Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3621aa37-6fe0-31e8-9213-7d53a0191b9e.roa
File:                     3621aa37-6fe0-31e8-9213-7d53a0191b9e.roa (raw, json)
Hash identifier:          d1Beh7JVqU0Cy+XX6cw00Bv3+LgXe0WmPOt0VHD2xVk=
Subject key identifier:   32:6C:97:93:62:64:0C:13:93:4E:35:1F:27:20:97:5E:15:7D:A6:BD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD55AF2B732CB45A777F40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3621aa37-6fe0-31e8-9213-7d53a0191b9e.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1006:b1d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:55:af:2b:73:2c:b4:5a:77:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=ca5506cf-4619-49ea-8278-392c3a819977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:55:28:82:60:91:a9:98:34:7e:de:b6:11:
                    4a:3d:70:d9:95:34:3b:12:fa:90:91:74:bb:d6:1e:
                    1d:fe:ea:0d:b8:e4:72:8a:60:ad:66:ac:04:98:12:
                    23:39:e1:41:f5:f4:fc:e7:f2:ef:c5:33:71:7f:0b:
                    6e:45:99:c7:3d:1d:ac:e7:e2:0d:65:cf:a0:5c:52:
                    54:25:4d:fc:cc:7f:6f:69:f6:f4:d5:c8:9e:bb:6b:
                    15:b3:00:8e:36:d9:9d:e6:33:67:14:79:88:23:89:
                    20:27:d0:43:6a:f7:03:37:55:d1:b1:5c:51:77:24:
                    61:f2:b7:b2:56:d6:75:ba:9c:2a:a2:0a:07:9f:03:
                    6b:e1:4e:8f:09:ed:41:f9:00:d3:00:f9:b4:fd:25:
                    4a:6b:c7:fd:3d:08:81:7f:19:68:11:33:ba:0a:22:
                    9d:c3:c2:d9:60:1c:89:03:e9:a9:cd:4e:7c:f1:fd:
                    da:f3:19:d4:d5:95:f5:d4:70:5a:2f:28:38:a2:31:
                    17:3d:7f:28:d7:0d:e1:9d:22:88:ff:f5:2a:42:19:
                    9d:e0:dd:66:3d:67:04:48:33:5d:ac:48:cb:c8:dd:
                    cf:5d:b4:55:95:d6:0f:ec:b8:8c:77:c8:c0:20:34:
                    81:67:75:c6:63:ce:50:f7:3e:de:c4:9b:bc:05:b1:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6C:97:93:62:64:0C:13:93:4E:35:1F:27:20:97:5E:15:7D:A6:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3621aa37-6fe0-31e8-9213-7d53a0191b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5b:a5:67:86:f9:c3:3c:d6:5e:68:ce:47:5d:34:d9:c3:cc:
         14:53:b2:e4:42:1f:2e:a3:a1:9b:af:f7:2e:9e:94:89:b3:48:
         59:4d:3b:12:85:16:a9:20:a5:e0:16:36:0e:13:69:52:a3:43:
         55:79:94:fa:75:f0:a6:e6:ed:f5:c9:a4:4c:db:ad:8b:02:0c:
         e2:6f:01:53:bb:88:1e:c5:4e:9c:d6:e1:18:90:c0:5c:27:28:
         9b:e0:df:a5:3e:73:9c:81:f5:e2:98:0b:5f:33:87:d2:04:b3:
         d9:74:9e:5b:cf:32:f3:32:20:4f:46:a8:3b:b8:6c:62:6c:c0:
         38:3f:82:16:79:fb:7e:b0:ba:4c:92:82:33:c8:12:99:bf:a9:
         e1:fc:b9:d3:67:34:ef:51:02:0f:8f:73:35:29:66:a6:58:be:
         ba:e5:72:88:d0:06:02:5c:7a:b6:f4:d0:d8:a8:94:8a:41:4b:
         7b:b0:6c:f8:9f:ba:94:64:bf:14:41:66:2d:23:d0:6e:2e:65:
         e0:a7:7f:bc:d3:c2:d0:44:8d:aa:eb:59:4f:2f:d1:47:00:d7:
         1e:17:40:d4:e3:45:0e:6d:b7:99:69:b9:8f:a1:2d:d7:0b:a4:
         2e:a6:43:a0:43:bc:c3:a0:fa:0c:4e:d3:7e:68:c8:cc:7c:c6:
         10:fd:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:56:52 2026 by rpki-client