Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e968a981-4a08-34cc-8577-9b51f096751b.roa
File:                     e968a981-4a08-34cc-8577-9b51f096751b.roa (raw, json)
Hash identifier:          O/pgTfzz9u+hLHoTc4nWy4/tUvqtgtu+5np+IwODuO0=
Subject key identifier:   85:32:A4:15:C4:25:34:B0:A1:18:AB:93:21:36:F4:7D:4A:6E:7A:E5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD7F235A1F958BE2740FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e968a981-4a08-34cc-8577-9b51f096751b.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1008:f100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:7f:23:5a:1f:95:8b:e2:74:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=7c90c11f-545b-4b58-8260-2e326d05a43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:5c:97:ff:c9:1e:1e:d3:80:f9:35:f3:7e:
                    5a:68:26:6f:0b:8c:38:a3:82:2d:eb:f5:f5:85:17:
                    ea:4f:ac:c8:53:22:a9:0c:d8:11:47:26:92:bd:33:
                    8f:4e:8a:f9:76:dd:bf:8d:af:68:2d:fd:61:7a:54:
                    59:f0:b7:13:89:ae:35:2a:9e:ad:f2:3b:2c:46:aa:
                    72:76:8c:b6:ea:55:04:59:b6:b0:ca:91:3f:c8:5e:
                    ff:5f:65:23:46:d1:9c:c1:22:d8:64:1d:fa:6f:d6:
                    9d:94:f7:c5:75:71:23:e8:cb:a3:ab:b8:25:18:d0:
                    95:8b:89:b4:8e:28:b5:26:a6:51:8d:c5:38:4f:40:
                    23:a7:34:4e:4d:8b:06:30:78:b6:42:00:46:2c:aa:
                    df:6a:a9:57:33:56:2d:e9:56:0e:35:3d:5f:98:73:
                    ae:33:ce:34:46:d2:76:ff:c3:03:23:f4:21:8e:50:
                    ed:68:12:45:de:84:09:41:32:43:b3:73:cf:c1:21:
                    de:f2:44:04:17:57:64:ca:ea:fb:c5:80:4e:6a:4e:
                    c0:63:26:a1:12:07:fb:5f:49:93:b6:d0:32:0a:de:
                    1b:46:aa:65:33:d7:4d:c2:10:59:93:df:aa:23:b5:
                    f6:9c:49:53:8f:45:96:5c:f1:33:aa:e5:ce:1f:a4:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:A4:15:C4:25:34:B0:A1:18:AB:93:21:36:F4:7D:4A:6E:7A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e968a981-4a08-34cc-8577-9b51f096751b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:f100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c0:aa:7c:7b:a7:85:57:8c:15:1f:81:6d:97:ea:a1:63:04:
         5f:1c:f8:88:aa:8d:00:90:59:2c:1e:57:7f:e3:0b:2d:76:b7:
         0d:0e:e2:f7:57:22:fb:91:c8:e0:76:b3:c8:21:a5:a5:8e:ab:
         05:d3:07:c3:9f:d8:92:6e:ac:54:ee:11:99:a1:88:bd:29:25:
         4d:a3:f6:56:b4:ef:38:9b:9a:5e:47:40:9e:29:91:97:f0:25:
         51:8a:f2:22:f6:a7:43:ad:ff:0c:03:10:d5:56:db:4c:60:f4:
         a1:11:00:6e:b3:5f:78:02:1c:96:d0:94:48:91:67:07:5b:32:
         e3:1c:6e:07:8a:3d:5b:23:52:07:de:22:0d:b3:a3:26:5e:c0:
         10:f0:e2:05:4b:47:68:fd:36:27:46:32:8c:62:36:c0:00:29:
         6d:12:66:28:97:b5:27:00:41:59:19:f9:87:ee:68:75:fe:5b:
         c5:d8:f7:79:ef:1e:41:7d:2b:40:7f:6a:da:19:25:b1:7f:83:
         d7:58:47:97:4c:6f:1a:60:48:51:ac:b9:4f:ee:33:58:fe:ea:
         73:97:c7:df:a4:64:e0:f4:75:de:2a:a9:d1:42:54:b5:54:18:
         f5:68:14:4f:fd:5f:f2:12:2a:a8:93:d7:aa:b7:cb:7d:d8:2d:
         ae:4f:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:27:17 2026 by rpki-client