Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e4277ad-7391-356f-95ff-8e2f16d79d20.roa
File:                     4e4277ad-7391-356f-95ff-8e2f16d79d20.roa (raw, json)
Hash identifier:          d7yFYUHq3hQ1Jb9MhhuPxHZYQcUZKDqZto2G7Zg1NPg=
Subject key identifier:   7E:0C:AC:EA:7E:84:47:2C:F9:CD:E3:E1:6A:D4:78:63:5F:4C:B0:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E640F99A7092B3677CA06A100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e4277ad-7391-356f-95ff-8e2f16d79d20.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     6167
IP address blocks:        2607:f160:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:99:a7:09:2b:36:77:ca:06:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=6762851d-ef10-43aa-ba3d-b1776a378b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:00:ee:e4:aa:5f:ef:5e:d4:aa:4f:35:2c:
                    96:43:08:11:f4:19:09:44:23:38:8f:5f:fd:9a:9c:
                    80:f0:d5:84:e3:95:df:cb:23:7f:70:54:fc:16:a6:
                    fd:92:d6:b3:93:00:8f:b7:bf:09:78:b9:e4:06:6e:
                    9a:d2:98:7f:97:c2:0f:5e:83:d9:f4:9b:24:d4:19:
                    f2:00:bc:32:79:c6:92:d7:ec:20:29:9f:1a:a7:09:
                    7f:5b:39:75:38:47:8e:7d:27:0e:a4:f5:50:e7:ba:
                    4f:83:54:3d:5e:ed:7e:da:e4:90:e2:4a:f7:6c:c5:
                    66:b0:d6:da:80:bf:19:78:1e:d7:90:8d:80:6f:b1:
                    06:8c:f1:70:0a:9b:fc:9b:24:bd:96:d9:dd:10:e0:
                    b7:ef:36:66:c5:3c:2f:6a:0e:98:08:e3:42:de:e2:
                    46:e7:d3:61:67:91:2c:79:2d:04:5f:ec:1f:b0:b2:
                    ba:5f:8b:65:87:a8:b1:3a:ed:b5:18:33:3a:bf:a1:
                    51:6b:37:c9:35:60:8c:dc:14:3c:cf:a2:da:0d:e9:
                    52:74:af:0e:ab:f3:06:01:e2:26:23:a1:38:2f:8d:
                    99:12:d7:75:d9:99:cf:31:12:d8:9b:54:de:5c:b0:
                    37:ea:f5:57:76:39:7e:73:e3:fe:40:f5:5d:3b:68:
                    91:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:AC:EA:7E:84:47:2C:F9:CD:E3:E1:6A:D4:78:63:5F:4C:B0:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e4277ad-7391-356f-95ff-8e2f16d79d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:d5:de:c0:4d:fe:64:b7:68:0e:b9:3d:60:a6:4d:b9:f1:
         1d:29:cb:fe:15:3c:45:48:03:1e:60:25:30:79:27:79:e2:c2:
         20:3e:43:d6:59:70:5c:f5:b3:32:19:65:d5:2b:86:ef:ad:1a:
         16:e7:6b:6b:4b:1c:22:c6:1b:fe:c0:ac:be:0d:48:52:88:d2:
         40:31:c8:e0:d2:db:4b:05:37:0f:30:9e:1b:35:25:4f:0d:95:
         45:91:c9:5e:b9:9b:e4:6d:9a:17:c4:8d:8a:e8:14:51:f7:56:
         b3:3f:cd:98:5c:00:13:04:b0:f5:82:15:ba:0d:47:15:cd:ca:
         90:47:3c:0f:77:3b:cf:b9:0f:5c:18:21:15:1b:b1:17:95:08:
         10:13:e2:44:37:5b:ca:36:ee:77:ea:81:36:b1:0f:13:d3:e0:
         5a:f1:ff:2b:0b:73:af:ec:a9:0a:57:1b:f1:4e:ae:da:aa:9b:
         97:a0:e7:e4:47:0a:06:8c:f9:40:d8:41:2f:a0:06:f4:ab:ef:
         22:dd:39:b4:d9:6d:19:b3:1e:0f:a4:68:3c:13:17:4b:1d:96:
         9f:4b:18:59:36:f3:00:a7:a7:a2:4e:6d:23:f5:1f:6e:a1:2e:
         07:a7:dd:3d:b0:dc:87:c8:ee:61:b3:01:64:64:7d:7b:f2:5b:
         9a:87:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:40:17 2026 by rpki-client