Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa
File:                     a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa (raw, json)
Hash identifier:          22e19TA5S5wtN36948rnEOl6+DQtWd8lb/Hk+lhS1AE=
Subject key identifier:   EC:45:21:53:5F:BC:60:48:F5:D7:7E:C2:DB:9F:EC:B2:55:35:7D:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD533C7E454FCAB5F56D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1005:d130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:53:3c:7e:45:4f:ca:b5:f5:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=08ed9059-d20c-4924-8c2d-9091e41d4254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:9c:ea:d9:0c:1b:19:91:da:43:25:27:90:
                    20:3c:e7:f2:9f:23:85:0e:17:f9:86:72:3b:e1:2e:
                    61:db:69:fa:8f:10:d1:8d:f6:15:5c:32:e4:c1:18:
                    27:c0:f0:d9:c1:d3:85:3b:6b:aa:5a:8f:eb:ce:f4:
                    02:28:eb:d7:52:c3:93:5b:16:de:a4:02:3f:ea:46:
                    47:9c:d7:5b:a4:80:2a:b6:9f:ee:2e:e4:50:7a:e1:
                    ed:39:9c:af:b7:00:34:1e:0f:d4:1a:83:f0:6a:33:
                    ef:11:3a:e4:be:13:e4:88:bf:c1:61:56:5e:db:8f:
                    0e:b2:93:db:c9:4e:33:82:72:42:b9:28:7b:94:9e:
                    b6:54:dc:8d:53:70:9a:7b:88:e1:72:56:ce:66:32:
                    11:26:2e:73:32:8c:43:e0:d5:bb:47:a2:1e:5a:f8:
                    ae:f4:cf:6f:2e:fc:6b:54:65:46:90:10:80:54:2b:
                    03:44:91:da:86:f3:1c:c5:54:9c:d8:6a:54:72:c9:
                    07:ba:0c:9f:7b:03:31:c0:3a:f7:39:1a:2a:5c:5d:
                    20:2f:3a:be:c4:7f:2e:97:ee:db:3c:12:e3:4f:23:
                    88:3a:31:2c:4e:ed:b0:50:e2:e5:10:d9:1c:02:86:
                    5e:bb:aa:0d:b1:31:70:68:40:82:8c:1b:d7:b3:03:
                    1a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:45:21:53:5F:BC:60:48:F5:D7:7E:C2:DB:9F:EC:B2:55:35:7D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8bcc81e-792b-3d65-9d5e-a988d1d9470a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:d130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:77:b3:4c:b9:f9:a6:52:55:e8:44:49:1e:cb:46:c2:30:96:
         23:30:73:02:28:1e:2a:e6:55:e9:7d:2a:e2:e5:0c:ad:a8:22:
         66:43:17:1d:d3:c1:42:ec:dd:1b:ac:1d:2d:b8:93:1c:6b:f1:
         83:c8:35:23:58:77:41:c9:b5:48:3b:ba:a7:69:cb:47:73:80:
         e3:d5:2f:5d:cd:94:5f:47:4a:e5:33:87:b8:b4:66:be:42:ed:
         75:f7:09:9e:17:73:7a:7e:18:e1:df:04:73:c9:26:87:c5:03:
         e4:1d:fb:3f:a7:1c:e5:a5:20:8f:87:a5:cf:d8:d4:ac:c2:a2:
         e3:6a:24:37:92:ad:ab:84:9e:5a:79:11:1a:40:fb:ad:81:26:
         94:e1:c4:13:42:e4:87:8e:6d:a9:23:32:85:90:4c:62:af:81:
         40:f2:b7:91:55:6b:11:6f:f0:3b:76:e0:d2:70:62:14:3c:15:
         85:5e:b1:8b:61:f8:c5:45:75:9f:b4:4b:6a:37:db:d8:2a:df:
         4f:96:dc:ee:ed:d5:16:e5:46:86:dc:1e:24:a6:35:52:7e:57:
         1f:99:8f:c8:1d:ba:e6:da:80:77:82:2e:b0:e8:b3:15:be:94:
         db:11:c0:2a:e0:71:bd:b7:fb:99:0e:d6:93:96:8a:0d:a6:ca:
         5e:74:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:29:21 2026 by rpki-client