Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/863cfaab-b768-3083-b5d8-e54160403123.roa
File:                     863cfaab-b768-3083-b5d8-e54160403123.roa (raw, json)
Hash identifier:          q2HYqRgVw/PuczTxWgc8yLzfm+ptHyIAWTXjHZRXdCo=
Subject key identifier:   69:BC:92:A4:25:E8:54:5F:56:06:89:B1:D0:85:FE:96:5A:54:48:4C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F497F21E9E0D90A424D6CF300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/863cfaab-b768-3083-b5d8-e54160403123.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:b1c6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:21:e9:e0:d9:0a:42:4d:6c:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=79458a56-b506-43b3-8896-5068f2bcfd8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:7e:0e:84:e6:05:94:74:e1:fc:47:23:55:
                    77:bb:8d:1b:a1:d5:2a:0d:fa:56:4b:ec:f4:45:f3:
                    0b:9c:bc:f2:ac:7b:8e:f8:37:b9:1c:4b:db:ff:7b:
                    1e:d0:38:d7:5b:cc:1e:19:83:d1:5d:af:59:f3:8f:
                    86:ca:ae:7a:14:dd:d6:f7:24:e6:9d:39:e6:44:0e:
                    34:67:f1:7a:42:35:63:ad:54:e5:5a:dd:b2:47:4c:
                    8d:c5:ba:0e:f6:16:b6:3b:81:05:04:63:80:c7:f6:
                    c8:5e:97:fe:9f:ae:ec:b3:12:8c:a5:94:71:d2:e8:
                    9c:07:91:13:a9:4c:a3:65:d1:5f:86:17:5c:1a:10:
                    1c:76:97:6a:fd:ac:56:83:a1:45:ed:10:22:20:2a:
                    1c:a4:03:1f:4e:7d:16:0b:a8:0d:9f:dc:8e:42:29:
                    3d:2b:e9:2d:5e:59:c4:af:67:ca:7f:26:8f:e6:17:
                    16:1a:7e:29:9f:fe:90:16:72:9b:11:07:b3:5f:91:
                    89:41:f6:6e:45:8f:d4:7a:d0:f7:f4:28:1c:22:37:
                    6c:6b:ad:b0:b4:81:9a:c2:98:2c:27:88:22:16:9b:
                    1c:4e:7d:c4:bb:30:8f:95:4e:db:4d:77:26:f3:08:
                    af:82:c6:01:91:3e:ab:aa:91:6d:7d:ec:28:85:48:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BC:92:A4:25:E8:54:5F:56:06:89:B1:D0:85:FE:96:5A:54:48:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/863cfaab-b768-3083-b5d8-e54160403123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b1c6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:6a:b5:f4:1b:70:90:96:44:78:4d:56:75:98:96:da:da:15:
         40:da:0d:31:e3:01:4e:0f:2d:47:c2:64:52:67:a5:b7:ef:b5:
         29:c9:74:56:a0:1b:36:2c:43:b0:6c:1f:cc:3f:99:9e:0b:c4:
         00:b0:7d:e1:e2:11:c9:b0:2f:3c:4c:1b:95:c6:9d:95:1d:9b:
         20:09:c1:87:d5:51:f7:9a:7f:57:c5:39:e6:5e:e7:24:62:5f:
         18:47:14:68:fd:6c:1c:49:5c:6c:40:56:c4:6a:b2:6f:19:e6:
         a9:9e:ca:1e:31:1c:ab:b5:1d:00:3b:05:b9:d8:c9:7c:ce:e7:
         01:5a:82:a4:46:ff:db:06:dd:f0:f6:d3:6c:5d:e2:5c:d3:5e:
         b7:11:3e:86:02:ec:41:75:9a:c6:1b:af:db:1b:e7:ad:36:ed:
         00:bf:66:48:2f:7b:34:e6:35:69:6d:e0:54:1e:5e:43:aa:93:
         45:a7:8a:8e:56:52:80:fd:86:79:20:d1:88:9e:c8:d7:61:09:
         a8:8e:97:e3:6c:35:c6:92:9e:f3:45:1a:c5:79:2d:82:80:3a:
         ce:ac:48:ac:fd:d0:4c:ed:08:4b:e1:72:30:cf:62:15:91:3e:
         93:8c:48:1e:e3:35:d9:95:83:ff:55:22:9f:df:5f:21:9d:ac:
         54:2b:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:07:11 2026 by rpki-client