Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa
File:                     fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa (raw, json)
Hash identifier:          7LUPBEmXp0x1Jf/4Isu1T6/0Jn9btylZP/qHfOdBG6w=
Subject key identifier:   BE:C2:16:BA:9B:7E:7D:09:8E:83:9A:41:D3:24:23:8D:18:55:49:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A833C2CC3D61D90EAB000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        2600:1003:a400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:83:3c:2c:c3:d6:1d:90:ea:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=8c0eeeb7-3d7b-45ea-9d9b-1d1f730f68db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e8:ff:44:61:ff:e9:49:75:e5:42:ee:8a:09:
                    23:5c:a9:34:1d:04:d6:23:7a:2a:34:fd:3f:e3:56:
                    73:9a:ef:97:90:02:f3:9d:c7:fc:7f:2c:67:13:f6:
                    f8:62:d1:b8:8c:d4:d7:78:cb:86:68:4b:db:83:ad:
                    25:5a:3c:f9:6c:c4:86:f7:92:3d:da:3a:1e:a8:86:
                    c6:4a:84:4e:06:c0:cd:11:d8:78:3f:2c:1d:28:5e:
                    a3:3b:52:3a:0b:47:c8:f6:21:e3:f2:51:09:62:79:
                    a3:d1:da:9a:d0:33:72:c4:27:33:d1:af:66:5e:67:
                    00:2f:cc:0d:a2:02:f0:32:b1:18:df:92:f3:72:3b:
                    da:0f:59:69:a9:c4:3d:ac:87:a1:af:40:6b:ea:21:
                    45:c3:8d:3e:46:df:54:fc:f0:5c:30:c5:b1:87:4d:
                    b2:ba:9f:8d:2d:8c:f4:3f:2e:4f:41:fd:ba:69:47:
                    27:a8:37:94:ff:a0:dd:26:06:46:84:3a:1c:1b:f2:
                    c8:f8:26:d2:e5:6d:05:0a:b3:a5:6b:d1:55:dc:50:
                    97:f8:f2:3a:42:8f:9d:80:1e:21:c4:b8:3c:3a:f7:
                    c7:4f:8e:38:89:4c:32:ad:e6:45:30:17:ed:83:46:
                    38:92:b4:07:37:69:24:c4:3b:57:1e:e3:40:cc:76:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C2:16:BA:9B:7E:7D:09:8E:83:9A:41:D3:24:23:8D:18:55:49:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fba0c663-c60c-30f6-a2f7-34fc6a4a1f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:a400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:9d:00:21:1b:6a:95:40:75:2f:18:29:2f:d3:61:80:86:47:
         91:0c:f5:da:ce:5e:2c:ac:8f:5b:e7:00:91:8a:40:46:92:0e:
         dd:9e:ac:61:5d:3e:07:db:34:cb:93:46:31:89:bb:c5:8f:07:
         5e:68:74:3d:23:e7:67:50:91:c7:b2:31:33:dc:ca:80:98:8c:
         47:0a:26:e8:e9:2b:1e:3d:66:c1:ae:7e:dc:82:c4:af:ab:2f:
         5d:44:4c:8f:f3:9c:fe:fb:9e:9d:3e:6d:c2:3c:cd:b8:f9:6e:
         c8:64:67:b2:61:b7:6d:19:5d:2b:5f:0f:de:18:9c:ae:d5:80:
         37:35:de:37:ae:ca:21:bd:35:f1:56:ab:b6:4f:7c:71:c9:51:
         18:e3:17:68:95:bf:9c:9d:4c:30:17:a9:18:42:0a:96:44:f0:
         3d:02:a4:5b:fd:47:cc:56:75:27:1b:61:d6:c7:d4:46:ac:74:
         3d:c6:9c:c9:94:37:0c:21:ec:c6:d1:32:e4:ac:ce:ac:82:b4:
         31:d4:e9:0a:e3:9f:af:16:fc:31:07:9f:2a:99:21:94:a6:1e:
         e5:c2:7a:d0:79:37:c6:08:f9:4e:03:67:51:06:8b:23:ee:2d:
         71:f2:84:c9:9f:60:b6:a5:17:06:96:61:83:df:01:da:26:ed:
         f2:31:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:17:34 2026 by rpki-client