Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd0b9912-29e1-33df-beee-3ef0a2903c12.roa
File:                     cd0b9912-29e1-33df-beee-3ef0a2903c12.roa (raw, json)
Hash identifier:          hHDhsrPGPhq4AS7iEPODO19idDz+YwZXoKgz+nRjHe8=
Subject key identifier:   8B:71:BF:02:91:0B:D1:3A:FC:63:75:21:D1:1A:91:BE:52:6B:E2:6A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49865E1B09BA19AD7D63CF40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd0b9912-29e1-33df-beee-3ef0a2903c12.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100c:b0b8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:5e:1b:09:ba:19:ad:7d:63:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a011c920-0a4a-4e7f-bd7e-edaf79846fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:2f:eb:e8:9f:27:49:0b:84:46:47:a2:77:
                    3b:8a:4f:7d:52:3c:16:1c:44:01:41:bc:51:1f:b8:
                    43:9a:75:ad:30:b4:6a:bf:5c:8f:1c:c7:e4:ae:5a:
                    f4:e0:a9:55:ee:58:3d:08:61:05:4e:70:75:b8:c6:
                    cd:02:1e:c6:b6:1b:f8:27:cd:82:64:0e:33:aa:d2:
                    d5:34:7a:ad:ac:0e:b0:43:81:36:a5:b2:cb:3a:3e:
                    d8:a1:fc:66:57:69:0c:18:01:fa:31:f6:de:cb:a6:
                    fc:f3:fa:b1:cf:f0:10:87:77:e5:d1:2a:4b:3d:5d:
                    d7:7d:c2:40:d6:5d:4a:6b:83:5d:3c:29:d7:f2:14:
                    7c:f6:30:c0:66:b1:79:3d:56:4b:ba:1a:b3:98:f4:
                    2e:8b:3e:bb:4c:14:49:74:6a:c8:9a:50:3a:d1:06:
                    12:21:4f:35:ce:d4:c8:93:a6:2b:68:d2:63:da:38:
                    3c:83:38:46:bc:b3:13:31:44:ed:49:57:d0:33:2e:
                    c1:8d:59:27:85:31:1e:ad:b4:b0:fb:88:c3:8c:9a:
                    e3:14:b8:ae:fd:a4:48:05:57:92:9f:a5:59:3a:65:
                    76:d9:52:46:73:fc:3a:57:4a:a0:ab:30:67:2d:32:
                    76:92:bc:06:ca:32:3f:77:60:d4:86:1b:46:d9:bb:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:71:BF:02:91:0B:D1:3A:FC:63:75:21:D1:1A:91:BE:52:6B:E2:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd0b9912-29e1-33df-beee-3ef0a2903c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b0b8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:dc:b2:a8:1b:89:99:e5:0b:99:e6:77:11:16:94:c4:49:
         ad:c0:bf:d7:23:4f:65:df:39:18:89:96:94:df:4a:38:b4:bd:
         c5:70:b1:15:ec:2c:84:43:a2:19:4b:15:a5:0b:16:92:b3:cd:
         69:0c:f5:3b:1c:bc:a7:12:7c:48:31:b0:61:48:20:e3:59:09:
         56:12:bd:c0:95:e9:49:0b:8e:eb:fa:02:47:fa:53:51:7c:a2:
         00:33:7f:96:01:a9:3e:f6:b4:15:a5:a9:79:4a:31:45:e5:0d:
         fa:db:1c:95:1d:20:f2:01:6b:cb:9b:cd:fc:82:14:bf:97:21:
         e7:a9:6d:59:99:27:1a:af:2e:fb:21:82:71:cd:7e:18:01:96:
         cc:6e:b6:0b:c7:60:c0:ef:83:f6:93:8e:83:89:f4:2f:e7:d9:
         90:43:49:a2:e9:a4:b0:10:07:26:b3:d2:00:cd:69:fc:90:c4:
         10:9d:e2:23:af:7c:c8:b1:11:a1:f9:79:76:67:34:5c:74:3e:
         3f:40:a1:c3:9e:bd:44:6c:51:a8:67:45:aa:90:15:ad:70:3d:
         88:57:d4:91:b8:27:74:c1:1d:f1:ef:bd:8f:6d:b5:a5:1e:ee:
         db:a0:5d:39:18:da:15:9a:6c:a7:c8:a3:18:9b:ed:4d:6c:e9:
         82:db:9a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:45:25 2026 by rpki-client