Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dc269e4-99f7-304a-a487-1947b0b5665d.roa
File:                     5dc269e4-99f7-304a-a487-1947b0b5665d.roa (raw, json)
Hash identifier:          NEnm5Xp1rfkIgGl5YhCSbGhbjECvyeWSA6c51Z+ya4k=
Subject key identifier:   46:04:E2:7D:3B:1D:91:9B:3E:BA:EE:1A:C3:87:6D:BF:B2:FA:35:82
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E8B250416634ECD4539E4FB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dc269e4-99f7-304a-a487-1947b0b5665d.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        2600:1012:b010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:04:16:63:4e:cd:45:39:e4:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=d0307ec6-82c8-4530-bf38-f38f5cfa1f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:54:9b:36:6c:c8:9d:fa:4c:cc:5f:de:b8:
                    49:47:79:52:6a:cf:98:b8:2c:d5:d5:66:6e:35:48:
                    8f:af:cb:79:66:a3:3b:9e:d8:0a:b7:2d:26:d9:f4:
                    db:26:b2:81:44:e0:48:fe:6b:fc:ea:54:cc:f9:a9:
                    f2:ad:e6:24:b7:a4:de:04:af:14:60:e5:88:1c:86:
                    70:88:d2:d9:f4:72:48:af:eb:d0:38:a1:d2:9f:e6:
                    51:2d:14:61:8d:7c:14:51:18:a3:7f:0e:38:62:34:
                    aa:77:8e:95:de:fd:0d:e9:ab:74:f0:14:89:d6:e7:
                    76:dc:e6:79:37:cf:f6:c4:e1:e6:b9:e1:62:ee:da:
                    ae:14:be:79:3f:c0:de:4b:a0:06:eb:05:33:51:5c:
                    6f:50:b5:f4:d2:4a:45:13:e3:0a:d7:4e:da:ee:96:
                    ef:52:ff:c3:4d:90:f6:ce:a2:86:0f:01:31:f5:fa:
                    dd:37:f8:69:dc:00:74:67:f5:ad:09:76:ba:6b:1f:
                    78:9c:66:bc:bb:55:09:62:6a:26:39:87:59:7a:39:
                    97:45:ad:a9:24:c1:08:1f:52:7f:94:20:00:31:5a:
                    5c:cc:91:d0:02:aa:4c:7d:97:86:84:d8:4b:7e:6a:
                    37:57:2e:83:5e:e6:48:73:3f:94:b6:ae:ff:cb:6d:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:04:E2:7D:3B:1D:91:9B:3E:BA:EE:1A:C3:87:6D:BF:B2:FA:35:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5dc269e4-99f7-304a-a487-1947b0b5665d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:4c:db:0c:d3:fa:84:5e:26:da:d1:d2:fd:6b:33:89:bd:c8:
         ca:32:46:4e:89:8e:e2:45:c7:d7:dc:6c:8f:61:db:6d:a3:53:
         da:13:bb:98:56:74:ad:c4:a6:5c:37:6b:80:9a:11:43:29:a7:
         6c:07:b5:4a:5d:43:6a:07:fa:09:36:f9:55:ef:68:34:89:6c:
         e6:95:bc:1b:98:e4:70:f6:1c:74:d5:80:bf:75:be:a0:98:13:
         1e:7e:5a:cb:fe:4b:e2:f5:f8:60:83:72:6b:bb:6b:d7:ef:00:
         8e:0b:e8:40:62:5a:c3:0e:d2:5a:c9:ea:b0:82:8d:51:05:9f:
         92:50:75:fd:72:59:a6:46:f2:0a:bd:59:37:e2:b0:0c:e0:19:
         e6:cd:f0:48:a3:8d:c8:7b:36:37:3d:7b:46:81:b8:bc:06:58:
         49:b4:c9:ff:50:73:ea:c1:b6:2f:53:cc:ff:d9:12:bb:ef:7a:
         47:9d:76:d1:2b:c4:bb:78:70:23:ff:7a:6b:4d:ab:31:10:31:
         b1:d9:42:92:dc:04:cb:fb:ea:90:09:07:c9:30:48:b0:bb:ab:
         60:24:54:45:f7:9e:46:82:7a:0a:78:91:ff:42:c7:ee:90:5f:
         71:59:d2:ba:7c:e6:63:76:0a:e5:e3:96:7c:c3:d8:9a:7a:2d:
         e2:d3:57:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:59:10 2026 by rpki-client