D7667B9B4B880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ed2b358-17b7-3b08-8e34-1e98ce348109.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        2600:1010:a129::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:30:af:09:1d:76:67:b9:b4:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=9eb7f80e-c874-4e63-aae6-797a8d6df8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:86:93:31:4e:22:75:fa:21:dd:78:a2:9e:ea:
                    cc:25:5d:36:c5:c1:56:ce:66:a0:0c:4a:2d:da:40:
                    02:dd:25:2c:71:92:99:31:b0:56:54:42:7b:b7:83:
                    d0:30:fb:6d:3c:64:c6:ca:d9:83:07:24:2a:3d:0f:
                    f8:76:29:86:64:8b:71:90:2f:bb:d4:a8:1a:fd:35:
                    8f:e5:94:72:84:13:8e:97:67:05:f6:16:db:63:97:
                    a5:ab:21:82:e0:b0:be:b9:11:01:2a:24:58:bb:26:
                    cc:ed:51:7e:7e:83:3b:5a:b6:f9:39:b7:fa:50:76:
                    92:04:96:6d:f1:90:32:df:f4:05:6a:f8:c2:2d:9a:
                    98:d6:57:8f:20:e2:65:7a:b2:37:cb:08:29:53:b3:
                    47:6c:62:88:6e:f1:56:23:fa:b6:a5:64:7e:bd:58:
                    46:9c:32:e1:e6:1d:44:1f:fe:e3:fc:97:7a:20:a9:
                    8c:71:b0:19:d2:6c:a0:3a:e4:26:df:71:ac:16:d5:
                    c0:80:ce:79:32:32:80:71:be:d8:fd:42:1b:e4:32:
                    76:a2:e9:83:c3:d8:05:fc:54:bd:19:3a:6e:f0:4f:
                    54:3d:bf:64:24:88:60:eb:2e:36:2b:cf:4c:2f:85:
                    64:df:74:af:e9:4a:af:b8:37:e6:c4:72:09:a2:f6:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:BC:E1:C9:81:3B:6F:B0:C5:FD:55:5A:9A:30:95:3E:CF:92:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ed2b358-17b7-3b08-8e34-1e98ce348109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:a129::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:e6:60:9e:5f:c7:7c:83:cc:ca:63:73:bf:43:2f:1b:7c:
         83:08:7f:d7:57:e9:5e:ff:c6:e7:f2:c4:b0:03:c7:aa:12:0a:
         c7:0d:32:d0:ac:9c:b7:98:be:1d:94:90:aa:05:3d:bb:cf:bb:
         0d:7b:6e:e5:b6:57:64:57:95:01:71:49:fa:39:c1:bf:a4:63:
         2b:b7:db:20:4d:aa:cf:6d:c9:ab:a0:ec:31:f2:5c:d4:66:f1:
         38:6a:2b:7e:33:5d:d1:a9:81:01:41:6a:ed:11:d3:c4:56:96:
         77:a3:78:3a:dc:83:0e:9c:d9:d9:8c:9c:62:c5:af:e7:b2:22:
         50:77:6b:67:1f:cb:d5:a2:61:44:2f:b7:6f:f9:1e:d9:61:c9:
         cc:79:9e:33:ba:ef:3d:63:48:b5:2d:2a:a8:07:aa:3b:72:34:
         80:dd:88:d5:15:c7:f8:ba:06:2b:76:ec:3e:05:55:2e:c2:5b:
         6f:41:29:8d:20:c1:88:2b:0d:05:e0:19:be:37:e0:62:69:5e:
         ca:6d:53:4e:23:19:10:57:44:64:d3:d8:5b:58:46:8b:be:9d:
         9f:d1:1d:da:13:27:d5:cd:cd:67:61:59:44:09:55:a5:73:c3:
         dc:3e:76:88:a3:fa:e0:f4:96:05:8f:0a:29:25:33:d8:13:4c:
         e0:23:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:38:24 2026 by rpki-client