Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa
File:                     47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa (raw, json)
Hash identifier:          +WMW1Av1Cb7W9Zg6SHvN19CVUainZmGlAbS1mC72qHA=
Subject key identifier:   C1:F9:57:26:D6:CE:E8:71:68:A6:5E:0E:FE:93:FD:34:BD:BF:87:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87DA47D467B036FDABB000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1017:b150::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:da:47:d4:67:b0:36:fd:ab:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=e092791a-13a7-4b46-a1fc-73d3dce50128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1b:c6:3c:90:14:2a:4e:79:15:98:4f:f2:c8:
                    08:38:6a:a2:0e:b7:1e:04:45:15:4b:3b:1f:76:0c:
                    4e:1c:42:7d:6d:a5:83:9b:ba:98:d8:0b:82:08:ba:
                    e0:de:0f:ff:12:c0:6a:d0:8a:29:e0:88:bf:d9:d9:
                    48:be:f3:ef:a2:c4:9d:6d:f9:c5:fb:67:a8:41:ec:
                    d3:16:3b:07:53:45:4e:e8:a4:da:ac:91:c3:1e:6f:
                    1e:1d:31:9f:aa:d5:c4:49:45:c4:8d:c6:ec:70:e1:
                    be:48:9a:7c:f5:37:e1:24:da:07:22:8b:53:ca:7e:
                    c0:46:86:84:f9:a5:37:fd:95:fb:14:bb:aa:cd:73:
                    69:a8:74:dd:57:e4:c5:4f:21:ab:80:c3:42:e6:d4:
                    9a:3e:2c:8d:dc:5d:2e:14:a7:7c:4f:e7:7f:72:2d:
                    d3:ff:33:51:4c:57:0b:92:d8:f7:5c:3c:f2:03:36:
                    e9:2c:e5:e5:dd:53:da:09:8b:7b:31:22:8e:7d:36:
                    86:aa:cc:62:c3:8f:ae:e6:f9:c7:32:cc:38:f2:74:
                    4c:e0:c5:b6:cf:fa:3a:b9:c2:37:59:c1:5c:78:b1:
                    43:d9:4a:57:84:a7:02:c5:7d:0e:0d:f2:14:37:e0:
                    35:83:12:3d:1c:6b:87:2d:f0:07:a2:41:ca:43:d4:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F9:57:26:D6:CE:E8:71:68:A6:5E:0E:FE:93:FD:34:BD:BF:87:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/47d57d9b-8dfb-322a-9391-61dbdb1ae483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b150::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3c:75:4f:cf:9e:f6:c9:31:6b:30:69:38:7b:aa:49:e3:0e:
         98:68:f7:69:de:16:a6:60:50:ad:82:36:1e:6a:eb:ce:5d:dc:
         af:a2:6c:2d:40:4c:35:0b:46:c2:8d:db:da:5b:4d:df:a0:76:
         68:69:8c:7e:c2:47:ed:f7:36:50:01:f5:47:b9:eb:fa:fe:83:
         8b:7a:eb:97:d7:9b:64:44:c9:2e:b9:43:29:3b:44:07:a2:80:
         df:ce:df:ad:be:5e:8e:ec:52:27:e3:bd:32:fb:60:1b:59:a8:
         7e:24:0d:1a:07:19:e9:98:01:59:93:5b:b0:3e:9b:da:ee:6e:
         e2:fd:61:60:b6:69:6a:e7:d8:b7:6e:b8:86:31:1d:30:9c:de:
         ec:94:55:4e:99:75:a4:6a:41:d1:b5:97:c3:21:7a:d8:50:5f:
         3d:50:e3:0f:33:57:39:2f:9d:ac:2c:8e:82:5d:ad:4a:61:d0:
         fa:da:2b:35:73:02:e9:cb:53:e9:74:62:f2:f0:89:30:5d:77:
         d5:14:9d:b4:6f:51:ef:1b:a0:da:fc:ec:84:5c:99:68:7a:8c:
         c8:85:b7:4b:33:8e:8e:29:e3:26:d9:ff:73:f9:5d:1b:b1:73:
         95:1d:9a:5c:19:06:d2:c1:42:b4:94:b6:15:17:42:29:c7:1f:
         13:d0:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:19:57 2026 by rpki-client