Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3fab9a3-8f95-3c65-8771-5aabfd42ba0c.roa
File:                     d3fab9a3-8f95-3c65-8771-5aabfd42ba0c.roa (raw, json)
Hash identifier:          4Trgk7Nco6/bEWjl5ny7EfQzX0LNEUwm7dAUNpYbHns=
Subject key identifier:   E3:69:89:F8:0B:F7:BB:1C:49:00:58:5E:91:DE:A4:5C:01:62:BB:B9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD57B2BDFBC0016A96CE80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3fab9a3-8f95-3c65-8771-5aabfd42ba0c.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1007:b1d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:57:b2:bd:fb:c0:01:6a:96:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=ad7eac3b-9d21-4ba6-86d6-5585bbb62f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:19:41:ff:37:1e:78:37:36:c2:a5:14:db:
                    ba:a3:eb:e2:f8:5e:bc:c8:63:df:b1:d7:3b:c9:1a:
                    d5:1b:2b:a7:ea:46:8a:11:aa:23:64:01:9f:bc:86:
                    5a:cd:e9:8b:42:66:01:ae:a4:da:d4:b6:f9:3c:0f:
                    3f:35:cc:7a:48:eb:ab:0f:89:27:a6:21:39:42:da:
                    27:0c:e5:da:49:51:f2:2f:22:9d:18:8d:3b:f3:e7:
                    ef:36:86:e0:a7:24:7d:1f:71:ce:a3:f4:cc:d7:da:
                    4f:da:97:2c:76:38:8d:f5:e8:c6:b4:cf:df:99:33:
                    a2:6b:dd:61:91:66:b4:68:68:e2:31:bd:19:45:01:
                    37:6e:42:ff:65:a2:5a:7d:5e:01:4b:27:1f:25:9c:
                    6e:37:a2:90:eb:57:10:56:09:b0:29:dc:a6:de:ae:
                    ec:2c:34:e0:5b:a5:bb:75:76:fd:77:07:f8:2c:6d:
                    c1:e0:2d:ac:de:85:ad:fb:f6:7d:67:d9:26:a2:f6:
                    73:05:a3:a7:4c:b8:9d:8f:0c:d6:9b:f3:0d:e3:a9:
                    3d:fd:1d:94:98:ef:1a:f8:c7:e0:38:92:a5:a1:83:
                    52:8e:27:1c:71:39:bf:40:c4:0b:9b:93:6c:00:02:
                    8b:fd:55:1e:75:7e:09:0a:0a:9f:0a:d7:38:7d:dc:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:69:89:F8:0B:F7:BB:1C:49:00:58:5E:91:DE:A4:5C:01:62:BB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3fab9a3-8f95-3c65-8771-5aabfd42ba0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b1d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:d3:99:db:aa:6e:7e:b9:0c:f4:83:5c:07:bd:ea:a0:48:4e:
         23:8e:f6:7f:c8:83:8b:0e:e0:8d:6f:43:5c:83:ba:f5:c8:46:
         0b:01:b8:2f:54:4e:b1:c0:8d:4d:6f:bb:90:df:bf:fd:33:3f:
         68:39:60:66:8b:d8:dd:40:77:2c:cf:ff:a1:aa:b3:9e:97:0f:
         9a:d5:da:5b:2f:ca:1c:27:d9:9c:9f:b1:c9:ed:b4:ef:c3:44:
         76:1f:5e:4c:5c:37:a5:e7:cd:79:2d:11:e7:6e:00:82:da:7e:
         c4:2a:37:6e:f2:3e:32:8a:12:c7:59:1e:f3:42:01:d6:da:e2:
         51:44:38:a4:eb:24:42:3c:c0:97:2e:73:d2:0d:7f:0f:17:f1:
         9d:21:79:27:9d:03:cc:f5:8d:4e:fa:54:5a:ec:b8:7f:b0:33:
         a6:12:7d:27:dc:b1:22:78:fa:78:46:ef:e9:a4:f7:82:62:73:
         ee:32:9e:fd:25:52:eb:96:a2:fe:b7:1c:5f:2c:cc:7f:24:66:
         27:29:31:65:39:82:2f:bc:1c:6a:79:f4:83:6f:12:4b:8c:2e:
         c0:9c:6e:d2:bb:33:ca:18:8f:8d:76:de:7e:bc:a3:82:10:30:
         1e:04:76:fd:d5:b8:ad:f6:7a:ad:d9:43:b3:40:56:9e:ae:cf:
         6a:bb:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:46:04 2026 by rpki-client