Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34983a01-ff69-3d9e-be38-6ff42dfe9ee2.roa
File:                     34983a01-ff69-3d9e-be38-6ff42dfe9ee2.roa (raw, json)
Hash identifier:          5BH03A++pMHxA/uveCgPbOSFgpa2dS0P0GZL5xU5Lg0=
Subject key identifier:   25:33:78:0D:8A:8A:A8:FB:0C:27:19:46:89:B8:BD:14:5A:38:FD:EA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F2E8B7B2AEC7D4F9C8940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34983a01-ff69-3d9e-be38-6ff42dfe9ee2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100e:be14::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:2e:8b:7b:2a:ec:7d:4f:9c:89:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=69169c48-7980-4482-bc76-4be7d0c2c57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9b:b3:55:80:7b:d9:93:d9:a9:37:03:5e:3b:
                    e9:f9:f4:22:ed:38:77:05:4d:a2:5a:5c:85:0c:21:
                    6a:d8:fd:5a:00:d5:63:67:e0:cd:e1:7a:e7:4a:d0:
                    ed:a4:71:d3:de:06:be:64:50:e3:95:65:43:b5:ce:
                    fd:1e:1c:9b:8d:71:ef:b4:d6:12:64:af:09:82:5e:
                    47:66:02:3a:10:17:51:18:f7:28:eb:e4:75:d4:dd:
                    6a:60:62:7a:70:59:a7:63:e6:cb:c5:05:fa:37:85:
                    77:69:94:2a:24:ff:5c:27:91:74:fb:d3:92:0e:32:
                    88:77:38:33:3a:17:34:43:0c:97:03:ed:c6:a0:e4:
                    f0:b9:79:c3:d5:1f:8b:e4:46:54:bc:e2:69:73:3e:
                    83:dd:c6:91:07:31:c7:a5:01:fa:a5:a4:56:28:e2:
                    a5:59:56:94:85:3c:7d:56:d9:16:86:7b:32:86:4f:
                    44:b7:fe:77:c4:71:ea:b3:45:ae:75:9c:be:0b:04:
                    a2:7b:1a:e8:8a:96:70:c1:8d:d2:ca:fa:3c:df:ea:
                    f1:57:84:05:f0:4d:84:a6:bc:3a:d4:18:ef:93:75:
                    6f:71:7d:ff:d8:8e:ac:63:8b:99:41:c2:69:92:16:
                    d1:8b:85:49:58:e0:17:38:05:45:62:23:a0:6a:2a:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:33:78:0D:8A:8A:A8:FB:0C:27:19:46:89:B8:BD:14:5A:38:FD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34983a01-ff69-3d9e-be38-6ff42dfe9ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:be14::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c2:98:a5:88:e4:35:ee:06:a7:c0:1f:92:8c:60:05:d6:06:
         1d:0b:4c:0d:1d:5d:ce:6f:d9:3b:f0:6f:2b:1d:1f:ff:6d:e3:
         d0:5f:74:bc:26:4b:39:96:e2:14:1f:b2:cf:d5:d7:7b:ae:09:
         fe:fe:2f:1b:c1:94:19:b9:55:15:56:89:b3:f6:0e:61:ae:23:
         a0:9e:4a:55:fa:25:90:1e:a9:34:8a:e6:68:f9:e5:11:6f:d4:
         9a:4d:09:1c:fa:5a:fc:00:6e:91:be:fb:54:e7:3c:15:78:7e:
         34:38:aa:e3:8d:30:7d:0d:a9:ce:fa:c4:62:b9:11:ee:bc:f1:
         f0:04:c2:db:af:4d:46:e6:61:87:1b:6a:66:0e:69:4e:26:eb:
         5d:61:dd:b2:a8:2d:7e:88:13:fb:f8:4a:3f:54:ec:1e:3f:14:
         97:8c:4b:8e:e2:7e:2b:c3:88:63:93:6c:5a:1b:27:d8:db:83:
         02:a7:9f:3e:28:7a:ea:9a:9f:f2:c1:6a:fc:f3:12:0c:37:68:
         9b:32:65:38:8e:74:97:76:c7:a3:df:1d:11:29:b5:e0:10:4d:
         74:f1:1d:bf:49:f5:ed:38:e6:c7:dc:0d:f8:a1:b7:b8:01:22:
         7d:95:6d:74:10:12:44:dc:fe:f8:cf:11:45:a7:8a:35:00:a8:
         3e:0d:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:20:19 2026 by rpki-client