Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c33ed2-5f22-34f4-993b-444164286790.roa
File:                     d9c33ed2-5f22-34f4-993b-444164286790.roa (raw, json)
Hash identifier:          /mGCCeixXpwCSb16o0t3rIt97xoNRqvA8iP3xOAKziE=
Subject key identifier:   68:A6:9B:C7:21:75:B1:12:39:7F:AA:81:6D:81:FE:A0:91:95:B0:40
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD588F55BD333B00365B50
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c33ed2-5f22-34f4-993b-444164286790.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1008:a030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:58:8f:55:bd:33:3b:00:36:5b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=8225b13f-39f1-4527-a5d4-4d31846c2098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4e:ab:06:e1:83:a0:91:35:ce:f8:51:25:b1:
                    da:24:00:7a:cc:29:82:c7:fc:26:07:13:80:3f:22:
                    83:30:44:e6:38:12:4c:a2:81:32:b4:81:b4:c6:23:
                    a7:46:fc:ce:f6:10:ee:79:54:f0:9a:b3:f4:4e:a9:
                    5c:fb:32:6f:5a:5a:b4:f2:ad:ec:ac:82:2e:dd:09:
                    b6:fd:6a:a0:1f:24:ed:f2:d9:2e:64:04:39:ed:57:
                    a8:c9:b2:ad:6f:3b:52:1f:9a:bf:23:b2:43:c9:f5:
                    0a:38:8d:4e:e2:d1:e2:20:47:b2:ac:ab:97:75:52:
                    9e:4b:62:4c:c8:4b:4f:dd:03:5c:f3:67:ab:e7:0a:
                    e1:04:9c:2f:1d:a4:17:1e:a7:71:f8:19:31:98:e0:
                    57:af:e5:02:a3:64:e8:9d:b7:4d:45:64:51:5a:cf:
                    0a:d5:2d:da:da:3e:38:90:86:5f:1f:40:5f:42:ac:
                    d0:b5:b7:78:bb:74:d8:7d:7e:7b:11:27:d7:37:e0:
                    f2:3f:61:99:cf:ed:53:5c:0f:d2:f2:01:46:ff:88:
                    59:4f:1c:27:68:f9:e9:1f:4d:9a:71:ec:05:6b:de:
                    89:16:0b:2e:af:ef:bf:23:fd:63:9f:29:94:2b:d7:
                    4a:16:6f:79:fe:2c:24:c5:6c:d8:09:c3:21:44:de:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A6:9B:C7:21:75:B1:12:39:7F:AA:81:6D:81:FE:A0:91:95:B0:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9c33ed2-5f22-34f4-993b-444164286790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:a030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:46:be:e6:64:13:cf:df:02:d2:9e:47:dc:80:20:c3:64:41:
         bd:b4:33:d3:74:48:8c:4f:6c:59:e9:d4:03:92:ee:16:66:20:
         fd:90:4f:d4:c9:59:0b:71:12:e5:9d:38:b4:ac:4d:26:33:99:
         6a:32:f8:24:fc:8c:bb:56:87:b1:2a:5a:02:49:4a:90:b0:91:
         eb:1b:7a:3b:32:6d:8d:30:b1:57:0c:30:ac:80:8d:b8:2d:99:
         a9:b8:34:bb:97:53:30:cc:ed:65:cd:01:b3:23:62:7a:19:a9:
         64:1f:f9:bd:37:7f:35:17:74:8b:b9:77:ef:26:31:ac:3d:9c:
         8a:a7:8c:3e:70:9f:87:5f:ad:96:50:34:3f:e3:dd:1f:4c:b3:
         5e:a7:55:b6:3d:6e:e9:9d:95:d3:9d:14:c9:ad:3e:fd:db:fa:
         7e:ce:ba:54:e5:30:93:be:c8:1d:de:89:51:15:f6:02:e9:1b:
         23:be:91:4c:93:e4:cf:54:e9:f4:39:f2:4b:3f:ad:4b:de:bd:
         f0:6f:aa:02:cb:af:f7:4a:f8:c9:a5:1e:57:4d:e2:de:a3:80:
         2d:9c:3e:f9:54:d0:0a:92:13:47:82:41:4a:65:1a:fa:c3:0c:
         10:f9:4a:ff:da:4e:6b:34:c0:bc:88:82:80:45:68:69:b7:70:
         ac:a3:28:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:19:32 2026 by rpki-client