Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2aba7b9-c5ae-367d-ae61-e015010c345d.roa
File:                     f2aba7b9-c5ae-367d-ae61-e015010c345d.roa (raw, json)
Hash identifier:          E0dmZ6xJ6gsPDezhkYgyrRnmV64SnwR2sD2aiQTvhLk=
Subject key identifier:   A7:D4:50:98:23:F8:C1:EA:DC:17:66:F2:00:FD:8B:EF:0C:09:0C:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA790C4A07D472A701FD56200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2aba7b9-c5ae-367d-ae61-e015010c345d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:b1c2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:c4:a0:7d:47:2a:70:1f:d5:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=91d333cf-86f4-4de6-ac1b-c80e6f953abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1c:6e:6e:e3:b9:82:12:80:01:57:30:e9:a1:
                    ec:69:f5:c9:e7:16:88:55:77:24:61:b2:f3:11:44:
                    ef:f0:8d:b9:a2:80:a5:72:d8:b8:c3:fb:92:00:65:
                    53:bf:2b:88:1d:da:e8:6b:98:14:53:1b:d8:6c:7e:
                    f8:4f:f0:4d:fb:c7:3e:c2:e5:65:de:3a:6d:6f:38:
                    0e:b0:dd:95:a2:2d:6c:e0:13:04:6e:18:30:ce:72:
                    e0:5f:9c:cc:68:5c:12:aa:cb:e0:e3:ad:5e:02:60:
                    10:bd:60:08:df:8c:dd:48:36:59:30:e3:4d:c0:49:
                    cf:92:5b:6d:ff:62:f5:b5:9f:ee:a3:dc:bc:32:9b:
                    28:0c:15:f8:7c:9a:bf:ca:e2:20:74:85:9f:41:3c:
                    d8:df:fa:51:08:2f:a6:be:85:9e:f3:95:67:2f:ca:
                    c1:0a:bf:7d:2d:61:31:a9:ef:4c:ec:1c:7a:a0:0d:
                    d6:06:89:39:12:5c:65:33:4b:33:2b:26:a2:9e:73:
                    4f:4c:6e:32:33:42:c6:f8:27:5a:00:d0:47:05:20:
                    ed:85:1a:df:4f:be:30:e7:29:5f:7f:27:a5:08:7f:
                    6a:83:1f:33:d8:d8:9c:b6:35:76:49:1d:92:86:2c:
                    a4:c4:9f:4e:bc:92:35:f8:6d:c3:aa:39:7e:0c:2f:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:50:98:23:F8:C1:EA:DC:17:66:F2:00:FD:8B:EF:0C:09:0C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2aba7b9-c5ae-367d-ae61-e015010c345d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1c2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:70:25:2d:f1:15:e2:0e:62:6e:3a:f9:e2:fc:9e:6c:12:
         ed:da:5d:67:6e:ba:d6:ec:b5:ce:25:b5:c8:9f:22:b8:20:12:
         18:39:51:15:a0:6b:d6:a1:39:6b:e1:90:7d:f7:bc:a6:a9:95:
         de:41:0a:49:d4:34:30:ea:b7:a5:91:16:5f:2d:17:99:11:cb:
         60:56:46:5b:03:57:c8:d6:3c:ce:0b:39:c5:33:25:eb:e7:db:
         a5:47:4d:ff:35:08:d6:e8:98:3d:6e:1a:a5:1e:4e:d5:21:71:
         09:ea:95:ef:2a:d6:64:28:f9:be:82:bf:12:e4:d6:5f:2f:1f:
         4c:c1:7d:0b:1f:63:22:cb:2a:32:b1:86:78:4e:77:03:70:a8:
         1f:ea:90:af:47:06:9f:7d:f2:5e:a2:9a:ec:e9:d2:60:9a:b6:
         d3:1f:6a:57:cb:ee:c1:a4:26:2d:53:c5:f5:d1:48:b5:f0:53:
         dc:69:d3:91:9b:ef:37:7e:39:ae:bd:36:21:27:b1:6a:8f:3c:
         f4:92:b3:82:1f:78:d1:28:a2:fb:9e:c2:cd:65:22:6f:ad:ab:
         af:78:a3:38:64:61:65:56:4b:c8:51:88:65:46:20:53:a1:40:
         96:5f:57:9a:a5:7f:12:d6:b5:85:34:cb:8a:68:66:1e:69:45:
         d8:77:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:15:17 2026 by rpki-client