Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33eb50af-73cd-3d90-97d8-6fc6faabb781.roa
File:                     33eb50af-73cd-3d90-97d8-6fc6faabb781.roa (raw, json)
Hash identifier:          vH/GYfuS3+5vix+QFFeFwjq0/qtix8fYjYg98BXWIU4=
Subject key identifier:   93:24:DE:4F:DB:88:AB:AB:5B:F5:EE:84:09:27:98:7F:7F:BA:2D:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4986F8648E99D0A457986200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33eb50af-73cd-3d90-97d8-6fc6faabb781.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:a124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:f8:64:8e:99:d0:a4:57:98:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2457ad3e-33b8-4052-bb27-41ee0664b9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7e:79:65:bb:9f:a7:6e:89:26:96:89:fe:06:
                    93:65:54:19:3e:78:c7:c9:f5:6d:6f:d6:b3:f2:fe:
                    a5:56:cc:76:9d:48:b4:ec:c5:02:b2:c4:9e:c1:b5:
                    95:34:e9:76:b8:dd:ef:c8:e4:2e:dd:53:b4:5a:28:
                    bb:ea:25:66:1f:84:97:45:67:69:71:b4:25:20:b8:
                    52:8f:b6:8e:8e:4b:31:13:ee:f0:22:e4:db:cd:13:
                    27:90:4f:28:42:ec:0d:fd:60:77:70:5b:ef:59:3f:
                    4c:82:e6:84:a0:05:d0:a1:40:eb:6d:1e:68:77:61:
                    1d:a1:e8:5e:4a:b0:ac:04:9e:fd:96:09:f4:5e:46:
                    38:e6:0b:84:8a:1b:97:2d:cf:b6:0e:78:75:5f:65:
                    a1:7f:0a:8c:99:d6:f2:fe:2a:5b:93:4a:4f:5c:2e:
                    e2:80:f8:a1:57:41:74:61:06:07:ff:19:3c:bd:e0:
                    b8:21:b7:4a:26:ba:82:04:f8:c2:9a:31:69:f0:3b:
                    6c:49:61:6a:1a:de:9d:f1:cb:e3:9f:99:64:86:a2:
                    ac:bc:0b:e7:f9:c8:6d:e0:eb:55:40:df:d7:30:30:
                    23:9b:e2:2f:b2:b9:b2:12:fa:10:ce:d4:7d:27:67:
                    e6:7c:aa:0b:b3:34:e6:56:65:05:39:4d:4b:61:fb:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:24:DE:4F:DB:88:AB:AB:5B:F5:EE:84:09:27:98:7F:7F:BA:2D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33eb50af-73cd-3d90-97d8-6fc6faabb781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d0:9a:a7:3a:2d:8a:bf:ab:1d:21:1d:35:7b:1f:6a:36:b8:
         02:bf:41:71:87:79:c3:23:77:1c:f8:98:7c:b9:06:3c:c2:51:
         8c:a3:85:2d:04:0f:af:52:54:a5:44:dc:0a:62:ba:e0:24:38:
         9c:89:d9:51:43:d2:f0:86:52:0e:1c:50:4a:f1:46:3f:62:e4:
         2d:a7:3d:73:87:58:b6:3b:d1:48:ed:c4:37:44:72:7b:f3:3b:
         1c:e6:a8:92:72:83:25:65:2a:f0:54:18:de:37:95:6f:d4:07:
         bd:6b:bf:c1:58:e0:a9:4c:a1:aa:4a:97:7c:cb:d8:28:56:b8:
         25:5f:27:49:36:06:93:55:76:3d:4b:24:76:1c:96:51:34:5a:
         06:08:c7:37:15:d2:3e:a3:bc:b8:b8:cd:f4:5f:10:5c:33:37:
         50:8f:25:9e:57:80:12:97:93:0a:ff:b2:e2:d5:a5:ad:fc:95:
         03:39:9f:57:7b:3e:0c:36:57:1e:05:b9:d8:6f:0c:94:a4:af:
         a9:ba:be:54:73:c9:e3:84:34:45:63:40:d2:7f:c8:0c:f6:d6:
         89:8f:4e:49:8f:69:20:80:fc:86:d4:c9:53:0b:f8:8d:c1:a1:
         f2:e7:7c:4c:73:0f:68:10:f8:a4:31:12:7d:4f:3e:52:bd:26:
         31:cc:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 20:59:17 2026 by rpki-client