Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff5d348-ac5b-357f-9b37-2805b0bef4cd.roa
File:                     bff5d348-ac5b-357f-9b37-2805b0bef4cd.roa (raw, json)
Hash identifier:          fcHeFCWnb3H1WVIZqShoU4T4x5r0rJo3SckHi3vQBu8=
Subject key identifier:   DE:32:3B:A9:69:AA:94:F4:D2:85:12:3C:8F:58:36:67:96:A0:BF:70
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECBD1BE6C8F927503D8E93340
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff5d348-ac5b-357f-9b37-2805b0bef4cd.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     6167
IP address blocks:        2600:100a:a114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:be:6c:8f:92:75:03:d8:e9:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=ad71e81f-576e-4e1e-8176-999280f36659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:9e:d9:58:51:37:48:20:24:f5:e1:5a:84:
                    8b:c6:1d:90:94:7b:7a:b9:1d:46:fc:08:f9:eb:b5:
                    9a:aa:19:95:8b:d5:81:39:d5:c4:25:d5:5c:02:ae:
                    92:a6:37:30:e8:d0:5f:9f:91:6f:c0:88:13:06:09:
                    0a:ae:11:d1:1d:f0:e1:b7:bd:f9:c1:2f:f8:48:fe:
                    0a:1b:0f:cd:f8:e4:83:5a:0c:81:c4:80:a3:45:66:
                    8f:a5:88:ad:20:94:b2:7f:1a:97:af:0b:04:35:7b:
                    c3:9b:f5:09:1e:89:8e:db:5f:12:a4:0d:f7:3f:f7:
                    91:b3:6b:20:0f:03:f4:b6:57:91:c7:37:34:da:41:
                    76:f9:68:0c:77:61:d4:0b:05:07:30:de:b0:7e:37:
                    9a:d3:ef:7e:87:9f:fe:1c:43:46:12:b9:12:e3:76:
                    94:72:e7:7b:f8:54:8b:53:5c:bc:f3:3b:e6:84:0e:
                    26:1b:d5:9e:7f:46:c3:0a:78:ae:99:9e:a6:1a:4e:
                    89:40:12:cd:30:9c:67:48:12:9d:a0:3b:a2:93:26:
                    1a:7c:6a:55:51:37:8f:83:a9:d1:2b:8d:c5:46:3c:
                    ea:0a:e6:bd:1f:a3:28:01:eb:40:f1:6c:f7:9c:7f:
                    85:5b:28:10:be:56:71:47:95:74:a8:00:54:3f:d8:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:32:3B:A9:69:AA:94:F4:D2:85:12:3C:8F:58:36:67:96:A0:BF:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff5d348-ac5b-357f-9b37-2805b0bef4cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a:a114::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:cf:58:a9:c3:8e:03:58:7f:6d:21:ad:12:a9:78:a6:2b:
         57:8b:11:e8:ae:32:67:e6:6b:56:6d:86:45:d6:fe:57:da:a9:
         47:c7:a8:5f:e3:21:8d:28:be:fa:75:50:4a:d6:4e:c0:2c:5d:
         d1:d1:20:fe:0d:ca:5a:fb:ad:26:45:df:ba:71:9c:a8:65:35:
         93:ec:13:2b:52:22:28:0a:ed:cd:ca:c6:96:73:04:f8:0b:e2:
         28:8f:76:4c:7e:3a:51:57:4c:4d:dd:96:26:34:05:3d:5b:25:
         0c:c7:8a:61:09:46:2f:3d:d3:5c:40:0f:6d:99:9f:09:08:ca:
         a6:2a:84:84:d1:08:c1:82:fc:1d:0f:9d:0b:83:5e:52:c5:ab:
         f4:0e:41:a4:00:f2:9f:4a:be:42:78:68:15:85:1a:95:32:0e:
         82:19:0f:2c:af:a5:79:66:48:a3:2e:33:12:98:dd:e8:90:d4:
         91:a0:1d:31:6d:e3:07:65:b0:6d:65:ce:b8:e4:07:71:00:17:
         93:51:c8:06:db:ae:e9:41:29:ba:56:0d:82:04:dc:3f:78:02:
         5c:c5:e9:b1:be:f0:32:95:57:8e:5c:73:fd:12:3a:51:6b:84:
         d0:85:6c:c6:ce:24:09:ed:b0:5f:59:d7:47:aa:5e:89:b7:6b:
         3d:78:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:46:11 2026 by rpki-client