Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dda30-845a-3129-b5da-6bddf2ab9520.roa
File:                     563dda30-845a-3129-b5da-6bddf2ab9520.roa (raw, json)
Hash identifier:          sfg6DBpJNRt8D3Fq0na9uAfwynTr1h1EfbanmyW7A6w=
Subject key identifier:   4D:18:69:A5:8D:40:BF:F8:B1:94:B6:1F:2D:55:F1:8D:B4:F6:26:34
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F498666BD3459351333B1D280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dda30-845a-3129-b5da-6bddf2ab9520.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        2600:100c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:66:bd:34:59:35:13:33:b1:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5917ff6b-62a2-46c1-afb7-f9b66f45d6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:27:83:34:a8:e7:5c:5a:4a:1c:87:41:60:
                    5b:8c:42:02:e9:8b:c4:32:d3:22:5c:95:b8:b0:c1:
                    e2:d9:b1:e8:40:9b:7d:42:95:d9:8c:01:ab:28:0c:
                    52:58:99:1a:f0:16:32:c4:5b:44:4d:9f:7b:62:d4:
                    c9:76:e3:4b:d3:36:b6:c5:f9:3a:1c:81:81:65:b4:
                    b4:55:db:0e:14:75:e0:24:71:6b:6c:5d:81:08:c7:
                    f1:5a:c3:77:cd:cc:dc:87:ca:bc:dd:7e:99:a1:41:
                    36:cd:b2:2b:60:0a:ec:5f:50:12:06:d4:23:1d:bb:
                    c3:f6:cb:98:e5:f4:88:47:7d:6c:47:5d:c4:28:97:
                    40:9a:ba:56:a9:86:13:d7:db:08:72:0b:6a:12:58:
                    e9:1e:af:bd:1e:cc:eb:95:92:ac:b1:27:da:56:49:
                    0c:41:de:d2:9f:39:34:77:61:56:34:93:37:24:8a:
                    c9:b9:53:57:ec:9e:e4:49:df:71:98:56:56:48:67:
                    58:41:51:56:81:26:55:25:b0:e0:a4:3a:92:6a:83:
                    59:0d:4d:03:b6:4b:90:3c:ea:24:2c:13:48:20:ec:
                    b5:8f:90:96:0d:15:41:a7:c2:1f:26:47:13:46:21:
                    bf:b4:90:4f:8a:9d:0d:c7:d5:8b:1d:eb:85:2e:55:
                    89:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:18:69:A5:8D:40:BF:F8:B1:94:B6:1F:2D:55:F1:8D:B4:F6:26:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/563dda30-845a-3129-b5da-6bddf2ab9520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:9b:20:f7:f7:c7:a5:27:cc:fa:fa:e8:ac:ce:4f:96:8b:cd:
         d6:c8:24:88:f8:ae:c4:20:01:45:3c:aa:ac:07:ce:13:a8:4e:
         d6:d4:4f:c4:fa:25:b8:44:f1:81:83:68:01:a9:ec:99:2c:8b:
         30:cd:f1:59:15:f8:62:bc:32:ba:09:9e:9b:61:a3:22:82:2c:
         52:5b:9f:b5:22:48:ac:07:3a:fd:cc:2d:74:68:92:4d:a6:fc:
         af:58:bf:de:a3:93:80:be:83:22:64:43:aa:71:11:50:01:2c:
         c8:c1:cc:4d:14:8b:22:15:e2:3b:fa:8d:94:bf:d7:7d:d0:bd:
         60:17:ff:c9:a4:da:14:ab:d3:f0:c8:c5:78:25:10:bf:7f:b9:
         a9:c9:7b:3c:b7:a5:3f:98:12:29:a1:91:c3:ba:82:18:da:fa:
         78:4c:42:55:c6:ee:a1:78:6c:34:aa:e5:d2:70:55:8e:c8:36:
         50:25:78:75:68:1c:00:a7:28:9a:f7:19:c0:be:17:2d:20:12:
         f7:c0:6a:e3:5c:7f:78:fa:af:52:a5:09:f6:a7:c4:ba:6f:68:
         47:b7:0c:1e:34:d6:eb:76:7e:77:57:0e:b0:41:f8:3c:5f:8f:
         4b:91:15:a4:d3:5d:ec:e2:bc:b5:ae:be:15:62:94:b5:a4:ec:
         fb:52:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:11:55 2026 by rpki-client