Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09b25f8e-6578-34fd-9593-862140ee75bd.roa
File:                     09b25f8e-6578-34fd-9593-862140ee75bd.roa (raw, json)
Hash identifier:          Zory+KPfximIrErrKO/yX7doUMPg3NvqJGxEwiT1EW0=
Subject key identifier:   8F:91:DE:2A:27:18:C6:3B:12:29:68:91:1E:89:FB:0E:98:7D:5F:0B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E7E94E1822EA486FF4D8AB880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09b25f8e-6578-34fd-9593-862140ee75bd.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     6167
IP address blocks:        2600:1002:a013::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e1:82:2e:a4:86:ff:4d:8a:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=300b5c4c-c044-493d-8aff-64227a4f872f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:de:f3:0a:11:ea:48:75:e1:7a:59:af:3c:
                    1c:d9:47:9a:d7:bf:26:22:18:69:00:7a:b9:bc:09:
                    ca:a7:d3:9a:bf:46:65:0c:cb:47:f1:c8:f0:ca:d0:
                    ef:70:87:d6:cd:3b:f2:70:0e:0e:69:fd:f7:0c:da:
                    16:f5:ed:70:fc:1d:29:25:3e:a7:53:25:25:d3:b5:
                    39:48:cf:a7:bf:35:19:38:11:9c:bc:ef:7b:9f:d4:
                    2d:82:1b:04:b1:af:ad:cf:8f:0d:37:0a:04:f3:2f:
                    61:22:18:9b:ea:d9:f3:3f:fc:69:c0:54:0d:95:55:
                    4c:7c:d7:e9:1c:3f:6c:48:bb:cb:85:18:21:f6:e5:
                    b7:89:e8:b9:48:ae:18:97:ef:be:46:42:2d:c5:54:
                    63:ce:83:82:f1:fa:01:28:1a:4b:df:e8:40:a8:10:
                    5b:c7:25:45:9d:52:ed:a3:72:37:1a:06:24:e7:3b:
                    9b:f5:28:68:3f:64:66:de:96:07:ec:af:4b:39:d6:
                    a3:23:9a:0d:79:c0:52:e0:c2:8a:66:f7:5d:28:4f:
                    ee:db:91:55:f9:c4:02:28:59:21:79:1a:96:3a:da:
                    47:aa:b5:ae:91:c6:d1:4b:af:3b:d4:2b:32:6a:e9:
                    5b:e7:37:a3:a5:97:d8:57:19:ba:95:6e:2a:2a:aa:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:91:DE:2A:27:18:C6:3B:12:29:68:91:1E:89:FB:0E:98:7D:5F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09b25f8e-6578-34fd-9593-862140ee75bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1002:a013::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:87:a9:52:e4:50:7e:b7:62:73:01:23:67:4c:18:af:79:
         cb:13:b6:d3:9e:69:d8:a7:69:31:c2:91:23:2d:5b:27:af:bb:
         72:84:19:41:90:1a:5e:7e:4a:ce:3a:14:f9:3b:c8:7f:52:d1:
         be:2e:f4:2d:e3:c9:6d:2f:99:51:69:10:0c:04:e1:59:29:07:
         3d:83:3d:5f:02:a0:a4:04:63:24:fd:9e:96:69:cc:9b:cb:42:
         e6:d3:89:ef:3c:cc:f3:fc:d7:4a:c9:5d:f4:81:d9:da:ff:9e:
         92:f2:c8:0a:f6:00:95:12:fd:f9:34:c4:af:78:15:b7:bf:10:
         db:88:85:70:8c:a1:43:23:de:f3:ff:94:cf:69:03:21:d3:2c:
         01:1a:a8:78:5a:11:87:1a:a0:69:99:e6:5b:5e:82:3c:ca:f0:
         e2:9b:2d:7e:1d:07:7a:34:4f:e0:a1:d7:e2:62:92:dc:87:59:
         4f:39:df:9c:2d:a3:34:0c:3c:a9:77:d3:54:f2:1c:72:f8:08:
         99:a3:bf:26:1a:51:cf:b7:1b:f1:3e:19:6e:f0:62:38:31:2d:
         ec:70:de:bd:a5:6d:21:3a:db:55:a1:26:c6:d1:89:08:70:a5:
         70:92:17:89:8c:0d:78:57:90:66:9c:ef:77:c0:21:b5:2f:3c:
         dd:22:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:36 2026 by rpki-client