Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e538c15-bbc9-3483-95a3-eaca0df99f43.roa
File:                     3e538c15-bbc9-3483-95a3-eaca0df99f43.roa (raw, json)
Hash identifier:          ItOcxBI3QyLkvZcuRjjtoEF+7h4qWsfSPrmpfOZr/QQ=
Subject key identifier:   6C:3D:0F:58:17:5E:28:80:C4:DB:FA:30:2F:64:9D:FF:F5:C8:A8:98
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49865B771128F9F1C3099580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e538c15-bbc9-3483-95a3-eaca0df99f43.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:a221::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:5b:77:11:28:f9:f1:c3:09:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b8d56ee4-a2bf-49b1-aff7-f8eeb15fbbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:2b:39:0c:f1:96:04:c3:e0:16:a2:67:28:
                    23:29:2e:ff:d0:39:07:ab:df:38:04:a3:17:b9:68:
                    ff:38:40:0b:75:b0:14:a2:c0:78:a5:6a:da:5e:65:
                    38:b1:08:86:e9:be:5a:40:df:3d:dd:ff:f5:b6:ae:
                    c1:5c:29:da:52:54:12:7b:ff:37:58:39:c4:af:ca:
                    4b:21:fe:44:ec:7b:3d:96:0e:97:a5:06:79:5a:5c:
                    8d:d2:f9:62:68:90:d7:86:60:ac:66:b1:7f:67:9b:
                    42:fd:d3:3b:98:88:f6:21:b2:a1:6a:6c:fa:0d:91:
                    d6:ce:3f:4e:ff:ab:bd:32:c0:6a:d4:7a:bf:90:22:
                    81:c1:9b:2f:5e:80:e6:19:ac:f8:72:e7:f2:a2:5f:
                    eb:1b:82:73:9c:ca:42:7b:85:79:a9:05:47:b2:9d:
                    cd:43:53:11:8b:1f:43:25:7b:7e:a0:94:56:97:aa:
                    f7:5b:c6:e2:b7:3e:46:43:0f:f6:0b:47:5c:e4:1b:
                    f9:48:34:67:20:a3:88:9e:3f:c0:3f:ff:d1:08:5b:
                    56:98:aa:19:b0:2e:50:c1:88:62:b5:e8:26:55:b7:
                    24:c4:5f:63:b0:3a:89:8b:24:64:33:5d:99:c6:c7:
                    03:ac:ae:95:0f:d5:5c:4e:ad:83:52:e0:61:3a:89:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3D:0F:58:17:5E:28:80:C4:DB:FA:30:2F:64:9D:FF:F5:C8:A8:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e538c15-bbc9-3483-95a3-eaca0df99f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:a221::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a4:85:2b:71:07:b8:ef:c1:3b:c0:7a:43:c7:70:2f:6e:b0:
         1d:44:a5:6a:da:8f:f2:1e:46:d7:e0:9c:55:11:d9:fe:2d:50:
         28:e1:5e:86:00:0c:10:33:51:c4:11:54:aa:3c:dc:d5:2c:ee:
         17:93:61:02:c4:83:f3:0a:00:6f:19:c4:8a:f8:9b:34:c3:ce:
         5c:29:57:29:07:21:bc:f8:99:9b:80:52:37:33:a8:3c:2e:3a:
         9a:af:ee:db:34:cf:68:87:fb:85:1a:10:07:b1:0d:bd:06:a7:
         c6:95:85:2e:02:53:d2:d4:1e:a0:fe:5c:53:26:72:73:04:cd:
         09:ff:de:92:e5:4b:03:79:63:e9:a2:ca:05:fc:30:99:a9:22:
         d7:2e:8e:f6:40:cc:cf:93:cd:00:f0:07:5b:61:cd:94:c2:e4:
         29:85:a3:27:5d:9a:77:a6:86:bd:f0:b4:d8:11:7c:ab:51:50:
         23:ef:d5:6b:ed:71:2b:1e:f7:f5:78:33:8e:b4:52:ba:c3:03:
         bf:29:f7:76:b6:b8:58:90:15:dc:c6:d5:d1:81:3e:96:98:96:
         6e:c5:63:e7:5c:4e:67:ca:dc:ec:36:c8:6f:4d:c0:bc:6e:60:
         07:16:de:72:c3:20:23:94:33:f8:95:36:73:23:46:36:7b:ea:
         48:aa:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:42:17 2026 by rpki-client