Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa
File:                     59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa (raw, json)
Hash identifier:          d+jfmZDRwdUBpc/UHDTs8X2Q89CUYSMlAQcKS+9p9QI=
Subject key identifier:   5E:82:83:1F:96:A5:61:C5:F8:36:7E:E4:2E:AD:D8:81:61:E3:1C:50
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD593902985B51B4E495B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1008:b060::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:59:39:02:98:5b:51:b4:e4:95:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=f041f1d8-754e-438e-bfbd-ca5a89ef518f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:2e:8a:bb:0a:b2:d3:a6:97:4a:be:59:4d:
                    86:ba:53:21:1b:6f:6a:c7:c3:5c:fb:49:d2:ca:36:
                    b3:e4:66:3e:c5:36:b4:1a:78:aa:6c:79:ab:c3:7e:
                    a4:d2:32:58:77:4f:31:1b:1f:0a:09:d8:d2:79:c7:
                    9d:f4:65:bf:3e:04:e4:fe:60:ea:77:00:84:41:60:
                    9c:fa:ef:78:d8:85:dd:9d:c9:96:7d:c7:59:64:b6:
                    f1:a6:ca:1c:a4:a5:e1:5e:ad:ed:38:32:cd:7c:2b:
                    1a:c3:53:65:57:33:9e:5b:41:ce:bb:23:a5:3b:e4:
                    0b:d4:92:ca:97:4e:3a:a7:ab:65:64:db:a4:0b:1d:
                    be:ad:25:15:59:67:22:1a:39:75:7f:c1:fe:1a:03:
                    ba:e9:4c:55:97:2a:23:69:f4:f8:a3:ab:61:61:b4:
                    eb:c9:92:7a:db:57:9c:1d:09:89:22:0d:e9:8d:7d:
                    08:54:46:a8:e1:e2:cb:77:36:51:40:36:d7:b6:42:
                    47:2b:51:93:69:a4:a0:5d:bc:ec:6b:27:38:27:49:
                    be:7f:97:34:84:fd:28:33:3b:c6:47:79:ea:fc:99:
                    cd:3b:cd:b0:43:42:f7:f2:a1:3c:d1:93:da:87:bf:
                    cd:07:0a:81:4c:7c:4f:e7:54:9a:65:51:47:fa:1d:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:82:83:1F:96:A5:61:C5:F8:36:7E:E4:2E:AD:D8:81:61:E3:1C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/59de7ba8-5933-3c6d-8ab6-d3fe110c28e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b060::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:1e:ba:4d:68:57:21:c7:ea:b8:30:90:b1:2a:a3:a6:f9:
         b4:7b:be:9d:70:59:61:a1:30:8b:fb:4e:47:ca:ef:aa:f7:66:
         4e:95:6d:0b:97:f9:bb:06:29:05:33:d7:32:23:cd:65:89:fa:
         28:30:2f:17:95:1a:ba:e8:28:59:57:2d:06:b2:e1:dc:d7:f9:
         53:66:57:86:c3:a2:e9:c2:42:88:4a:64:99:65:35:24:90:73:
         9b:fc:57:60:31:62:35:d5:a0:be:ae:30:0e:2f:c0:f2:ea:c8:
         8b:24:0f:b7:5f:54:fe:62:74:43:e2:b8:8e:6f:d1:ca:42:b0:
         a4:1d:b3:0c:2b:06:fc:b3:a4:18:49:f1:8b:20:67:66:c9:10:
         cf:99:12:97:84:c5:8a:0c:de:46:ca:32:9a:3f:b1:ca:21:83:
         57:95:34:06:19:52:05:15:8e:f8:db:4c:33:72:83:d2:d3:6b:
         77:ca:7e:37:a1:64:0c:e7:77:51:5f:77:d3:62:85:00:52:c3:
         28:fb:75:29:10:1f:4a:de:c2:75:19:9b:d9:58:22:8c:3f:91:
         02:d4:75:40:ee:fc:a5:d8:91:00:a4:7e:a7:9a:37:d0:71:e2:
         88:82:c8:0e:f0:58:dd:63:cb:35:ef:5c:10:a6:10:02:6b:e1:
         35:8a:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:20:50 2026 by rpki-client