Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f348e087-b04f-376b-a4f8-8324246bc223.roa
File:                     f348e087-b04f-376b-a4f8-8324246bc223.roa (raw, json)
Hash identifier:          ZJxO8ksyE1GUYIVttjmweUTsQtOeyZmMP2je/HHfAZA=
Subject key identifier:   55:A9:CE:53:7B:E5:A4:F3:26:F2:B4:9B:B6:D5:33:D8:A0:41:51:6E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87D8B0B0083DB19A73B200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f348e087-b04f-376b-a4f8-8324246bc223.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1016:b120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:d8:b0:b0:08:3d:b1:9a:73:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=c148ab3d-30ee-4bdc-be7a-df5ced96d3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bf:98:2b:c9:98:fc:e1:f8:ef:e4:68:f4:f0:
                    99:ad:db:0f:43:39:7e:dc:aa:b0:5e:3a:6a:0e:33:
                    17:90:98:c5:44:29:c5:ed:0a:cc:cf:a3:2e:33:e2:
                    65:6c:8f:63:2c:d7:4d:8e:db:16:71:d8:6b:f6:6c:
                    9a:65:e0:ea:39:19:bd:9b:b6:cd:d0:0d:a0:ba:63:
                    14:9f:60:1a:e6:8f:fd:34:15:0b:e2:67:ff:e3:ce:
                    61:f1:ce:05:2e:cd:6d:01:76:80:b9:13:dd:75:e4:
                    e0:18:99:7e:70:fb:45:12:66:a0:83:44:a5:76:b2:
                    95:91:71:75:82:ac:48:5c:a1:8f:d1:28:c2:a6:1e:
                    39:03:a9:c4:d8:21:ea:73:8b:65:9e:fe:87:70:f9:
                    e3:56:b7:79:02:49:a1:79:f0:41:68:6b:b6:46:94:
                    d3:1b:77:61:8d:37:cd:fb:48:4e:b4:1c:5f:ce:eb:
                    52:32:c0:cc:76:20:31:43:6a:9e:de:4c:c8:d9:a2:
                    b2:79:57:17:5a:d1:68:40:87:01:f8:b7:6b:a9:f5:
                    d7:6a:db:c8:a2:55:50:eb:bb:24:9c:2c:aa:9d:49:
                    2b:78:c6:c1:b6:9e:d1:d3:1a:df:5e:e8:0d:1e:d1:
                    ca:2f:5f:f5:7a:6b:c1:e2:d7:9b:10:ee:c7:4a:32:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A9:CE:53:7B:E5:A4:F3:26:F2:B4:9B:B6:D5:33:D8:A0:41:51:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f348e087-b04f-376b-a4f8-8324246bc223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a7:04:67:eb:cb:2c:52:05:1d:ae:f2:76:67:1a:93:7f:36:
         ef:fe:c9:0d:88:f0:e6:f9:f4:6e:97:b9:1a:c9:fb:af:4e:84:
         28:2f:3e:31:b9:d3:58:b5:41:48:ef:c3:7e:2d:89:e5:45:bc:
         f6:a0:d2:e3:8d:a9:ab:97:13:e7:71:ec:53:5b:bc:8f:4f:c8:
         d7:18:34:79:08:93:1b:0c:04:64:4a:be:8a:1d:1b:3c:da:09:
         70:a5:a1:6c:b2:0c:11:ff:3c:c8:c5:03:6c:d5:ec:32:ca:bf:
         01:3b:98:52:4f:62:c8:49:0e:35:de:7e:13:19:12:0e:29:c1:
         37:0b:c7:cd:37:68:89:0a:56:d7:71:86:63:46:77:46:93:99:
         16:11:0b:4f:ea:a8:bf:31:66:f4:f1:3d:c9:56:f2:99:0c:61:
         0f:89:26:fa:de:cf:d6:9b:37:bf:43:56:5d:fb:fd:93:8a:b7:
         d3:05:1d:d2:54:5b:ac:6c:45:f8:43:7b:6c:a7:4b:8c:a6:20:
         f5:0d:0a:70:2e:be:8f:ee:05:02:45:cf:98:9c:df:06:a8:8b:
         13:c3:d2:5e:07:cc:f3:a5:6a:2a:21:8a:14:ec:04:71:e4:eb:
         b5:c2:59:89:51:ac:30:70:1a:0e:53:a4:e4:86:9a:9c:a0:68:
         65:33:98:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:03:43 2026 by rpki-client