Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60984520-96fe-3ee4-b325-3e7fb5978417.roa
File:                     60984520-96fe-3ee4-b325-3e7fb5978417.roa (raw, json)
Hash identifier:          m5H1t8280hT+zhCTzjRsL56W0N8T801sClPNaT6Whz0=
Subject key identifier:   BC:5C:A9:52:D0:51:D2:D3:DD:5A:7D:10:43:38:13:09:6E:0B:7E:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F498663F19D9B17D41DD4B400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60984520-96fe-3ee4-b325-3e7fb5978417.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:b040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:63:f1:9d:9b:17:d4:1d:d4:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=04a49f71-5606-4320-ba0a-035fc53648df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:c8:0c:93:41:f8:a2:dc:f4:92:96:bf:44:
                    fa:1f:52:67:6e:4d:b9:85:9a:78:6c:28:50:89:fd:
                    cc:99:8d:27:18:7c:14:72:a6:75:bb:c4:e8:cf:0d:
                    47:8b:51:f5:b6:6f:87:79:e8:38:52:21:ad:66:38:
                    83:05:13:4f:1e:ae:b9:06:30:0b:b4:57:b2:37:c7:
                    f5:e4:76:5a:f3:b1:ee:cb:f9:06:4e:e4:13:7c:f6:
                    fa:10:02:72:75:d7:2c:3e:9b:94:c3:33:c5:f5:3e:
                    62:46:54:71:6c:21:e0:3b:58:2d:88:bc:d0:e6:9e:
                    db:a7:80:33:f1:33:9f:b8:c4:03:85:8d:09:e3:00:
                    35:90:cf:4c:c1:28:a6:fd:e1:c6:6a:ee:50:1e:67:
                    0b:06:eb:45:ca:ad:bb:72:a1:62:3b:d0:68:07:32:
                    f0:1f:e8:01:10:2f:99:82:5e:2f:4e:2c:f0:7f:06:
                    2b:fa:1c:7b:c9:f3:fc:54:ab:15:c3:13:b7:5d:21:
                    48:dd:bf:69:07:63:68:fb:aa:fb:31:dd:4e:99:9b:
                    11:d9:1e:06:67:ff:74:a1:4c:21:89:3c:97:a0:75:
                    a1:ed:6e:6c:12:62:64:53:71:85:a8:9d:b2:9d:6c:
                    ef:f1:19:29:a8:d5:fa:4e:f7:ec:af:7f:53:63:88:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5C:A9:52:D0:51:D2:D3:DD:5A:7D:10:43:38:13:09:6E:0B:7E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60984520-96fe-3ee4-b325-3e7fb5978417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:36:91:e2:fc:f0:41:07:ae:a4:4b:05:4f:5d:7c:04:c0:09:
         b0:24:2a:f0:b4:eb:09:aa:b1:97:35:8b:eb:9d:e3:cf:ee:08:
         3c:e8:a1:fe:75:7c:a3:c6:e1:93:22:3f:b8:db:b6:96:0c:7d:
         55:33:3e:2e:35:a9:5a:e2:88:53:5e:b1:b7:70:e1:bf:85:c6:
         49:f0:b0:82:18:4e:e0:15:ce:83:d1:c2:16:21:5a:77:37:fa:
         e3:a5:e6:86:99:44:da:3c:a4:22:b7:48:75:c7:5f:d1:b5:ad:
         e3:91:a2:0f:53:ee:0e:f5:6f:2f:f1:6d:51:26:1c:b5:eb:29:
         79:9e:b4:6d:70:8f:26:3e:f3:ac:76:f1:6b:41:95:6f:26:d6:
         88:f2:0f:53:1a:e2:d3:2b:74:19:25:a8:6b:b1:86:59:71:c2:
         b1:94:bb:4e:3b:87:4e:af:4a:4d:5e:03:d3:fa:58:de:10:af:
         da:93:e2:a2:0e:c1:3e:eb:96:94:8b:73:80:55:97:a7:dd:e3:
         3c:2e:c8:cb:fe:e4:b0:5f:3e:b7:20:44:e2:7b:d6:70:ed:17:
         15:50:0f:1f:8d:c8:78:f1:82:34:20:92:21:67:c6:74:36:54:
         62:58:97:df:05:3d:7d:74:48:af:d4:c0:be:4c:38:48:62:1b:
         2c:ff:ce:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:19:13 2026 by rpki-client