Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac646f43-11e5-3149-8847-8d8cbe659735.roa
File:                     ac646f43-11e5-3149-8847-8d8cbe659735.roa (raw, json)
Hash identifier:          xyYQk6t/3Bjr73JPFxsU92ZbVxTXCu26PC3o7Vu9uhQ=
Subject key identifier:   CD:B8:F8:65:65:1C:22:C7:36:BA:06:94:AF:C1:2C:4A:6B:7A:2F:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F498666B0BCCFB40CC4130A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac646f43-11e5-3149-8847-8d8cbe659735.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        2600:100a::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:66:b0:bc:cf:b4:0c:c4:13:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c77d7120-dd49-41b1-936a-d909aa978c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:85:bf:e7:8d:12:ae:a0:f8:c6:97:fe:33:
                    ec:4c:8c:5f:2d:b3:dc:ab:b6:87:00:12:ea:29:b0:
                    de:b2:18:c8:d3:e3:01:cc:3a:71:0f:43:53:fa:39:
                    98:e4:bd:4c:19:97:86:7b:db:b0:ec:b4:6d:a6:94:
                    8a:ab:85:22:69:fd:9f:2c:79:94:ac:40:1c:18:14:
                    51:c3:ff:b2:e7:ac:91:fe:f4:09:1b:7f:bf:27:b3:
                    d1:74:9b:09:a3:7f:bf:19:a9:9b:78:9d:57:25:25:
                    32:c4:44:78:a2:21:49:93:84:bb:44:2f:73:af:b7:
                    1a:47:ff:ef:0c:99:87:7b:26:b8:ad:aa:1c:95:e5:
                    41:fa:8a:7d:7f:75:4f:85:1b:ad:69:cd:fe:45:e9:
                    52:c3:ed:99:80:f0:43:49:20:43:15:c0:c7:79:b7:
                    39:38:3e:65:e6:f7:f1:22:83:9c:49:c5:d1:ad:73:
                    74:d9:ba:e2:de:de:2e:0d:93:43:f0:22:87:0c:1e:
                    89:84:b8:6d:a8:0a:cc:1d:83:9c:af:11:60:50:36:
                    17:9b:44:35:57:ab:2d:8b:c8:62:dc:89:4f:8b:84:
                    41:77:78:cd:c0:45:36:a7:a1:60:39:07:a1:3a:1e:
                    f0:73:39:f9:9d:e1:38:3c:3d:a7:b7:23:84:a3:56:
                    41:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B8:F8:65:65:1C:22:C7:36:BA:06:94:AF:C1:2C:4A:6B:7A:2F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ac646f43-11e5-3149-8847-8d8cbe659735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:b3:17:b2:fd:04:4f:8f:70:52:42:e2:bd:03:3a:f9:0e:
         3e:8f:d6:f4:de:f3:42:74:86:2b:f1:41:62:ff:1c:3c:ef:46:
         2d:11:46:ba:50:ef:b9:c2:f9:b5:e1:1e:91:ce:0e:e5:db:be:
         f9:7b:1b:7c:e1:08:fc:e9:db:b1:42:18:35:f4:10:04:46:8d:
         9b:e0:c4:83:80:0e:5c:30:c0:28:7b:f6:b3:34:d2:f9:48:0f:
         5a:33:07:30:d2:79:e4:85:59:8c:e2:5b:f7:01:17:36:3c:ed:
         ca:33:66:fe:03:7c:2d:b0:75:ae:11:6b:5a:0b:ff:60:8f:d7:
         1b:06:b8:e3:d0:d4:cb:94:40:64:24:2b:8d:48:a9:0f:4b:e5:
         56:fb:d5:cb:0b:2b:1f:1d:6f:bd:d5:4c:37:5d:3f:e5:77:cd:
         11:a6:92:f3:78:52:b2:23:da:4c:01:58:f3:24:80:fc:d0:b3:
         61:7b:79:98:42:df:d6:ec:c1:ca:5e:e2:33:05:da:8d:c9:86:
         16:e6:3a:3b:5f:8c:e7:65:e9:81:82:93:1f:17:99:dd:78:9f:
         34:89:7d:15:6b:42:d3:1c:d7:24:16:0a:ef:7f:7d:e9:13:6e:
         e6:9d:9a:7d:8e:fb:3f:94:9d:62:d5:f1:6e:22:94:0f:a6:09:
         72:dc:52:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:24 2026 by rpki-client