Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29de7728-9e77-3062-8920-19231862d472.roa
File:                     29de7728-9e77-3062-8920-19231862d472.roa (raw, json)
Hash identifier:          H3YAXlNnsctHGYyBr15IImadBHDnVaG55l1Nlpofm2A=
Subject key identifier:   CD:AA:02:AF:21:CB:DB:11:9C:5C:DD:E8:9A:44:E5:B7:CC:28:0D:9D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87D94D584C91ADCB9ECE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29de7728-9e77-3062-8920-19231862d472.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1017:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:d9:4d:58:4c:91:ad:cb:9e:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=331d1a0c-5672-4301-a40c-5de9347224b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:dc:cc:d3:8f:82:9a:83:52:3d:b5:8f:50:
                    3e:fc:3f:f8:1c:01:39:d7:fa:5f:1a:9f:13:ee:64:
                    4a:a2:a0:b8:80:94:d4:6c:f3:42:5d:a8:f5:f5:12:
                    8e:75:05:65:77:f2:4f:91:8e:37:6c:d8:32:85:df:
                    7f:3f:6b:b2:ef:69:2c:8a:f1:24:f0:da:d9:56:ed:
                    8a:6a:6f:62:5e:83:db:22:ad:94:72:c7:ed:c0:78:
                    44:0e:b6:e2:07:e4:5f:c5:15:b8:8b:21:d2:cc:56:
                    58:12:8e:53:b8:d1:54:7a:c6:9f:bf:ff:26:2e:20:
                    24:be:89:eb:b3:74:8f:17:00:8a:00:b1:f0:3d:4c:
                    16:85:72:bf:e7:91:8f:67:a9:ec:ee:16:f1:5b:52:
                    33:a9:ff:b3:f6:8a:d7:dd:98:59:b8:b2:ad:48:73:
                    a5:c8:db:16:98:cf:e4:b5:89:89:36:c4:68:31:88:
                    d9:05:6c:aa:80:61:0b:62:62:d1:cb:75:73:80:bf:
                    1e:db:bf:7d:45:dc:94:b0:77:04:a1:da:03:d4:ee:
                    34:30:6c:29:65:f5:79:5d:d3:2c:16:b2:7e:00:bd:
                    e0:78:17:21:5a:eb:1a:d1:8c:33:92:77:aa:c8:2f:
                    12:af:e1:63:d7:e0:d8:64:31:2c:6f:dc:39:28:c8:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AA:02:AF:21:CB:DB:11:9C:5C:DD:E8:9A:44:E5:B7:CC:28:0D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29de7728-9e77-3062-8920-19231862d472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:57:51:52:36:fe:68:8b:1e:ae:3b:c8:f0:cd:8e:5b:28:19:
         76:e7:5d:9c:ae:e8:2d:f3:e0:ca:82:cc:e5:41:00:b7:97:5f:
         3b:98:f3:9d:f1:86:90:60:47:6b:8d:00:5f:4f:49:05:68:76:
         ff:2b:b6:9a:25:55:1a:91:14:97:69:32:db:01:7a:05:17:84:
         7f:fb:73:78:e5:96:1b:54:14:90:d9:15:ed:35:2e:df:93:20:
         02:52:8c:5d:46:5d:07:a5:b3:57:83:3b:f3:b8:97:81:2a:cc:
         9f:c4:00:22:f3:51:7e:fc:57:ff:d3:8d:85:d7:49:f6:11:00:
         f9:67:a0:36:14:8d:ed:f0:6a:de:5e:e3:74:94:56:77:24:08:
         da:3d:a9:30:f7:66:75:12:fd:77:2e:7f:73:ee:e0:e8:fa:2c:
         21:64:1f:f4:14:8d:c2:9b:f0:f8:4a:2b:b5:00:90:c8:6e:bf:
         2e:8d:dc:fc:4b:59:66:5a:fb:fc:c3:7f:71:3a:cc:e3:f1:3d:
         00:ce:cd:9e:2e:d1:71:9a:e6:04:1e:88:f7:66:af:3c:e1:8f:
         9c:c0:ca:8c:a8:28:0a:21:77:c0:a8:89:37:fa:5c:f8:57:44:
         ac:4d:45:03:50:9c:e5:83:60:99:d7:08:34:11:30:0b:cd:c4:
         dd:73:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:48:46 2026 by rpki-client