Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3d68e1f-8422-3363-9365-f356b3ae2722.roa
File:                     b3d68e1f-8422-3363-9365-f356b3ae2722.roa (raw, json)
Hash identifier:          ZCSRozToO8jRnI4e4xSTDCXrnzFzY+lkuBDRail3w1M=
Subject key identifier:   89:97:A3:69:ED:24:55:B2:4C:97:7C:2C:E6:AA:BC:A6:E1:28:BC:07
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87CB3FFF9B86AB99340B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3d68e1f-8422-3363-9365-f356b3ae2722.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1010:b090::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:cb:3f:ff:9b:86:ab:99:34:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=1eab435d-4b4c-4bef-89df-247b5a7fb7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:b0:a7:c6:89:4e:a4:c4:f7:ab:0c:79:f3:
                    a5:2a:3a:04:68:4c:8f:f1:ab:30:31:6c:58:4b:81:
                    62:95:43:6f:c9:fb:83:02:01:ef:9b:15:51:3d:93:
                    7c:29:e1:cd:d9:81:cc:9e:e9:6a:70:fe:89:f8:8f:
                    97:77:49:dd:a0:dd:7b:58:d3:24:52:da:8f:84:d5:
                    61:f4:a4:f0:45:3e:54:84:b9:07:f9:18:7c:7a:ca:
                    5a:a2:82:94:46:32:31:0e:21:38:ae:1c:e4:24:bf:
                    29:b1:d8:d0:40:8e:e0:16:b4:b1:19:96:2a:34:21:
                    b4:af:5b:95:7d:c6:f2:04:0c:2f:e1:3b:6a:3f:9e:
                    a0:a5:67:47:5c:1c:c0:be:fc:6c:fa:ce:dc:13:34:
                    2d:dc:b5:d7:e8:10:97:f1:8a:fd:40:ce:2f:10:ce:
                    8c:33:de:be:cc:b4:bb:c9:26:b6:f2:28:4c:cc:d5:
                    d9:80:40:9e:c0:53:01:1c:82:e9:c9:46:f5:0f:d5:
                    43:5a:8a:c4:4b:6a:e2:b3:b8:f7:f0:04:5a:d7:fb:
                    bc:c5:4f:88:17:ba:56:f4:dc:0e:63:fa:da:3d:34:
                    cc:0d:99:87:19:de:7f:ba:e0:6d:ab:d5:d9:1e:c9:
                    3e:5d:8c:4a:d4:c8:d6:ed:3d:66:ca:f0:c8:d7:02:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:A3:69:ED:24:55:B2:4C:97:7C:2C:E6:AA:BC:A6:E1:28:BC:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b3d68e1f-8422-3363-9365-f356b3ae2722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b090::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:44:d4:6d:2d:ec:d8:56:d1:54:d5:f8:e1:19:89:b1:f2:71:
         28:2e:a6:3f:3f:8d:c0:67:ce:ca:97:f9:e7:ab:c3:1b:38:e5:
         0b:ff:52:20:48:bb:c1:f1:4e:67:bb:af:76:96:5e:8e:b4:c9:
         e0:dd:f0:90:df:f7:25:71:1c:73:20:aa:69:0e:17:ce:2a:d8:
         26:0b:47:f5:85:74:6f:a2:05:c8:df:c7:c3:af:ca:66:15:0b:
         63:55:48:20:07:66:0a:cc:67:82:fc:6a:44:b8:97:75:a1:1c:
         b4:dc:c0:50:56:ef:45:63:8f:66:ec:d9:a1:35:44:07:07:41:
         c2:7e:67:6e:77:4e:76:90:f6:45:16:94:c5:10:aa:17:ed:c2:
         3b:ce:f3:e9:f0:a8:e1:80:b5:aa:b4:56:0c:97:dd:4f:c2:e3:
         87:0d:a2:c1:d6:18:9b:fd:e2:dc:a7:49:33:cf:97:20:3e:1b:
         24:31:c6:b5:7e:79:ba:a0:23:dd:3c:cd:b5:00:99:4a:31:ee:
         15:aa:a9:09:68:78:65:83:d8:95:89:f6:7c:f0:cb:4d:bc:86:
         d7:73:1d:b6:b4:5b:e8:8a:31:64:ae:3f:91:c7:a9:dc:c8:79:
         b5:45:85:7a:a4:71:33:0f:97:33:1a:04:f2:66:07:9e:f0:fc:
         dd:25:de:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:44:48 2026 by rpki-client