Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08b9f7c9-f90d-3cef-9217-297abafbcf37.roa
File:                     08b9f7c9-f90d-3cef-9217-297abafbcf37.roa (raw, json)
Hash identifier:          z6IOATmIk5pPXXp++q9wF+U5urzzoGR+BrkFtidZJFA=
Subject key identifier:   C2:C3:EA:F6:08:CB:F7:FF:6D:95:47:E7:13:45:FB:24:7D:8E:D9:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD58273FC87E58B870FD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08b9f7c9-f90d-3cef-9217-297abafbcf37.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1008::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:58:27:3f:c8:7e:58:b8:70:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=892210b7-5ae4-4d1f-a664-6149e154a986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dd:6e:99:3d:9b:e7:fb:69:b3:1e:75:1c:d3:
                    c4:c3:ec:19:20:77:09:1d:40:5a:51:b7:1b:49:50:
                    59:81:12:7f:6d:b2:65:aa:7e:46:38:e7:cc:f5:ec:
                    97:20:dc:88:1a:f5:6c:be:a5:61:6f:1b:f6:90:29:
                    4d:2a:d1:0d:a4:df:6a:84:be:dd:ff:f0:78:bd:ac:
                    cf:d8:28:48:9d:52:16:61:dc:fd:c4:db:92:f1:14:
                    cb:91:68:a1:5f:db:fe:c1:6b:be:8d:71:be:ff:98:
                    78:e3:ec:66:27:aa:51:29:ef:e7:59:2b:3a:8f:a0:
                    71:d1:23:aa:6e:bb:7f:84:2c:d0:ca:de:7e:65:77:
                    36:34:49:7f:89:17:f7:f6:ae:84:1d:fd:cf:ea:1a:
                    84:15:06:19:e1:85:0b:e7:ae:23:71:d6:27:33:22:
                    54:5c:77:02:f7:01:f2:92:06:ba:cd:ac:bf:cd:36:
                    d8:0e:73:94:e8:7f:21:7c:d6:31:d7:ac:e3:af:b3:
                    52:a2:5d:08:8f:a4:eb:7f:07:98:7f:d0:fe:ab:16:
                    26:b6:5d:ac:bc:6e:83:96:a2:b4:b7:09:de:a8:35:
                    5b:ae:37:9a:ed:7b:01:41:ce:eb:83:ea:5c:a3:c4:
                    47:51:76:f2:24:31:f1:88:62:88:0a:01:a4:6e:ed:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C3:EA:F6:08:CB:F7:FF:6D:95:47:E7:13:45:FB:24:7D:8E:D9:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08b9f7c9-f90d-3cef-9217-297abafbcf37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7b:36:3b:92:75:02:5e:15:07:3f:19:39:d9:7a:0c:8d:80:
         33:0f:a0:7e:bc:e0:4f:36:8b:f2:2d:0d:9d:80:d6:12:ab:5b:
         71:c4:f9:d0:f7:d0:ee:1d:f1:ab:85:a6:fb:50:86:84:9c:43:
         5a:d0:da:81:1b:ab:28:d5:c3:52:21:40:89:9e:79:5e:60:27:
         db:35:a9:1c:ba:e2:6a:74:60:56:13:3b:01:94:12:a5:4e:e6:
         31:87:48:72:54:09:2b:fc:17:21:b4:1e:58:aa:b2:6a:0e:8f:
         6a:87:0a:aa:fc:01:7b:6f:4e:f9:21:00:07:fe:74:e7:15:b7:
         d8:7d:5e:97:f8:c8:02:25:4d:43:1a:a9:08:ab:8c:90:35:18:
         6d:ed:20:0e:1c:94:e3:bc:aa:1d:d0:49:95:ad:59:44:8c:7e:
         aa:3d:24:45:94:81:61:32:42:f4:d9:23:51:8c:d3:06:45:15:
         f2:f8:f0:a9:5a:f3:41:a6:11:d6:26:a5:80:80:63:2a:3b:90:
         da:c1:67:ed:93:3b:7b:d8:bc:d6:57:37:99:51:69:e6:f1:56:
         d5:92:f4:bb:3a:77:da:23:54:e3:2f:00:db:b8:a6:b7:d2:8a:
         aa:72:9f:47:4e:6b:10:fe:33:7a:47:a9:50:af:9f:b4:16:69:
         58:f7:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:25:43 2026 by rpki-client