Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb0d728b-ca41-3a9a-8bf5-d369cf93e70a.roa
File:                     bb0d728b-ca41-3a9a-8bf5-d369cf93e70a.roa (raw, json)
Hash identifier:          TEgh/UbSLd2fJ9xb2aRcPFluv6pMHJD3xG4sRfrrywk=
Subject key identifier:   48:EF:8D:E6:38:79:53:96:8C:B4:7F:06:6E:DC:AA:5A:FF:15:68:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790302F34451DF2EFEA48C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb0d728b-ca41-3a9a-8bf5-d369cf93e70a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:1007:b098::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:30:2f:34:45:1d:f2:ef:ea:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7dcbd115-227d-47ee-94d5-a7f52f46180d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:6b:fa:b2:f9:0c:a3:17:bc:1c:3d:fd:68:
                    02:1c:85:55:f7:df:f3:c8:ed:a8:03:69:d8:86:9d:
                    a5:1c:eb:21:f7:2a:dc:46:3a:24:b6:e7:4c:a1:11:
                    97:5a:8f:3e:38:11:4a:c8:34:39:21:2e:32:a1:97:
                    f3:80:1b:71:11:4c:75:63:1d:40:f0:db:eb:35:4b:
                    52:db:6f:f0:fe:8e:3e:8f:2a:f8:2b:ea:de:3e:2d:
                    75:14:6e:7f:ee:35:ee:54:4d:d1:ed:8f:ee:df:24:
                    c3:81:e3:c8:b7:01:9d:ce:b5:22:be:45:32:c9:fc:
                    99:43:a7:94:2d:e1:11:26:8d:df:c5:5e:9c:f6:cb:
                    c8:c1:47:83:aa:47:b7:0f:b6:e1:4c:52:b6:17:97:
                    0e:86:90:08:f4:15:fa:c8:7e:63:10:c8:e9:40:ed:
                    ac:ec:da:da:d0:e8:33:1a:3c:fd:bc:48:fc:55:e7:
                    57:25:89:75:e2:1c:c0:1d:e8:f6:1a:78:a8:1a:21:
                    e3:92:fa:3b:dd:99:eb:17:69:0c:f0:8b:12:c9:d4:
                    37:a2:6d:ea:83:5c:5b:be:a9:91:a3:3b:f4:e5:4e:
                    8b:03:5f:db:36:02:e9:5d:34:a3:a3:36:8c:e4:40:
                    6e:e7:96:9b:df:bf:14:57:25:c7:5f:4a:cb:2b:9b:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EF:8D:E6:38:79:53:96:8C:B4:7F:06:6E:DC:AA:5A:FF:15:68:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb0d728b-ca41-3a9a-8bf5-d369cf93e70a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b098::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b3:03:2a:39:0c:e7:04:11:d7:96:75:2a:a2:5b:aa:19:a8:
         eb:57:f8:dd:49:84:9c:53:89:72:35:4f:dd:d7:34:00:e3:eb:
         cd:b4:d5:58:26:4a:ee:3f:33:de:06:9f:e6:37:fa:7f:8d:0d:
         06:63:f8:16:6e:7a:55:eb:dc:a0:d5:ca:0c:cc:f8:fa:51:54:
         58:a0:59:3d:72:7e:e7:b8:7a:1d:a1:c7:ed:61:80:55:46:54:
         e1:c2:62:7e:4d:9b:91:97:cb:5b:c6:66:98:90:f8:d8:99:75:
         ff:cf:ae:cc:e2:2e:62:17:9a:28:54:b0:f3:62:fb:68:02:da:
         4f:dc:8f:cd:0c:ca:e7:24:59:5d:2e:6f:16:0a:c3:ca:08:77:
         d6:2b:42:3e:35:17:2c:65:19:29:b8:34:9e:33:4a:f0:ba:c7:
         e5:d4:68:c2:c0:e3:28:6a:4a:17:90:47:97:c2:7e:46:0b:af:
         8a:62:01:7e:7c:f7:b0:da:2b:1e:68:ac:4f:20:a7:3c:e5:36:
         08:62:85:a9:c4:6a:d7:ba:3c:4c:1f:16:dd:f6:7b:3a:99:84:
         6d:96:29:7c:97:f2:d6:b6:a7:04:a0:78:29:48:b7:b7:f4:e0:
         47:df:2b:d1:af:01:b1:06:26:a6:69:00:ff:97:90:26:89:21:
         92:d2:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:48:45 2026 by rpki-client