Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/772da389-55df-3e0b-a998-a5dfb5976aa6.roa
File:                     772da389-55df-3e0b-a998-a5dfb5976aa6.roa (raw, json)
Hash identifier:          m+ls/JB3i2sFWUkfaUAO1xrr0aHtrOcM2eWH4clnIYk=
Subject key identifier:   83:70:75:F9:73:64:2F:A8:77:1C:06:A3:9C:B1:6C:2C:46:C7:50:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECBD1E50F3246E5734F685D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/772da389-55df-3e0b-a998-a5dfb5976aa6.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     6167
IP address blocks:        2600:1007:a115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e5:0f:32:46:e5:73:4f:68:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=789b06ab-336f-4c73-87f7-e950fdf865d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5b:2a:c8:e2:71:0f:57:02:05:c2:01:70:51:
                    52:8a:17:39:87:ec:b9:a6:fb:eb:bd:2e:f7:20:bd:
                    da:7d:99:6c:a4:49:58:04:c3:ca:31:b4:31:56:b9:
                    89:b1:53:f3:36:56:4a:c1:0c:8c:6d:d6:76:59:5b:
                    5c:b1:87:a3:cd:9e:bc:b0:8a:da:b9:48:81:25:5e:
                    c2:e6:45:82:62:94:b5:57:a4:23:34:49:16:11:44:
                    bd:04:23:fc:48:f7:a4:31:06:9b:3b:8d:f4:aa:ea:
                    1b:c3:90:c3:e9:c3:18:57:b5:85:63:b4:c6:1b:d4:
                    0e:d1:85:89:bf:b3:43:27:13:83:73:36:77:61:44:
                    23:84:a4:86:5f:e7:f7:f6:63:61:4b:f9:53:5b:c6:
                    1b:52:ab:23:d4:25:5b:5f:0a:fe:1f:1e:72:f5:d6:
                    ad:77:15:1b:bc:df:06:75:e6:bb:93:9e:ab:39:82:
                    ab:f5:c9:d3:1b:a9:4d:50:51:a3:e7:d4:11:09:6b:
                    e9:0e:48:c6:a7:f1:76:f8:a5:eb:49:2d:28:d9:69:
                    e6:86:24:9c:1a:f5:81:eb:47:d4:c4:11:59:43:56:
                    c5:cb:a2:a9:76:17:a8:37:a9:2d:c1:8a:13:11:ec:
                    b6:47:9f:e6:22:05:cc:e8:a9:d0:4c:3f:d0:9a:f3:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:70:75:F9:73:64:2F:A8:77:1C:06:A3:9C:B1:6C:2C:46:C7:50:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/772da389-55df-3e0b-a998-a5dfb5976aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:a115::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:92:01:9f:a8:7c:5c:eb:e3:08:a3:39:2e:08:27:f1:87:ff:
         40:d7:3c:a8:73:5c:cd:51:6f:ee:7f:76:ed:19:68:dc:d5:98:
         5b:d3:ee:8b:1e:2d:ea:6b:9a:7a:ab:67:26:89:b6:72:2b:84:
         c7:63:3c:c7:cc:4a:5e:fc:93:d7:ae:95:66:7e:a2:88:42:0a:
         f4:6b:c3:99:7c:d7:9b:e2:8d:3d:7d:ce:3b:97:ce:7e:8d:6e:
         81:c4:1e:be:26:66:cf:07:44:92:f8:b7:26:dd:2e:65:74:8d:
         5c:14:7c:4e:ac:8d:de:29:01:e0:53:5e:e2:d7:ea:d3:97:26:
         bc:8a:ef:e6:12:6a:f6:8b:2c:b7:f9:9e:09:09:fe:8c:c1:e3:
         b0:83:b7:0e:02:98:83:1d:31:7c:40:99:75:e3:f8:43:39:fb:
         bc:4a:d0:ff:17:2c:bf:6c:55:39:35:d9:2b:89:73:67:e3:42:
         94:b5:e8:bb:fc:88:3b:17:9a:1f:cb:eb:b6:c0:fb:41:26:d2:
         c0:98:26:3c:21:b9:a0:f1:cf:06:fc:3a:66:88:ab:11:7f:67:
         6d:ab:55:ba:bc:ab:f7:f8:6d:40:c9:58:0e:83:77:c9:12:36:
         3f:c0:c2:72:aa:51:20:9a:85:69:6b:5b:74:6f:60:98:24:40:
         fe:3b:b9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:45:55 2026 by rpki-client