Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea3a6946-5fb8-3a2d-a013-e2c58ebc4a15.roa
File:                     ea3a6946-5fb8-3a2d-a013-e2c58ebc4a15.roa (raw, json)
Hash identifier:          VOIzLK6pfwgVbTY00iDjRLQ/aAfFo+pcqz79Q8Dz5dc=
Subject key identifier:   FA:25:96:A1:21:D7:11:B4:EE:7F:79:D5:57:D2:72:A7:B6:EF:7F:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ECBD1E77EA21D62C751A70B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea3a6946-5fb8-3a2d-a013-e2c58ebc4a15.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     6167
IP address blocks:        2600:1017:a015::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e7:7e:a2:1d:62:c7:51:a7:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=ad4aee93-64fe-4170-93ce-58edcd128698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:7f:8b:45:64:b8:47:3f:f9:43:4e:83:8e:
                    4f:92:32:1c:cc:c3:27:cb:f6:dd:91:88:e5:9f:ea:
                    27:4b:b4:a2:a3:0f:f5:d3:4c:65:b4:15:39:e3:54:
                    1f:b7:bf:39:e0:84:f0:36:aa:f7:a5:d0:7c:90:2a:
                    63:1a:35:f2:ef:12:d0:07:1e:24:e7:e2:64:a7:ef:
                    ea:5a:5f:4e:e9:cc:26:f0:32:b1:ae:12:2f:46:d2:
                    c1:9b:a1:d5:6c:75:7c:08:b7:9b:2e:f4:e3:41:08:
                    68:ac:76:6f:97:61:61:ac:c5:89:0c:90:ca:39:78:
                    6d:f8:69:0e:36:7f:c2:a5:21:de:4d:f3:99:1b:e9:
                    1c:54:5b:16:d7:b5:19:bb:d8:e1:a7:35:70:39:65:
                    bb:d9:fa:67:b8:58:fb:d4:4b:86:c9:91:91:ec:0d:
                    52:b2:1d:34:aa:24:a9:2c:b3:ad:c3:a2:ad:07:25:
                    f7:35:82:0e:05:b4:84:b4:6f:ab:ba:b6:db:67:94:
                    36:ee:df:54:36:a5:ca:07:dc:ae:46:9d:52:23:bb:
                    70:a9:d9:3c:1d:94:df:2d:ca:28:bc:69:91:74:e1:
                    22:fc:f6:11:6b:66:fc:69:99:f9:02:73:fb:96:fd:
                    33:0f:13:72:21:51:38:3e:63:7b:d5:80:aa:60:1e:
                    6e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:25:96:A1:21:D7:11:B4:EE:7F:79:D5:57:D2:72:A7:B6:EF:7F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea3a6946-5fb8-3a2d-a013-e2c58ebc4a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a015::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2a:18:de:ca:8e:18:86:fa:c1:c7:ed:df:1b:6e:b8:bc:62:
         e9:07:40:e6:9c:fb:b5:b1:72:b3:0a:3c:56:f3:4d:60:77:93:
         5b:47:25:eb:6c:40:be:a5:c7:a0:55:72:38:fb:09:3e:b8:3b:
         36:3b:16:01:9b:18:5c:3b:3d:3a:62:9d:36:d5:ca:9f:f3:93:
         39:fb:ba:6c:19:23:91:b3:2e:f7:0c:92:cd:41:26:0b:0c:72:
         ab:67:ba:8f:4c:2a:9f:38:d9:57:c2:16:aa:fb:39:46:2e:ae:
         9e:2c:79:6b:bf:63:2b:4d:23:89:b4:5f:2e:6d:28:16:25:9a:
         8c:1b:a5:62:5c:0c:45:e6:26:8b:d4:f1:9a:35:4b:55:62:f6:
         7e:77:6c:ff:23:d0:c1:fa:ec:73:ae:fe:8b:13:54:69:87:92:
         d5:a7:86:6f:fd:1f:44:bb:f7:28:7e:23:47:84:87:fb:d1:2c:
         bf:5e:65:32:77:91:fb:b4:ec:04:22:77:9d:b1:fc:d4:71:61:
         2c:3c:17:07:59:d2:79:b7:31:90:01:92:dc:35:27:90:f7:9a:
         90:cc:b0:6c:6c:27:01:df:b5:f4:21:5d:0b:28:85:6d:94:26:
         29:57:00:b3:3a:6e:a5:f6:be:54:5f:95:cb:b7:4c:b0:a4:7e:
         c9:c8:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:01:16 2026 by rpki-client