Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4025b15-8ee6-3a9a-a09d-a1f92d6348fd.roa
File:                     a4025b15-8ee6-3a9a-a09d-a1f92d6348fd.roa (raw, json)
Hash identifier:          GiRLrQuwMtVNIxKcVbkyr55n4g9n15Y4hxy3NbfE4W8=
Subject key identifier:   55:DF:5B:DC:BE:A3:AD:B3:D1:C1:5D:2D:AD:78:19:4E:A1:11:15:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79518136FB5FBCAA08E9600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4025b15-8ee6-3a9a-a09d-a1f92d6348fd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1004:b220::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:18:13:6f:b5:fb:ca:a0:8e:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9fb063d2-3eb0-4d8b-96b3-26a5dac5d4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:e1:df:59:26:08:f0:d4:81:83:85:13:2a:
                    35:d9:4c:57:97:30:20:0f:6f:91:45:cf:e7:aa:54:
                    bf:30:b4:4c:76:08:c9:8f:9e:b8:5f:54:1e:49:91:
                    cb:25:fe:d7:32:81:3c:b6:e2:18:30:b7:b8:05:03:
                    d6:ce:e0:21:79:53:19:e0:cc:64:42:78:10:ad:22:
                    60:6f:00:5c:68:bd:a1:23:e4:e1:1d:6a:d8:93:d7:
                    5c:96:8c:e9:38:88:45:4d:55:e4:14:34:37:18:09:
                    25:d3:a4:76:15:d8:4b:44:ea:85:0b:45:b6:46:78:
                    99:a5:57:39:f5:95:95:d6:f2:ce:bf:81:28:5a:65:
                    b7:df:9b:48:43:9e:d5:87:97:ea:cb:83:c9:19:0f:
                    41:ca:d7:b1:e9:a0:ae:e8:77:23:0b:0a:62:4d:fd:
                    71:b3:31:06:cb:f8:ef:b4:72:d8:9d:a9:44:19:26:
                    5d:29:09:01:c8:5e:07:60:b2:ea:bc:25:02:cb:46:
                    20:f0:7f:08:81:d3:53:1d:7a:96:43:7f:a9:08:8f:
                    52:8e:05:d1:49:c7:15:ad:09:8b:8b:6e:17:aa:0b:
                    47:d6:10:76:3b:c7:53:60:2d:1f:ba:bb:9f:dd:e3:
                    a9:e5:bb:ee:d4:c0:f2:48:01:76:97:b3:e8:92:9e:
                    9c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DF:5B:DC:BE:A3:AD:B3:D1:C1:5D:2D:AD:78:19:4E:A1:11:15:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4025b15-8ee6-3a9a-a09d-a1f92d6348fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b220::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:fd:1a:92:70:1e:52:7d:5d:3e:49:bc:e9:c5:24:7d:c2:
         be:22:f0:7c:3f:51:5e:07:d3:3a:47:24:23:58:a6:cd:2c:55:
         55:5a:54:22:26:fa:d9:e8:12:d2:12:2b:33:b9:4f:ab:0d:31:
         80:6f:1f:47:ae:57:06:ed:4a:1c:d4:13:04:78:8c:df:e5:6b:
         67:a2:ff:1c:ad:d3:5a:a4:24:7b:04:d7:b0:f4:9b:80:f7:d8:
         0e:1e:ee:55:31:7c:26:c8:31:c2:63:e1:89:62:09:b4:4a:93:
         d3:d4:35:18:d6:ee:24:52:84:c2:2d:cb:89:a5:9e:7f:fa:04:
         dc:63:38:c8:e6:33:4c:fb:a7:6e:55:e6:2c:d2:8c:ad:ee:b2:
         02:b2:5a:bb:f4:6e:31:97:d0:bb:6a:77:9b:cc:39:33:d2:0c:
         2f:fd:81:56:2c:6c:49:6d:cd:d5:7b:ba:c3:55:4a:bc:e2:c7:
         b2:e4:c4:57:f5:ff:2a:4f:15:a5:a7:54:92:80:1a:af:fe:51:
         93:2d:e1:27:19:d6:35:5f:ff:f5:ad:f1:ae:d3:3c:03:87:02:
         84:7f:3b:e2:11:b3:fc:14:15:04:90:36:7a:62:c2:20:7e:1c:
         5b:b2:db:22:1b:1c:e8:88:20:ce:12:72:b5:06:9c:d2:84:f7:
         77:8a:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:50:56 2026 by rpki-client