Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa
File:                     6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa (raw, json)
Hash identifier:          fhFXwxv9b4bcU/eP3r2USfVz6LtfhtJXcQRPsmksMi8=
Subject key identifier:   0C:8E:58:44:57:E2:D0:44:C3:65:D8:C2:83:E3:49:6E:4A:3F:D0:E1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F4986531F2E98A394F3103B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1009:b1c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:53:1f:2e:98:a3:94:f3:10:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=973abd94-8df3-42be-809b-7f431933b2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:85:f5:cb:d7:0c:81:de:f1:00:27:0b:4f:1b:
                    21:a5:c8:a9:86:26:2c:a9:1d:c3:6a:1f:50:a6:cf:
                    54:e2:06:c9:6c:60:35:ae:e3:00:e6:4c:9d:a6:fb:
                    e7:c9:a5:8a:05:52:0d:76:1c:85:2a:8a:d9:09:eb:
                    bb:51:04:71:54:cf:e5:c8:44:99:16:07:ea:7a:54:
                    4a:d7:5b:47:58:cf:60:cc:74:49:12:24:43:68:4c:
                    2c:65:bd:65:cf:6b:c0:69:04:ee:b9:eb:c4:c4:4d:
                    dc:74:78:0b:38:76:e1:ee:23:f4:a9:6c:ab:72:0f:
                    6f:06:b0:51:85:40:b4:80:d8:bd:aa:91:96:67:41:
                    76:51:3b:a9:a5:b5:bd:c0:62:c1:a5:1d:a9:04:9c:
                    4d:0d:13:00:d6:3b:cf:c6:33:43:b6:fd:bc:ad:80:
                    0c:fe:e5:2c:c9:6e:1c:20:1f:00:61:5b:e5:94:90:
                    86:47:0d:ea:f0:42:95:1d:02:dd:f6:7a:58:26:6a:
                    fb:55:b6:4c:87:73:91:44:18:0b:7c:a9:f6:58:93:
                    e9:24:fa:76:eb:39:a0:b5:a4:fd:d2:fc:15:18:f2:
                    5d:64:82:ed:f0:64:0f:a8:4b:36:e6:57:34:39:79:
                    1c:92:99:d1:21:3e:48:21:d6:f7:94:57:6b:f8:28:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8E:58:44:57:E2:D0:44:C3:65:D8:C2:83:E3:49:6E:4A:3F:D0:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f1c4446-cdba-3d33-947f-8e14b8d9b003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b1c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:11:be:59:ab:d9:9e:cf:0c:73:fe:bc:ac:50:08:04:25:a6:
         b0:bd:c7:fb:02:13:d0:e5:5b:f4:35:e6:84:5f:1d:23:4e:06:
         2b:e0:ff:58:67:11:f6:24:f4:f7:08:97:22:53:3a:40:43:ec:
         1f:da:c4:af:fc:6a:82:c8:14:0c:bc:b9:a6:46:b9:9f:fd:09:
         99:70:d2:ca:c0:6d:89:17:8e:dd:5d:e1:8e:88:ff:ff:fb:56:
         37:31:ef:fa:53:fc:56:09:ea:09:57:e0:2a:e8:9d:46:b7:3e:
         1f:34:80:a1:89:d1:0e:93:a7:4c:64:67:7d:4e:49:40:e3:56:
         e7:f6:8a:85:34:4b:15:43:0a:64:0b:54:14:1b:aa:d1:9b:53:
         1e:0b:90:ec:68:f8:de:69:d3:05:a0:a1:ae:58:62:ee:33:36:
         84:7b:df:ba:65:8e:29:3a:ed:2d:1b:f6:19:8b:00:29:68:08:
         e3:d1:f1:86:a0:59:56:15:bd:fc:9e:09:79:d8:b6:1a:98:85:
         3e:10:9a:c3:cc:ea:7c:84:b8:43:cc:69:43:8a:0a:e6:6f:1c:
         68:32:ff:aa:07:75:c3:ba:50:04:8e:45:a7:b5:70:5d:e8:f9:
         f3:99:b2:3b:76:36:29:9f:b9:d6:e7:ce:14:4e:56:5c:1f:0a:
         77:64:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:44:38 2026 by rpki-client