Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d8a61c8-17fd-3501-ab48-a63a8b065426.roa
File:                     7d8a61c8-17fd-3501-ab48-a63a8b065426.roa (raw, json)
Hash identifier:          AG6PMdEJS4d2unzTCZa5o8qc9tz6T9Ow0pf7+3u9osk=
Subject key identifier:   C3:03:FB:28:42:95:9F:37:89:0E:24:C5:64:54:73:76:96:69:82:29
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E6144AFB734088E42A68B6B40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d8a61c8-17fd-3501-ab48-a63a8b065426.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        2600:1014:b330::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:af:b7:34:08:8e:42:a6:8b:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=4c2a51c6-9365-42ba-b348-e35713a11464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:77:12:b3:a6:08:04:79:d6:2c:7a:5e:e6:f8:
                    2d:75:78:ea:b0:15:4d:73:42:b4:cc:3e:20:48:4a:
                    f9:2a:0d:69:3a:f9:d3:f8:c4:f1:3a:30:fe:e3:c4:
                    9b:50:1b:ad:2b:b1:72:28:8a:d4:19:bf:10:8c:52:
                    21:6b:ad:a8:88:e1:8b:26:9a:91:83:05:58:1e:ca:
                    3d:5b:5b:95:1a:eb:49:3f:45:2c:68:97:30:06:87:
                    85:c4:37:67:7c:3e:46:1b:f4:d4:7d:40:9b:a9:9f:
                    88:58:01:db:da:c7:d0:2c:f2:6b:53:28:3f:ea:ff:
                    fc:78:19:d8:c1:b8:d5:46:a1:38:39:6f:6e:c7:9d:
                    e0:18:2d:30:f6:34:45:f4:e8:b3:b7:c4:42:8c:98:
                    36:c3:ad:fd:4d:9d:2d:20:f7:14:f4:be:09:16:27:
                    e6:34:c4:bf:91:1c:9c:8f:13:63:b6:49:bd:41:76:
                    fe:0b:1e:02:d7:51:ea:84:5a:89:89:49:2c:6e:83:
                    ef:0d:0c:d2:8a:a0:ab:bc:7b:7d:f7:ea:78:57:cf:
                    39:86:92:eb:0a:1a:b6:07:a6:b2:0e:bd:1a:eb:45:
                    c2:30:7e:35:ef:c4:2f:32:aa:5b:61:21:df:84:ba:
                    dd:88:74:b6:51:e2:d3:7d:d9:3f:fa:68:8a:21:75:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:FB:28:42:95:9F:37:89:0E:24:C5:64:54:73:76:96:69:82:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d8a61c8-17fd-3501-ab48-a63a8b065426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b330::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7a:71:24:a3:67:d7:2e:ed:38:58:4b:83:95:81:b5:75:ed:
         13:53:31:db:fe:25:2a:d5:c5:31:57:62:39:47:bb:df:fa:f6:
         80:08:a9:a0:83:4e:bf:58:45:e9:10:76:8f:16:bd:c3:43:99:
         bb:2e:c3:cd:96:46:aa:15:32:8a:52:28:78:f3:ea:6e:1e:7f:
         1a:30:12:f5:3f:ef:28:fb:fd:3a:d5:42:8c:c2:d9:aa:aa:6c:
         df:90:e8:fb:50:6b:9f:de:95:05:d1:00:89:c4:aa:ad:8a:69:
         bf:87:2c:42:54:78:f0:8d:4d:cb:b7:2e:3d:27:63:59:85:dc:
         39:2f:26:c9:34:6f:9f:12:dd:fd:24:bd:5a:98:7b:6e:4f:bf:
         5e:c8:50:5f:76:84:e5:cd:84:fc:d9:d7:06:bf:53:1b:1f:91:
         82:7a:46:b8:ae:4e:67:33:19:33:72:2a:54:63:f4:51:ec:7b:
         95:fc:a0:fd:93:e8:02:18:bc:cd:23:11:32:31:b7:20:46:9f:
         ac:69:90:7f:92:cf:08:de:49:fd:a3:1f:f7:8d:99:79:73:fe:
         63:42:ce:60:a2:7d:36:66:83:f2:8a:1e:4f:a8:b0:b5:60:7e:
         78:58:d7:a2:4a:86:eb:de:46:ef:75:07:87:13:e9:ca:90:ae:
         14:90:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:36:20 2026 by rpki-client