Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5018b5e8-172f-3aa3-b8d3-a3805b837a18.roa
File:                     5018b5e8-172f-3aa3-b8d3-a3805b837a18.roa (raw, json)
Hash identifier:          XB8a3oT9JA6kIxs+1BzvOnOKAKgbIRNHctQkiSsEA2I=
Subject key identifier:   55:64:A1:17:3F:A6:51:32:45:01:15:C4:91:B4:9E:8D:42:85:DA:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD53C5A5192D9538DBFA10
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5018b5e8-172f-3aa3-b8d3-a3805b837a18.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1006:a021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:53:c5:a5:19:2d:95:38:db:fa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=1cc914dd-efc3-4335-86a7-dc632ef51d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b2:57:ea:79:3c:9f:61:6a:60:26:74:f2:a4:
                    34:74:e9:ae:96:b3:ae:ff:8d:a2:63:f2:ec:10:a3:
                    5a:91:af:f3:52:78:87:00:b8:8f:40:e7:50:69:87:
                    49:6a:01:a4:7f:63:d4:b6:2a:39:4a:78:ea:ed:ea:
                    44:fd:98:36:29:a3:09:af:5a:55:5c:eb:81:91:d5:
                    a8:ca:7c:b6:67:9b:60:8d:eb:d4:03:3f:dd:88:5d:
                    53:25:bf:b1:1f:bf:6f:05:07:e0:6a:d8:b5:37:3c:
                    71:92:1f:a2:8d:06:1b:7e:63:df:d1:1f:ce:38:a0:
                    1f:af:eb:a0:81:24:0b:e5:14:5c:b6:2a:7c:55:bd:
                    a6:81:92:16:1f:8e:e3:1a:48:1b:cb:21:39:62:12:
                    6a:62:25:36:c6:34:dd:12:1e:b6:d8:de:21:ed:dc:
                    19:f7:d9:de:5e:fe:84:c1:85:e4:83:38:38:80:85:
                    79:a9:85:7a:d8:80:bf:50:5a:68:32:a0:fd:57:b7:
                    2a:c5:ac:46:78:99:40:db:24:0a:6a:bf:52:e4:d6:
                    11:87:8b:5b:a3:e1:a1:91:59:0b:bc:c0:91:29:97:
                    08:25:01:f6:7a:7b:c5:2a:39:a7:6a:c6:f8:c6:f6:
                    94:de:81:dc:43:e4:e4:cb:08:0b:49:a1:12:56:50:
                    a0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:64:A1:17:3F:A6:51:32:45:01:15:C4:91:B4:9E:8D:42:85:DA:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5018b5e8-172f-3aa3-b8d3-a3805b837a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fa:01:27:dd:84:50:0e:c7:b0:35:33:f2:2d:12:33:d7:d7:
         0c:50:22:44:e9:c3:e1:48:b6:66:19:17:a0:47:53:4f:f2:f7:
         a8:28:78:ea:07:a4:b7:83:23:39:1f:8d:7d:b2:e0:7a:56:07:
         62:7d:ed:6b:3d:87:c9:3c:67:b1:4f:67:9b:0d:ca:ff:36:35:
         03:e3:07:d6:85:ae:df:c0:26:f3:10:ca:ec:12:22:cc:59:47:
         b5:e4:d7:ef:26:fc:88:1d:d3:34:02:88:d1:5e:c7:67:4e:05:
         03:3b:d4:01:ca:a2:43:1b:7a:c5:4b:ef:ba:c2:fe:11:5f:b3:
         ac:7f:c0:8f:d0:e5:1e:5b:7c:c3:c2:c3:03:43:32:ac:39:67:
         fa:b1:c1:49:1f:54:2f:92:84:f5:25:a0:a8:43:c7:0b:d4:bb:
         49:34:e7:9e:ea:8a:ab:21:b4:f2:77:75:af:55:68:0a:4a:b5:
         ac:da:91:12:46:1d:d0:75:a7:90:f6:31:d2:ef:f5:ec:63:0c:
         fb:b2:ec:b1:30:4f:70:63:51:c7:55:20:fc:02:fd:bc:c5:07:
         69:08:39:d8:83:d7:ca:03:17:37:eb:cd:19:46:a5:19:4e:6d:
         91:7d:09:76:41:bf:a4:3b:50:46:87:a9:f3:b8:ed:49:1e:3d:
         39:77:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:07:12 2026 by rpki-client