Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec61e7ef-6d0f-3839-ba92-55053ee85614.roa
File:                     ec61e7ef-6d0f-3839-ba92-55053ee85614.roa (raw, json)
Hash identifier:          y9FJHMDNuGGSXiYyPz1XFckNXIOomJ0SfNR1KU45v3U=
Subject key identifier:   74:7E:ED:9A:66:26:2C:F1:17:4A:49:10:C4:16:AE:52:E3:88:AE:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4AA728E86B489A981A0F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec61e7ef-6d0f-3839-ba92-55053ee85614.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1001:b158::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:a7:28:e8:6b:48:9a:98:1a:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=575836a5-436a-4393-8cdc-606c5638715b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:4c:fc:c8:c7:a2:e8:53:7b:d4:9e:51:1b:
                    16:6d:fd:5a:3b:f4:1f:d3:96:69:8e:90:99:6e:11:
                    d4:bb:02:11:44:57:8f:2f:1d:23:66:09:90:aa:7a:
                    53:94:20:5c:f1:38:0a:f6:8c:99:87:b8:9d:4f:5d:
                    d8:9b:18:89:d3:ed:0f:9c:76:53:a6:29:dc:d9:8a:
                    77:17:75:d5:2b:95:b0:9b:6b:40:2b:e5:ad:ec:70:
                    58:42:ce:97:e7:8e:6b:dd:91:ac:ee:df:d8:b5:62:
                    96:5f:19:7c:1e:e1:78:7c:c8:90:60:0f:fc:91:2a:
                    7d:ee:19:84:4d:8e:f9:91:7d:0d:28:81:9a:23:04:
                    35:f6:ee:da:ba:13:b9:94:c9:1b:15:8d:4d:83:87:
                    19:a3:c2:6c:88:53:3f:82:50:5d:29:29:8f:e1:cf:
                    44:a1:a4:82:f0:e3:cc:d4:f3:95:e4:65:8e:7e:8b:
                    8e:ef:4c:86:5e:c3:bf:da:be:58:85:df:66:11:52:
                    24:c4:a6:7d:c2:55:5c:c5:06:dd:12:8b:e9:74:94:
                    8e:3a:2d:fd:47:7c:45:aa:80:57:9e:18:49:ad:20:
                    1d:ac:06:1e:3c:4c:81:fe:eb:06:3f:79:f6:62:6e:
                    73:2c:5c:b3:10:9c:90:f3:cd:52:70:8f:bb:a3:49:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7E:ED:9A:66:26:2C:F1:17:4A:49:10:C4:16:AE:52:E3:88:AE:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec61e7ef-6d0f-3839-ba92-55053ee85614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b158::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:93:d6:ee:6b:c1:f2:61:2c:e4:36:b5:2c:1e:80:35:ab:2f:
         62:38:6c:65:c4:a4:8f:6d:18:98:b0:29:3f:0c:de:f5:d0:e2:
         ca:70:62:ab:d5:19:13:70:47:9a:f4:2d:ad:2e:5c:c7:28:60:
         bc:00:02:a4:90:02:15:16:89:06:58:8c:5e:26:a2:8f:33:01:
         c6:a8:0f:39:d8:17:32:1a:05:80:87:d7:e7:4c:8d:d1:ea:a8:
         81:18:be:70:f5:58:9d:7a:e3:d5:e7:56:00:7b:97:ac:f5:aa:
         6d:c9:a6:59:ee:2a:0f:1b:8b:ed:d4:1f:cc:fb:2c:a8:8d:60:
         f3:e6:2e:61:d8:7b:ea:50:34:19:7e:da:21:46:b0:14:75:fb:
         19:fb:09:87:f4:fe:fe:fa:08:80:a6:7f:ae:1d:38:13:fc:bf:
         c3:f9:90:4c:8b:e4:ec:35:36:7f:8c:ac:e1:c9:fb:b2:5f:44:
         17:c6:b7:fd:c2:41:77:91:18:17:6f:d4:b8:44:85:f3:10:54:
         ea:55:74:90:f5:5c:7f:96:99:64:40:1a:e5:bb:21:01:ab:9d:
         7c:9a:ca:f9:7f:e9:a6:c6:bb:58:9a:da:7b:c3:de:da:3a:53:
         6e:9f:9a:d0:20:6a:fc:36:17:1a:b9:45:e1:36:c6:bc:a9:9d:
         dd:38:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:34:10 2026 by rpki-client