Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/739438dc-b20e-35d3-89e0-329ebdc46203.roa
File:                     739438dc-b20e-35d3-89e0-329ebdc46203.roa (raw, json)
Hash identifier:          llCYwawveSfd4X2VNWyUQeOx3zznHRMNpewXeOZylFs=
Subject key identifier:   DD:5A:CE:D5:58:BA:41:A9:AC:76:BE:89:AF:79:86:1A:9C:62:9F:3E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497303932DAEDB5D3063EE40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/739438dc-b20e-35d3-89e0-329ebdc46203.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1011:b368::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:03:93:2d:ae:db:5d:30:63:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=666522d7-3e82-48ee-905f-7f690ee19af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:90:68:5b:2b:86:28:75:2f:af:b2:21:97:
                    a7:ab:28:d1:a2:90:de:49:1f:1e:95:ff:18:34:02:
                    85:90:d0:85:7e:de:08:4d:a5:cf:c4:cc:54:7e:5c:
                    18:3e:01:5f:7c:df:ec:af:e5:92:c6:c2:b7:ff:0f:
                    fa:68:0a:7e:e1:10:80:d1:a8:9b:a4:e2:1b:6d:6f:
                    12:ed:fd:c3:c5:53:55:02:99:2c:25:61:7b:a7:a5:
                    42:b7:c7:ef:f8:e5:c4:cf:e7:b9:ee:89:f9:2f:fe:
                    5b:48:d7:20:64:e4:6d:9e:03:bc:7a:11:e7:8b:bf:
                    62:c4:1c:d4:c6:56:2e:3d:5a:ce:07:2b:ac:4a:c2:
                    bb:f6:7f:1f:85:cb:81:32:ec:e4:6e:4c:4c:fc:d1:
                    b6:29:47:93:09:8a:d4:e1:7e:2b:9b:c4:3e:56:b5:
                    ab:c8:83:57:dd:26:cb:a7:2c:4d:7e:2d:f7:f7:d3:
                    1d:43:6f:b9:da:40:4c:68:08:e9:b6:9c:96:0c:58:
                    08:64:ee:13:60:4f:53:a4:53:15:8e:1f:55:d2:57:
                    36:f7:da:10:bf:95:ac:23:ca:11:6e:5f:08:53:4d:
                    9d:37:23:a8:11:9d:3c:88:3f:5d:3c:05:3d:36:66:
                    ee:c0:74:88:b3:67:6f:21:66:97:25:57:fe:9a:ae:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5A:CE:D5:58:BA:41:A9:AC:76:BE:89:AF:79:86:1A:9C:62:9F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/739438dc-b20e-35d3-89e0-329ebdc46203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b368::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:11:65:c5:01:d7:cb:4b:fa:dd:39:6e:b7:98:73:a1:9e:d4:
         f0:cf:05:7c:32:e2:80:4f:9b:75:fc:ad:ce:63:9d:d3:e0:8a:
         75:ca:0a:19:04:0e:ab:a1:1c:55:79:e3:2e:73:a4:10:dc:72:
         0d:2e:c6:14:79:7f:56:09:dc:35:3e:db:17:4d:3c:6c:1b:88:
         13:c7:54:d4:af:66:d0:d4:c5:19:48:13:51:e0:1f:f2:65:97:
         0f:9c:e1:61:99:2c:4e:b3:0c:00:6c:46:f1:79:18:d0:76:49:
         22:2e:f1:b1:06:16:74:4b:78:f9:97:3c:51:5f:5c:77:ea:03:
         63:25:81:a4:6d:e8:74:6c:d7:ea:bd:f4:9f:f7:73:7c:df:59:
         4f:d3:97:b6:ac:9c:95:9b:cb:49:2b:e7:68:97:b0:ef:00:17:
         44:61:8b:4a:b8:4e:22:b2:7d:43:86:10:60:22:de:b7:45:b1:
         82:13:32:47:23:bf:f6:f8:b8:54:26:94:6f:d8:99:f0:0b:14:
         28:ac:b9:f2:12:27:45:ac:78:c2:bf:bf:4c:d9:29:68:f4:77:
         7a:82:e1:f1:be:05:a8:f9:0e:87:42:34:2c:a7:6e:71:93:89:
         32:94:94:a9:76:77:97:86:62:88:f5:01:a1:11:ff:06:37:17:
         87:7d:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:40:10 2026 by rpki-client