Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3512287-3222-3f34-9099-c785776d0216.roa
File:                     b3512287-3222-3f34-9099-c785776d0216.roa (raw, json)
Hash identifier:          kp5/1FvtBcYQGDgFprzvje6qmp9IOuebqU5o5MIkuaY=
Subject key identifier:   08:C6:32:F7:5C:46:E3:8E:CA:7A:28:9D:27:19:D5:6C:87:6E:F7:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7910EC9F474F358354CAFC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3512287-3222-3f34-9099-c785776d0216.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1000::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:0e:c9:f4:74:f3:58:35:4c:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c692bc54-9f6e-4109-aa03-80f5bfcfd452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:95:50:ae:65:a0:e5:28:20:f3:7b:59:2e:
                    98:92:cc:08:77:d0:d9:7e:e6:96:57:af:93:88:46:
                    f1:9e:b7:e3:84:b6:2b:bf:4b:c2:9a:27:1d:22:ef:
                    19:ca:71:73:eb:7a:e4:78:fd:b0:90:3c:5d:30:f8:
                    25:f1:9b:44:7c:76:9d:a3:50:75:5b:c7:91:61:1d:
                    e5:cf:f9:99:38:1c:7b:ef:c5:bf:58:62:ec:2c:7d:
                    5c:8e:be:82:ca:21:dd:04:06:2b:1f:99:30:00:ad:
                    d4:0f:3a:4d:ff:47:b5:d2:8b:1d:da:f3:3f:ee:9f:
                    d7:0b:7a:c8:c8:ea:9a:d3:93:47:3e:d0:2f:57:d7:
                    68:b6:25:fd:48:ca:1e:2f:0d:d3:c1:6d:7a:3e:58:
                    f1:9d:73:88:eb:10:91:bc:5d:e0:d2:a7:89:ee:ae:
                    f9:36:63:27:5f:cd:a3:8c:1f:40:ae:c7:93:3d:41:
                    8d:04:e4:dd:76:8d:1d:7f:16:28:84:f8:37:23:8a:
                    87:de:2b:b5:b1:68:20:9a:c9:d7:be:52:a5:f7:99:
                    30:82:70:6a:12:76:6d:25:dc:f4:3f:a4:f2:63:4a:
                    30:18:aa:be:da:2f:b5:6a:73:68:aa:4b:08:5c:cf:
                    52:fb:16:c2:da:f1:3c:50:e9:4b:83:85:f5:96:88:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C6:32:F7:5C:46:E3:8E:CA:7A:28:9D:27:19:D5:6C:87:6E:F7:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3512287-3222-3f34-9099-c785776d0216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:ec:76:56:9c:9a:da:84:f9:d9:41:d0:b4:56:5e:e4:5f:
         8d:8a:b6:58:d3:d0:19:c4:6c:c0:42:4e:d8:5e:2c:84:d9:34:
         82:ba:a5:3d:94:00:7b:e8:e6:27:33:51:29:d7:34:2d:b7:ed:
         a8:66:54:26:87:99:bb:fb:d3:74:59:a5:87:bc:30:cb:df:1c:
         51:f6:67:75:02:e5:5f:17:6c:80:c7:23:13:2a:27:79:06:40:
         99:3e:9b:93:b0:de:a7:b4:f7:f2:c9:82:78:09:c8:b3:3f:18:
         75:34:8f:78:f8:76:79:0e:bf:71:3e:7c:8f:89:53:92:67:af:
         ea:37:53:47:23:6e:12:e9:27:d0:be:e0:c8:c6:1e:1e:4d:41:
         77:4b:5f:7e:24:83:2a:df:28:73:11:7e:9b:7a:ce:a5:b1:73:
         da:75:25:44:56:0d:87:2f:75:f2:fd:5c:d3:30:a6:7d:99:a2:
         bf:b2:27:f3:62:51:c8:f4:ad:84:a7:8e:60:09:d7:77:00:fc:
         fd:8e:69:16:fb:9d:03:28:4b:ad:45:4e:8b:a4:16:c3:8b:c7:
         41:67:43:af:53:e8:7e:a0:6c:50:e5:01:ed:e9:c8:31:b0:3b:
         be:3f:37:1e:b2:b0:19:da:c8:ab:fd:2e:2e:e6:b4:ff:08:52:
         a5:36:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:56:06 2026 by rpki-client