Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f6dd1a3-d052-3ea9-aaa0-fdbb44c9ab8b.roa
File:                     7f6dd1a3-d052-3ea9-aaa0-fdbb44c9ab8b.roa (raw, json)
Hash identifier:          En8Gd9VORkswb2IcQindy4CsGPAB7UVY0Vf0oF8hXpw=
Subject key identifier:   64:0A:4C:07:30:08:03:F4:06:5B:4E:4A:D8:59:97:CF:2B:9E:F8:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87D94169714EAD1340CB98
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f6dd1a3-d052-3ea9-aaa0-fdbb44c9ab8b.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1017:9800::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:d9:41:69:71:4e:ad:13:40:cb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=592e96c8-157b-4bf2-9417-741e3c336a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:4e:39:ec:e8:92:6d:77:ed:e8:74:88:86:
                    e8:01:d6:26:58:16:74:f2:12:55:6c:b4:a3:c8:89:
                    c2:4b:f4:04:ee:17:3d:11:7e:97:b7:96:e8:31:23:
                    03:e9:df:c5:66:3e:ff:d0:75:dc:71:76:8e:9b:50:
                    fb:9d:c7:af:46:d9:f5:15:0f:33:78:df:1e:c0:ad:
                    94:c7:b9:26:45:e1:d8:73:94:66:64:26:97:5a:e9:
                    5f:ee:c4:19:a6:eb:e0:81:ff:84:04:b2:63:32:96:
                    9f:ba:78:c2:c9:ae:2b:71:4a:fc:a0:a8:d4:2d:5e:
                    75:a4:79:2f:2d:81:f1:53:7d:da:69:05:79:33:c2:
                    d7:5c:c1:f5:56:ff:cd:1c:70:e8:b2:28:a7:3c:03:
                    ef:21:83:de:a2:38:52:2f:13:8e:3c:c4:a0:53:cb:
                    1a:bc:e9:88:1d:de:67:54:57:23:25:59:4e:75:7c:
                    c3:c8:06:76:d2:de:80:a5:92:b5:ab:26:47:94:4a:
                    95:f3:8b:87:cc:5f:62:ce:f1:23:26:1e:7b:49:67:
                    20:47:aa:3d:68:52:36:9e:d4:cd:83:ca:d6:ea:a3:
                    e2:2e:e1:e1:31:2d:12:0f:48:27:a2:63:ab:81:82:
                    9d:88:93:7b:7e:3c:21:93:8a:86:8c:16:bb:68:2e:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0A:4C:07:30:08:03:F4:06:5B:4E:4A:D8:59:97:CF:2B:9E:F8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f6dd1a3-d052-3ea9-aaa0-fdbb44c9ab8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:9800::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:21:7d:ca:ef:0e:e8:10:43:2f:e0:09:91:21:05:17:4c:
         2e:4a:bf:c5:5c:34:dc:d4:23:1e:9c:4c:da:8d:42:f7:dd:d6:
         21:57:80:64:05:4f:30:b6:89:09:9a:2f:64:a1:2c:e1:e2:01:
         0d:3c:67:c8:01:ca:ee:80:ef:5b:b1:9a:cb:57:9c:48:d0:9c:
         82:fe:78:02:c3:9a:31:2f:58:7b:3f:81:df:c6:35:26:74:d9:
         c0:08:09:86:ea:6b:c8:9e:86:e3:08:d8:ec:e9:03:bf:2a:38:
         ee:ad:d1:5a:ea:85:31:6c:55:43:f3:ec:e6:03:a0:f3:11:ad:
         8c:9a:67:b8:50:74:5c:2f:32:93:7d:b6:39:bc:2d:84:1c:e8:
         17:b3:81:1c:3e:45:74:89:7a:ad:5f:70:49:47:03:78:7f:5d:
         a9:5a:46:c7:fc:ad:e1:b5:51:ee:ce:ce:5d:57:bd:ef:8a:4f:
         ec:e0:d9:3e:76:35:11:cd:70:aa:5e:0c:16:47:ef:7f:b1:3c:
         7e:bb:ff:e1:bf:75:81:d7:51:fe:28:ca:e3:57:4e:98:0e:0e:
         08:a3:f8:58:34:7d:3a:7e:6e:66:45:79:e7:a7:49:ac:8a:68:
         c4:3f:37:de:10:c6:06:a5:a1:d1:47:5a:eb:06:01:07:ee:18:
         7e:ee:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:58:06 2026 by rpki-client