Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68dc33d1-dbc7-3df5-aa1d-d56a39305ecf.roa
File:                     68dc33d1-dbc7-3df5-aa1d-d56a39305ecf.roa (raw, json)
Hash identifier:          gUgtQTmSdNWayhf2IhslmLDZV0w/KY0KsuvvdhhgFcI=
Subject key identifier:   03:B5:D2:19:18:EA:3C:EC:18:CD:4A:E1:C1:0B:5D:CF:A7:9B:27:F9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F15CD08210B4B86FEE22DF3D4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68dc33d1-dbc7-3df5-aa1d-d56a39305ecf.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1005:a128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:08:21:0b:4b:86:fe:e2:2d:f3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=a3ebdee7-ab5d-4f20-ac10-06ba53efd158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:39:75:c5:31:89:e9:44:83:95:27:35:7f:
                    e2:46:16:e1:a5:bc:87:eb:ef:64:ce:ba:98:d2:e3:
                    95:70:a4:ec:4d:4d:74:f6:a4:02:b8:9f:c9:9a:d3:
                    d3:f2:d0:a2:da:ef:09:26:d8:e1:48:0c:5b:75:69:
                    58:47:4d:a5:b4:7c:4a:e3:0e:42:d7:57:7a:fa:78:
                    3c:84:50:f7:7e:9b:1a:dc:e5:a6:23:95:77:a0:b7:
                    f4:1b:db:1d:d2:de:82:dd:30:2f:cd:e5:9c:d9:8f:
                    9c:a3:81:04:02:ad:75:e2:0d:2f:b5:bc:84:05:70:
                    d3:bc:23:49:74:88:60:23:3a:fa:86:03:26:15:ba:
                    11:61:bc:ca:87:45:dc:71:2a:5a:a9:59:86:77:fd:
                    7c:bd:09:c2:00:f9:5f:81:0e:cb:1a:9e:d8:50:4e:
                    e5:2c:7b:0d:d3:69:67:c1:84:64:92:b4:9a:2f:7e:
                    c9:ac:0c:12:93:cf:d2:1d:af:44:4f:fd:58:78:d9:
                    8b:78:68:3e:ac:bb:a2:38:fd:e4:e1:a8:5d:b2:04:
                    16:9d:11:5d:9c:89:79:80:49:29:72:60:21:4a:99:
                    64:90:74:90:97:67:87:ba:5a:9d:89:9b:42:6d:c4:
                    a9:67:79:96:77:b3:4c:86:09:de:e8:48:be:f0:65:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B5:D2:19:18:EA:3C:EC:18:CD:4A:E1:C1:0B:5D:CF:A7:9B:27:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68dc33d1-dbc7-3df5-aa1d-d56a39305ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a128::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:47:fa:9a:a9:01:d6:8f:cb:a9:42:da:5b:50:e2:d0:91:
         39:1e:12:8d:3e:54:04:cd:49:93:b9:84:02:9b:61:f9:fa:cb:
         cd:d3:36:57:55:09:45:d7:57:08:9a:a3:70:b3:72:fd:d5:87:
         24:99:98:27:ee:60:39:af:14:41:46:41:c8:15:88:4e:c4:8c:
         a4:7a:03:5c:ec:76:47:a2:90:45:44:8d:c8:ac:7a:88:4e:5a:
         7a:e7:4e:9f:79:36:55:04:13:93:b1:10:ab:ca:86:f8:0b:26:
         bc:55:e0:3f:cd:d6:39:19:7a:e3:8b:70:c3:13:e8:01:0a:25:
         c5:c6:1e:3e:5b:c8:f4:54:f4:dd:21:e6:2a:f0:bd:b8:3c:4d:
         82:3f:ed:1a:05:20:c7:62:2d:3b:20:b0:35:38:13:c4:b6:c0:
         d2:ef:01:8b:38:06:3d:91:79:87:6c:9e:aa:8b:de:65:a8:50:
         94:40:8e:c1:45:25:79:64:6d:5e:0b:6c:ec:5d:67:57:06:cd:
         88:6c:db:b5:20:47:64:a1:42:3b:79:a7:b1:23:8c:84:7d:59:
         38:ca:f4:e9:d3:5c:7a:81:e9:e4:16:0e:f8:01:e5:aa:1b:41:
         c9:1f:82:be:82:52:25:81:03:89:ea:11:aa:0e:f2:0c:ae:67:
         cb:ae:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:23:24 2026 by rpki-client