Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce69b68b-246f-3e33-903a-844c45324491.roa
File:                     ce69b68b-246f-3e33-903a-844c45324491.roa (raw, json)
Hash identifier:          k0O5StY894pK01hALLt/J6FVYt99L1QBCFAnx8WlYBM=
Subject key identifier:   FF:71:4E:D6:7B:10:E0:67:98:50:F0:11:DD:9F:41:18:5B:68:C1:8E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E8B2509C2ADD9056FC752EB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce69b68b-246f-3e33-903a-844c45324491.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     6167
IP address blocks:        2600:1016:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:09:c2:ad:d9:05:6f:c7:52:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=2747ac29-b27e-4c8e-8437-dd90aa18295e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:2a:f0:ea:92:1f:cf:4a:69:c6:76:69:92:
                    f6:45:48:4f:ef:f8:3a:db:86:fb:21:33:8f:c5:28:
                    d9:db:f2:d3:15:e9:b2:48:10:8a:1b:49:27:e8:60:
                    bc:ae:61:1f:da:85:64:21:fb:60:d9:bc:60:ea:b6:
                    f2:a2:14:de:94:2b:bc:a0:fd:7c:5a:38:50:ed:a2:
                    e2:a9:f1:5c:e4:1f:e4:2c:ab:7f:2c:0e:fc:1e:11:
                    73:28:db:ba:ea:f9:91:66:ba:59:80:5e:26:cc:dd:
                    e1:36:11:e9:b2:c1:8c:2e:14:a2:54:ff:e7:92:81:
                    b3:d4:ff:12:62:dc:c5:29:be:63:1a:83:0f:45:e9:
                    92:23:6d:5f:1f:a3:2f:89:8b:b7:93:da:1c:30:4f:
                    9c:d5:8e:b5:65:63:b4:44:bc:7d:03:ba:c1:f0:cd:
                    d8:d7:dc:df:4e:6b:04:93:b1:06:73:96:fe:a9:c6:
                    a6:2e:4f:ae:bb:91:e8:8c:98:db:a1:8f:b6:07:4e:
                    52:7f:c8:cf:96:8a:d4:b2:69:7f:e5:4d:1f:d6:31:
                    e9:18:6a:23:7b:08:86:66:b7:18:e4:8e:2c:e0:07:
                    a1:87:da:6f:de:c2:04:a9:d1:13:3d:42:0c:24:15:
                    97:be:a3:9e:f0:9a:1f:4e:0e:71:ff:41:eb:1e:28:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:4E:D6:7B:10:E0:67:98:50:F0:11:DD:9F:41:18:5B:68:C1:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce69b68b-246f-3e33-903a-844c45324491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:eb:3f:fb:c4:af:21:e0:1f:d8:3c:a6:af:fb:70:35:21:4c:
         63:6b:dd:07:51:90:6c:5a:0e:f3:f4:5c:e5:21:44:3d:1f:8c:
         22:5f:73:4e:e2:48:ef:f3:5e:b6:b7:99:b9:8c:ab:0f:57:2f:
         94:5d:c0:34:ae:e6:f9:45:ec:bc:3b:65:db:5f:84:d8:28:dc:
         41:e7:89:62:9f:04:77:c8:73:c1:fb:39:83:14:bc:b0:e8:7c:
         3d:e2:80:c1:2d:96:c8:0b:c9:ab:de:94:40:a2:e2:aa:c2:30:
         d6:a1:4d:7d:17:ac:29:25:ed:f1:b3:3e:85:4e:15:f2:90:1c:
         15:3f:ce:20:9f:da:7e:51:ed:f5:0b:a2:f9:75:5a:91:8c:b0:
         7f:c4:56:48:92:55:3a:e3:b7:53:c0:d5:cc:7b:4f:46:dd:6c:
         a5:55:a7:24:eb:52:98:99:a8:0d:6b:dd:11:db:f1:67:f1:49:
         49:03:81:97:41:55:26:34:ee:40:45:17:33:23:9a:a8:97:c8:
         06:c5:72:62:7d:b2:b9:d3:85:ad:3c:eb:ab:83:c3:d3:ee:7c:
         f6:c5:2b:60:9a:40:3e:08:a3:6d:a8:7e:8a:c8:f0:d5:8a:2d:
         5c:fa:14:76:31:80:f7:3a:b0:b5:b6:b5:ba:eb:28:2e:26:fc:
         76:74:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:55:50 2026 by rpki-client