Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9adfb2-07f1-3356-b86e-15771ecccc33.roa
File:                     bd9adfb2-07f1-3356-b86e-15771ecccc33.roa (raw, json)
Hash identifier:          GqQOWuSMP7cyo2iY+OcT8eFhmrk05eAxrtXevwYIigo=
Subject key identifier:   BA:BC:98:06:8A:70:EE:DE:C2:B7:E0:65:99:70:6C:44:8A:5A:C7:41
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F498650F7D8075C4BD7CF4E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9adfb2-07f1-3356-b86e-15771ecccc33.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1009:b0e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:50:f7:d8:07:5c:4b:d7:cf:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=485981e0-b61b-44af-8a42-b15ac1061485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:9e:44:da:0b:10:d1:4d:05:d5:73:6c:7f:
                    9d:2e:5a:26:38:e0:3d:db:a7:e3:69:bf:de:6d:c2:
                    3e:7e:fa:5b:96:6e:9d:b2:77:ce:7b:d3:9c:00:7e:
                    94:6c:4f:38:72:4d:68:dd:e7:20:1d:08:55:bb:6b:
                    a0:a9:aa:42:2d:df:8a:6b:f6:3b:22:ba:81:0a:d6:
                    e2:5d:c9:6e:14:a0:59:74:55:f2:30:c5:ca:33:e6:
                    08:99:3c:de:4f:6f:41:5b:d2:a0:99:5b:23:7d:0b:
                    36:db:0b:79:e5:11:87:3d:99:0a:6c:35:71:56:e9:
                    63:93:f2:50:f4:69:cf:9a:26:59:32:b3:88:30:fb:
                    61:8e:e7:a0:27:7e:26:2e:80:3f:75:01:5c:04:b8:
                    4e:45:5c:19:cb:e3:e3:dd:94:3d:d9:92:49:ee:d0:
                    7d:27:56:49:6f:a0:1d:e5:d3:7d:dc:bc:18:ac:08:
                    05:53:fd:54:fb:d1:4b:9c:72:bb:a6:ad:9a:d1:72:
                    f4:ce:14:03:b3:fc:3e:18:8b:98:66:ae:ea:3e:55:
                    1e:cc:e5:9f:9b:9c:74:e3:85:d0:3f:f8:48:fb:56:
                    be:e1:88:a9:5c:a9:85:4d:46:5f:d2:3d:7e:30:07:
                    9a:1f:65:6e:a4:ce:c1:eb:95:b0:4d:36:26:6d:98:
                    36:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BC:98:06:8A:70:EE:DE:C2:B7:E0:65:99:70:6C:44:8A:5A:C7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd9adfb2-07f1-3356-b86e-15771ecccc33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:5d:35:49:2e:5f:8d:ec:bc:ca:c4:34:14:6c:52:3f:9c:0b:
         97:ad:fa:11:41:eb:3d:3f:bc:47:0a:e2:cc:07:4b:bd:9b:b7:
         4e:d5:18:42:85:07:d8:0f:1e:c8:ff:d9:ad:49:b7:fa:ab:fb:
         0c:e4:eb:2b:6a:b9:c8:16:a2:7b:a6:16:2a:34:74:42:a8:1c:
         d4:aa:df:6e:4c:79:60:79:31:60:ad:f0:09:ad:43:f2:7f:6e:
         24:60:83:58:79:4c:4d:c0:ab:4d:73:f4:dc:1a:12:88:bb:6f:
         ae:96:e5:0f:89:01:cc:77:38:da:6c:f9:61:8b:9e:73:bd:39:
         bb:23:3b:36:3d:87:7c:73:b9:6f:d6:e5:60:00:1b:c1:44:2e:
         1f:7f:3a:48:69:61:5e:2d:5d:95:c4:04:ac:af:64:76:13:ad:
         f4:38:64:1b:c6:69:b4:a8:f4:73:40:f9:93:25:e6:5e:92:0a:
         67:07:03:0d:a0:7a:a0:85:6f:0d:55:74:76:30:50:d0:25:51:
         50:ef:62:21:7f:af:29:3d:dd:21:b8:16:2b:43:27:52:b3:de:
         62:5e:df:88:b3:9d:e8:8e:af:7f:ee:30:11:33:6e:4c:25:af:
         9b:61:06:ba:18:d8:c5:bc:61:4f:c7:61:6a:a1:72:22:f6:3e:
         48:d9:45:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:28:37 2026 by rpki-client