Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f96e1a-58c7-3210-bff9-590e6e70fde8.roa
File:                     98f96e1a-58c7-3210-bff9-590e6e70fde8.roa (raw, json)
Hash identifier:          8deFsau+eja4urck0lRIHUcAI5+EDtmU9Nj/81gMS1w=
Subject key identifier:   CC:52:21:DC:35:7A:36:2D:9B:71:EF:54:A1:08:2D:E6:83:99:CF:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2ABD17F03C1421AB13D16A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f96e1a-58c7-3210-bff9-590e6e70fde8.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1009:a026::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:17:f0:3c:14:21:ab:13:d1:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=b59ca355-cee9-403a-be42-471e9430b0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:d8:cb:d8:11:6e:68:7d:4d:d0:4b:a9:a8:
                    72:b8:b9:54:93:cd:5f:48:76:e1:d7:38:65:37:99:
                    3c:3f:67:b1:2e:69:66:70:bb:47:b2:21:fa:44:68:
                    5a:97:f4:ec:39:93:80:b8:ad:1f:4c:af:cd:86:2f:
                    e0:a5:30:35:dd:d8:c0:dc:19:07:b7:d2:a5:39:a6:
                    22:61:44:1b:82:5a:12:c1:8f:a6:65:16:65:f6:e2:
                    16:9e:19:32:40:aa:99:a5:5d:32:e4:6c:9e:ed:7c:
                    a7:46:70:c0:9a:5d:2e:03:59:ce:82:22:cb:40:e0:
                    5f:e5:98:93:a0:24:4e:a3:be:aa:51:88:5b:a4:f6:
                    bb:85:3c:e4:2d:f6:e0:bc:b1:dc:df:6a:c5:fd:c2:
                    88:bb:20:b5:88:38:75:ad:13:e3:48:45:08:e5:4b:
                    7c:2e:16:ab:fb:49:06:01:bc:5c:51:4f:7c:00:98:
                    0d:af:cc:58:69:67:cf:18:7c:24:e7:92:51:37:01:
                    63:a8:3e:0c:03:91:50:ea:7c:b1:cb:7e:1c:c1:f6:
                    b8:46:5a:6e:a0:96:ab:18:09:45:66:fa:10:15:6b:
                    64:ca:b6:2f:ae:01:a8:00:b4:b0:8a:e4:a7:e4:3b:
                    e2:65:13:57:6f:a3:d8:48:d6:09:20:7f:18:92:05:
                    5f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:52:21:DC:35:7A:36:2D:9B:71:EF:54:A1:08:2D:E6:83:99:CF:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f96e1a-58c7-3210-bff9-590e6e70fde8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a026::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:91:ee:f2:c6:d6:49:88:70:66:ff:48:7e:94:b2:88:f4:46:
         d4:95:a1:4b:83:68:a0:eb:26:2b:21:05:f1:48:60:30:49:f7:
         70:b5:e4:3b:8f:75:bf:0d:ea:b6:54:1f:db:5a:0f:78:d3:ac:
         bb:4f:6b:48:98:bd:12:25:9e:f9:66:d1:9f:09:87:aa:3f:83:
         b9:73:08:5f:9e:28:77:04:4c:07:31:15:2e:5b:db:a6:7a:58:
         e1:d7:03:d8:7c:c8:ff:29:f4:92:a0:94:c6:7e:ea:3a:12:a3:
         74:b9:86:31:5a:78:2c:18:7a:03:c3:17:43:08:25:53:76:c1:
         1b:ee:a8:a6:3a:02:b4:b9:d1:6a:04:12:d2:76:9f:77:05:a3:
         bd:d8:70:b5:51:4c:99:65:4b:4d:3a:7a:18:92:db:cb:c7:80:
         c9:9f:37:00:70:2d:9c:e9:52:c2:54:3f:2f:10:70:49:a8:29:
         64:6f:86:91:fa:70:65:f5:3b:38:c8:f5:76:be:80:df:16:0b:
         f6:43:1f:2c:8a:3e:13:b6:f1:a6:d1:2c:b9:0d:34:d7:51:b1:
         02:d7:88:d1:52:f1:26:f6:85:8c:3e:c1:97:a8:95:8a:49:7b:
         18:9a:a4:60:13:85:c2:7d:1e:e6:5e:ad:bb:89:d4:75:75:c3:
         de:86:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:15:43 2026 by rpki-client