Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa
File:                     8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa (raw, json)
Hash identifier:          JwlJiPvWse2RRrcDAZmV8+fa9hwhIll2/GnQMTiml2o=
Subject key identifier:   AB:9E:10:4B:97:EC:C0:6C:5F:88:06:DB:94:3F:0F:18:69:E1:70:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790FB0B6370E0094688BE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100a:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:fb:0b:63:70:e0:09:46:88:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4ec4cfe0-e35b-4440-a7c9-00813b40551c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:5e:40:69:78:f1:5d:44:e7:b8:2b:f7:c0:
                    4d:e2:0c:87:a1:76:44:67:7b:34:f4:10:ab:1f:d0:
                    cb:21:db:f6:4f:c5:5a:3f:77:c5:7e:e3:ed:6f:1b:
                    34:ab:7c:f0:2c:85:f6:f3:16:dd:00:ee:c9:aa:1e:
                    87:63:54:37:5c:d4:ed:0d:93:3e:2f:7a:c9:ab:e5:
                    0a:11:62:6f:a3:1c:8d:b2:e3:0d:ae:4e:fa:d5:75:
                    4f:b1:df:7c:ba:01:c2:6b:47:61:ea:3b:08:7a:83:
                    88:97:a5:66:b2:ba:f4:7d:a0:82:1a:b5:a6:c8:f9:
                    50:d1:3e:80:ec:9a:e7:d5:60:25:d5:6e:c9:b7:75:
                    60:64:d3:60:50:c6:8a:7b:29:c3:c9:bd:f6:46:46:
                    f0:64:f3:32:5c:37:87:e7:45:29:46:6c:49:38:98:
                    dd:56:df:f8:6e:8f:51:ca:af:eb:8a:82:f9:e6:25:
                    dd:e4:de:f8:c6:61:6b:9a:9d:c2:b1:3c:63:84:2d:
                    32:b4:91:6c:6d:e2:54:7c:81:ba:e8:55:3c:06:d3:
                    af:d0:55:93:40:aa:e4:6d:56:6f:8b:90:51:46:84:
                    98:02:eb:a0:70:7a:a2:f4:83:6c:e9:e2:2d:09:b0:
                    a0:be:1f:46:d6:8e:18:33:2a:8c:3c:7c:8d:7f:0f:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9E:10:4B:97:EC:C0:6C:5F:88:06:DB:94:3F:0F:18:69:E1:70:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ca328e4-ba7c-3c8e-b2f9-a17871f0a638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7d:02:4e:8a:7b:53:5a:63:4e:c1:53:68:75:96:ef:48:fa:
         98:f3:83:b5:19:02:05:97:46:f7:e2:76:aa:d6:e9:c0:07:88:
         cd:63:07:f4:6b:89:d6:f2:07:f3:7f:27:92:41:48:73:02:3c:
         4d:e5:93:63:0c:3f:4b:79:26:98:67:8e:d6:73:dc:48:c9:ac:
         b0:90:0c:64:f8:9a:5b:bd:16:5d:47:a9:19:03:90:5a:5c:6d:
         37:22:a7:58:77:7b:c4:87:04:bf:0c:e0:aa:42:c5:b5:6d:aa:
         58:05:4a:69:e7:46:a2:dd:5d:d8:54:fb:81:06:d3:f1:9a:29:
         89:bd:1e:e2:5e:81:1b:54:f7:e5:c0:35:75:83:df:a9:1e:88:
         7c:65:4f:f5:bc:11:10:a0:6d:c1:d8:fa:18:ba:36:3a:d4:1f:
         e5:d2:14:1d:13:44:0c:32:42:02:18:8d:4c:1f:f6:7a:f2:c1:
         d4:e9:29:fd:42:30:8d:53:08:50:d7:60:b9:19:79:cc:53:19:
         1c:2f:67:db:61:e9:51:77:c5:d6:62:d2:59:ba:3c:80:2f:6e:
         dd:54:8a:f4:90:94:1a:a5:77:43:a6:18:14:03:87:62:f7:b1:
         85:79:d7:41:9f:4b:34:df:d3:0b:ad:ab:f9:8d:62:da:0b:07:
         89:b3:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:42:45 2026 by rpki-client