Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81c9a157-a77d-3f2a-a90d-43afe0c176b6.roa
File:                     81c9a157-a77d-3f2a-a90d-43afe0c176b6.roa (raw, json)
Hash identifier:          /by0Oh1KSu5HHAJ7gYOGRyYroj/TF8+THgDfNBvK7Hk=
Subject key identifier:   9D:C2:8B:51:BB:98:AC:87:F5:C8:58:B3:D4:67:B4:08:3F:BA:C1:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F25AA71C460A3C9CB799C
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81c9a157-a77d-3f2a-a90d-43afe0c176b6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100e:9f10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:25:aa:71:c4:60:a3:c9:cb:79:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9529f107-0827-4f24-9c55-35d2909e0f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:f1:af:e1:b8:b1:2f:a9:5d:c0:6f:91:2c:
                    1d:42:58:24:40:f2:22:7e:f9:79:2c:4d:a4:c4:36:
                    ef:e3:ec:4d:b5:b9:84:f0:53:a1:79:82:35:b0:b6:
                    50:ea:46:50:35:b4:a2:34:30:a1:d2:89:e6:a0:d7:
                    62:ec:37:f0:e4:49:10:01:4b:2b:4f:dd:ca:4d:cf:
                    c5:99:01:b6:b5:08:9f:62:7f:d2:a5:54:10:b6:be:
                    18:44:73:5a:d8:97:9a:6b:10:f8:0c:25:d8:f6:1a:
                    60:51:17:d6:9d:08:04:77:23:70:42:5e:0a:3d:81:
                    2d:b2:ff:47:6c:ab:41:6d:c2:7a:4b:c4:f8:53:33:
                    76:ed:63:a1:80:51:2a:de:40:91:40:95:5d:78:bd:
                    3d:68:2a:1b:27:6f:5a:b2:43:5e:02:fc:78:91:d0:
                    f3:9a:52:c5:21:a2:26:1d:14:7b:b1:10:e1:00:bf:
                    77:2c:be:76:05:a1:90:ff:f7:a4:43:31:bf:8c:e9:
                    94:d6:ce:2e:c4:46:37:78:d3:78:ec:1e:2f:30:fe:
                    2a:c1:60:51:f5:bb:2f:0c:ce:d0:b0:e3:df:78:0e:
                    ee:a9:c6:f5:fd:c0:9a:ed:91:b0:93:4e:64:85:21:
                    ff:c7:bd:10:e0:a4:a9:35:ec:04:da:5f:38:7d:f6:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C2:8B:51:BB:98:AC:87:F5:C8:58:B3:D4:67:B4:08:3F:BA:C1:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/81c9a157-a77d-3f2a-a90d-43afe0c176b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:9f10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:31:11:51:41:e1:21:40:18:37:26:64:cc:76:78:bb:c1:c9:
         52:c2:44:b1:92:23:eb:ef:03:29:98:86:a7:5e:da:80:b4:65:
         57:f1:85:32:c1:86:4c:b7:38:83:3b:8b:ef:df:66:70:e1:7a:
         02:87:55:2c:fa:54:70:45:eb:b3:f5:b3:23:1b:80:32:ee:25:
         8e:30:0f:67:94:b1:dc:2a:b1:65:e4:f4:b7:85:43:f6:e2:95:
         0b:5f:98:bf:fc:07:a6:44:e2:41:00:6e:16:5c:f3:78:bf:ec:
         a8:10:f3:47:aa:21:a2:2a:1f:bc:ab:28:b0:7d:61:6f:3c:3a:
         db:09:fb:62:88:a8:71:7b:22:6d:e7:2d:fe:a0:55:ea:b0:7a:
         b8:84:86:a2:c5:d0:1c:3d:2f:1a:54:44:78:54:20:34:89:01:
         c0:03:a8:da:fd:43:80:d6:49:c0:55:93:30:ca:85:c2:0a:05:
         c4:49:10:a7:c9:25:4d:74:80:a3:48:3d:07:fb:41:8b:4d:ed:
         d0:09:9a:b1:be:5c:d9:3a:94:09:ca:0b:b3:91:51:e5:31:7c:
         94:75:44:f2:24:e4:f7:70:3f:54:45:4c:29:4d:90:5a:53:a5:
         ca:44:c8:88:6e:67:7e:f4:fd:df:10:fe:78:3f:6b:43:77:5e:
         e9:be:39:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:24:44 2026 by rpki-client