Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e99b6cb8-46b1-35b7-a1ec-ab0ed1b6d2f4.roa
File:                     e99b6cb8-46b1-35b7-a1ec-ab0ed1b6d2f4.roa (raw, json)
Hash identifier:          nAAgEkR2L04AYisgcJq9lYbrB4+KWWRteIK7zJbDH8k=
Subject key identifier:   51:75:C3:CD:5B:82:40:FF:78:1A:9F:AD:A0:27:8D:14:81:E6:F8:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87CB4B5F3786D5844AFC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e99b6cb8-46b1-35b7-a1ec-ab0ed1b6d2f4.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1010:b0ae::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:cb:4b:5f:37:86:d5:84:4a:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=c12f9203-3922-4534-819b-b0b88c595832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:2b:fa:1b:23:09:97:5a:05:82:8d:4d:29:
                    10:9d:f5:87:89:7c:c3:43:4f:18:e7:20:0d:19:69:
                    fd:d8:51:be:cf:be:37:3d:d1:45:39:f5:c6:c7:bf:
                    d3:2d:fd:67:4e:0b:3e:12:7f:bd:c8:e7:83:32:9a:
                    73:d8:70:61:9b:65:36:b2:b4:a0:56:dd:a6:8e:08:
                    12:29:26:eb:94:36:15:ea:97:43:40:b0:d8:fb:d1:
                    c6:60:b3:94:4e:dc:97:7b:18:f7:ad:bf:44:42:49:
                    60:fe:05:9a:7e:6a:58:35:73:66:19:19:72:9b:87:
                    20:fc:fd:46:73:c9:e3:e5:fc:81:13:d1:7e:3d:2a:
                    58:95:dd:33:38:54:cf:d3:5f:9c:83:9b:45:dc:cf:
                    09:ff:2a:7c:49:42:ab:23:42:e0:22:e9:1b:df:ee:
                    b1:a7:04:88:50:be:64:ab:07:0b:50:2c:3c:fa:66:
                    be:3b:c3:26:9d:53:a0:7e:74:d9:10:1f:56:89:d6:
                    7a:2e:e9:98:e6:6e:ee:8a:a1:16:e1:3a:c7:ff:ba:
                    57:c7:bb:53:5d:f6:eb:76:60:28:3e:b3:44:f2:a0:
                    10:3c:d2:de:d7:f1:92:2a:6b:85:21:61:51:37:c4:
                    74:43:38:61:62:6a:4b:d0:5d:dc:6e:a3:37:67:87:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:75:C3:CD:5B:82:40:FF:78:1A:9F:AD:A0:27:8D:14:81:E6:F8:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e99b6cb8-46b1-35b7-a1ec-ab0ed1b6d2f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:b0ae::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:de:1e:6a:be:21:e1:9c:35:06:a1:4f:1f:c3:54:32:94:
         5f:32:77:f9:8b:ab:42:1c:01:45:b7:e0:99:26:00:41:1e:5f:
         89:b7:13:17:d0:e4:a2:80:5a:6b:89:1b:6e:ed:81:6b:66:46:
         b7:69:39:26:04:86:f6:b0:db:90:a8:a4:51:74:48:9b:4c:ce:
         35:ca:a5:d7:32:e3:46:29:62:d8:c4:42:49:8a:56:ed:13:be:
         50:6f:0c:3e:29:6e:f8:77:eb:b4:b4:7a:64:8e:1d:e5:70:00:
         da:a7:5f:60:54:3a:14:03:b1:de:74:43:3a:20:6a:c8:34:d3:
         dd:56:3e:df:77:6b:50:47:43:bc:6d:39:21:6f:7d:0c:80:d3:
         0e:18:3b:cd:4f:f6:1f:39:62:88:5f:18:cf:14:01:9f:40:01:
         02:dd:0d:a4:4b:66:bb:c7:0a:29:03:48:98:4b:80:e0:d0:af:
         31:02:14:2c:53:6c:8a:41:ef:f2:56:5a:9e:45:c5:ea:9d:62:
         59:ae:37:d9:a6:06:95:9f:71:a0:26:38:f9:c3:4c:2a:19:32:
         5c:aa:2b:b6:af:b7:d0:61:ae:2f:1d:f1:09:b3:9c:d1:09:8a:
         e8:6f:9d:88:5c:dc:e4:84:38:fd:66:89:d6:6d:f0:6b:39:0d:
         b1:84:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:44:29 2026 by rpki-client