Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa
File:                     f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa (raw, json)
Hash identifier:          lj7XUGxFHsSum54BWqkSxYC0QHIjyuuPaiwd8VfXdgo=
Subject key identifier:   22:67:29:6A:1F:41:41:C1:77:60:D2:7E:0C:E9:35:3E:77:77:04:B4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79109A98BBA9B5EE25DC180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:09:a9:8b:ba:9b:5e:e2:5d:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dc2c8695-feb6-41eb-ae00-1f64c56c5914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:2c:2e:48:2a:ca:5e:94:25:d4:f0:51:93:
                    b3:4c:6e:57:99:51:2d:59:54:49:f6:d4:a9:06:68:
                    f2:d1:89:70:c0:7e:33:8e:d7:81:0e:ca:d8:0a:86:
                    44:31:28:c8:2d:65:b8:08:e8:0e:56:e3:b9:e7:e5:
                    f0:77:0c:64:74:38:b4:3f:cc:f7:9c:ea:a0:ab:9f:
                    02:45:32:9d:54:38:73:db:94:4b:71:09:0e:8e:d1:
                    42:3a:42:80:62:87:59:9c:84:02:28:c6:63:59:c7:
                    5b:cc:4f:ad:4b:a2:93:22:25:e5:51:a6:fd:f2:4a:
                    35:55:88:9c:35:14:34:76:d3:75:3d:66:02:60:dc:
                    6d:86:24:5c:bd:dc:1c:24:0d:e5:52:82:09:9b:6e:
                    46:a8:1c:66:a6:49:14:53:5b:31:81:87:8d:a7:17:
                    bd:bb:f5:ac:f5:3e:65:e7:8a:45:f9:7b:27:34:a4:
                    30:43:b6:13:99:66:dc:9e:70:8f:47:db:79:84:87:
                    eb:38:82:a5:69:de:0a:c5:ee:8f:da:c7:fb:1c:54:
                    94:49:f7:77:21:ef:ae:9b:48:8e:0e:4e:33:40:10:
                    98:6c:d6:0f:12:90:7b:ba:31:ee:34:ac:60:39:01:
                    f2:c8:f7:f9:30:ff:29:7f:6f:0f:02:21:cf:e4:80:
                    b9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:67:29:6A:1F:41:41:C1:77:60:D2:7E:0C:E9:35:3E:77:77:04:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f53f1950-5fa6-39d3-8995-f1e2f650ff1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:67:ac:1a:ed:46:59:6d:f4:4b:0d:96:48:e8:14:cf:ac:a8:
         59:4a:be:00:40:93:7a:7a:f1:8b:28:a2:21:ca:9c:ef:99:08:
         bc:06:8a:ac:f6:e3:29:33:bb:01:6c:41:06:3d:69:91:46:19:
         4d:8b:77:18:3c:b1:90:d5:58:2c:fa:83:47:a8:45:73:9b:e1:
         63:e6:40:3a:6e:fd:76:40:80:1c:d6:a3:46:83:df:b4:2c:00:
         99:88:76:97:00:37:21:54:c9:3b:23:ad:e8:0c:5b:47:14:6e:
         12:87:04:22:ff:e3:46:57:a5:d6:00:3e:3c:31:59:6f:04:53:
         4d:00:c8:f3:8a:7f:c9:0f:90:69:53:1f:8a:18:8a:93:43:8e:
         89:0a:9b:ad:ff:03:5d:3c:33:06:81:06:74:93:43:4c:49:46:
         db:e6:3c:0b:c3:c0:68:f5:77:57:cb:42:b7:16:ff:78:ac:9c:
         2c:84:ff:60:2e:0d:ff:99:52:1a:16:c5:c1:18:96:be:08:ff:
         f4:aa:ac:b9:ca:ca:17:68:80:fc:7e:0a:43:dd:72:67:f5:2d:
         99:45:50:b5:3c:b8:48:a3:0a:d7:35:17:da:be:03:2b:ef:e8:
         0c:d0:e0:b5:44:60:5b:74:a9:46:28:3c:9d:09:11:00:c8:55:
         b0:d2:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:35:29 2026 by rpki-client