Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4cf3435-7511-32af-b13b-51a1de365c87.roa
File:                     c4cf3435-7511-32af-b13b-51a1de365c87.roa (raw, json)
Hash identifier:          fvFYanp/WPd1/RkVtDeSvYvihac+Wp9PpqM/4qzoOi4=
Subject key identifier:   FB:31:45:2B:3E:F4:F8:F5:A6:08:7B:E4:7B:BE:18:22:00:8E:F5:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AA44EB0B2581496AD4BC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4cf3435-7511-32af-b13b-51a1de365c87.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1000:b060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:a4:4e:b0:b2:58:14:96:ad:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=87ab7c8b-7239-422c-b1f7-ba9b31fce5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dd:56:98:a7:b3:cd:9a:30:cc:50:b7:91:2c:
                    99:99:bc:9c:af:d2:7b:ff:13:bd:f8:0c:2b:1b:9a:
                    3a:46:ad:aa:11:07:90:02:c7:86:29:fa:89:7e:38:
                    ef:22:22:72:77:2e:53:63:88:3d:5c:6f:65:dc:c4:
                    a7:ec:3c:64:47:6c:c3:33:e1:60:85:f4:7c:f4:4e:
                    9b:c0:66:64:7c:a9:3a:c0:d8:3c:78:12:e8:47:ee:
                    0e:c8:a5:46:6c:a8:b8:a0:42:58:6f:ed:f0:1f:8c:
                    55:50:fb:44:d1:6d:21:e0:8f:ad:d8:ba:68:77:a7:
                    49:2c:50:8d:77:23:66:83:35:84:82:ab:5e:55:a3:
                    d5:2d:aa:51:2f:d8:30:d5:38:33:2e:30:de:3a:16:
                    74:db:39:9b:de:e4:df:16:0b:14:71:62:a5:b7:7b:
                    00:d3:ec:80:3d:12:40:6d:82:7a:f4:21:42:50:d6:
                    2d:cf:8d:ae:b0:8c:ea:29:fb:e7:a9:80:23:d5:46:
                    54:1a:1b:42:c1:e2:cf:64:77:1a:1a:cc:0b:70:38:
                    b5:ce:69:0d:c2:aa:9e:11:7b:0b:0f:5c:45:13:50:
                    c0:58:b0:7b:9a:c5:3a:f5:fa:3a:51:3c:37:1b:40:
                    56:f0:9e:a2:f2:42:f7:74:8d:98:cf:98:06:61:65:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:45:2B:3E:F4:F8:F5:A6:08:7B:E4:7B:BE:18:22:00:8E:F5:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4cf3435-7511-32af-b13b-51a1de365c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:f9:19:00:76:c8:e3:49:87:84:b4:cb:68:72:d9:29:b9:
         db:8f:9b:91:13:99:aa:e1:ba:4d:a5:b4:8e:46:44:28:98:ae:
         49:29:a0:01:81:0c:24:c0:ed:63:a6:77:0f:a6:99:0b:b5:10:
         ab:cf:1f:c3:7d:20:24:7c:35:4e:11:76:b1:04:35:f2:d1:98:
         69:ed:26:5b:a5:68:49:f5:65:22:58:59:67:2f:97:76:88:6c:
         6e:2b:bb:78:42:df:43:59:aa:79:63:af:08:37:63:65:70:75:
         10:3d:56:0f:bc:90:56:62:33:8c:58:70:7a:45:11:62:08:6e:
         b3:bc:b5:32:67:b9:41:36:b9:73:47:e3:04:e4:68:a7:16:51:
         4c:1b:50:b7:8d:bd:b1:a1:b9:5e:23:f5:38:6f:e6:08:ab:73:
         ca:96:cc:8c:6d:02:4c:20:97:42:4b:d8:f0:90:00:9f:02:d0:
         15:9b:62:2d:88:a9:47:eb:dc:8e:20:45:21:22:b4:06:c0:88:
         a5:d2:58:fb:de:22:77:81:f1:20:fc:e4:07:95:63:4f:ab:1f:
         ae:b7:eb:40:56:e9:d3:4e:0a:1f:32:91:1a:8e:24:c7:57:b5:
         82:8c:b5:63:22:46:4d:18:fb:7b:ee:52:50:06:a4:cf:bd:e0:
         db:31:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:52:46 2026 by rpki-client