Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8e8f9fc-8027-3e58-9b19-cd9e6016b51b.roa
File:                     e8e8f9fc-8027-3e58-9b19-cd9e6016b51b.roa (raw, json)
Hash identifier:          qtcgcKDvWMcVQHNbgFMtZQrA3GssucNYSYVwJpSSkQo=
Subject key identifier:   AD:90:E9:35:5B:4C:5D:1F:F6:98:B9:41:6B:49:14:01:E4:C9:95:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA7879BC214F823948CCD5200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8e8f9fc-8027-3e58-9b19-cd9e6016b51b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:9121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9b:c2:14:f8:23:94:8c:cd:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a4978b22-7b17-4874-9af3-744158acb4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:30:38:b9:59:a8:04:67:c5:97:10:5b:72:d6:
                    bd:f6:60:3e:90:7a:c5:53:9f:ad:29:b4:a3:35:d4:
                    92:b5:42:dd:0e:47:62:1f:3f:ff:02:09:30:1d:5b:
                    66:c1:48:6e:c3:8a:da:e7:5d:63:16:1e:ca:ee:69:
                    25:96:66:b6:c4:6c:b6:c4:92:b0:e0:a7:14:4b:d0:
                    ee:a8:66:2b:95:98:d5:10:f2:d5:00:e5:da:e6:f7:
                    0a:bf:7f:23:10:75:12:65:70:08:f0:5d:d4:d6:31:
                    03:47:ce:2d:54:7e:27:4e:9d:ed:fc:1b:88:fd:a6:
                    73:a8:18:58:f5:e0:7f:3e:bd:6a:55:72:ce:34:e5:
                    5f:14:23:44:6f:9d:90:77:61:8e:d8:f2:42:12:ed:
                    f3:07:2d:b8:4c:32:ec:3f:64:47:7b:5d:c0:fd:4a:
                    f1:bb:6f:f4:4d:29:ef:f3:19:15:d4:5d:c5:cb:b2:
                    6b:ad:ff:91:3a:fe:63:58:af:b0:fe:ad:1d:53:8d:
                    cb:11:32:d5:43:79:d2:eb:cf:15:40:c4:cb:2c:34:
                    25:a7:b1:d8:e5:cc:62:1a:19:e1:9f:14:5e:09:57:
                    48:3d:4b:a3:32:08:11:df:28:a1:64:a6:75:33:5a:
                    c2:55:fb:93:40:1f:47:47:f5:7e:6b:ce:02:c6:4a:
                    1f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:90:E9:35:5B:4C:5D:1F:F6:98:B9:41:6B:49:14:01:E4:C9:95:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e8e8f9fc-8027-3e58-9b19-cd9e6016b51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e9:13:0d:7b:cb:a5:6e:10:6c:8b:43:f4:81:7a:a2:83:d7:
         98:19:8b:39:23:37:da:9d:cf:8f:ce:8f:9c:cd:07:d7:2b:a0:
         a5:31:d6:28:8a:7c:e0:73:d8:74:fd:ff:fe:8c:fc:b8:38:f9:
         8d:2a:62:90:3d:b0:0f:18:91:8e:32:10:df:a5:a8:fd:fc:ca:
         38:fd:dd:d5:4b:44:86:b0:7f:68:87:80:b5:48:07:9c:d9:a7:
         fd:ea:6c:e7:40:93:7e:f8:9c:c0:52:dc:65:b1:ba:84:12:2e:
         7b:9c:02:ef:1d:63:33:6b:e6:2f:8f:8f:04:7b:fd:02:57:c4:
         84:ec:fd:58:e1:ac:f8:57:00:fd:24:95:0d:9c:31:88:52:40:
         91:ff:e5:71:37:9e:65:c3:11:91:2a:54:58:02:ac:37:ab:b6:
         d1:d7:ff:cf:32:59:b3:31:17:ad:5d:bb:e5:8e:6e:1e:20:0b:
         b6:03:9c:0f:24:80:32:36:08:af:67:18:1b:c2:d0:b0:b5:d3:
         30:ec:54:a4:8d:a8:bf:4a:36:76:ee:45:a5:55:34:cf:93:6b:
         81:f3:a0:d3:c4:e2:15:9f:ee:88:80:5c:f9:1e:e1:37:8d:1d:
         85:ea:e7:92:ea:1c:dc:bf:5e:31:98:bb:eb:8d:2e:b7:94:e3:
         1b:10:ff:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:33:37 2026 by rpki-client