Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/600e6b8c-0b05-3b70-8d6c-1c8c1dec2dba.roa
File:                     600e6b8c-0b05-3b70-8d6c-1c8c1dec2dba.roa (raw, json)
Hash identifier:          0Z8h5vPCHKzKbNK8eBTzjpHeRaYWlfn6VwLTU01pri8=
Subject key identifier:   49:97:67:48:5D:C5:D6:98:C5:67:79:1E:FE:76:46:E8:84:D2:5F:6E
Certificate issuer:       /CN=87132220-d69c-4e1c-9689-e9ecb5a1d847
Certificate serial:       010D0C9F4328584F45429B151DBBD68098AE5E00
Authority key identifier: 12:E6:93:7E:46:63:C3:D9:3A:4D:D3:DB:68:2B:F6:89:C7:15:F8:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/600e6b8c-0b05-3b70-8d6c-1c8c1dec2dba.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     714
IP address blocks:        2001:506:204::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:9b:15:1d:bb:d6:80:98:ae:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87132220-d69c-4e1c-9689-e9ecb5a1d847
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=f605e540-2945-40e6-92e9-c7577214976b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8e:9c:55:c4:8c:fb:de:4a:18:15:b7:60:e1:
                    70:a6:ad:21:18:f0:2a:83:13:dd:c9:f5:f8:72:6e:
                    84:5c:dc:62:5e:b0:d6:2e:74:f5:4f:e9:98:94:92:
                    62:fb:bb:c9:63:b1:93:cd:ad:98:92:6a:d2:5d:86:
                    e7:c4:6b:89:6e:58:53:db:c5:02:c9:97:dc:bf:19:
                    a4:68:2d:4f:02:d0:35:94:3a:be:d1:7c:cd:0c:09:
                    6c:a0:3f:1c:fa:54:e9:60:34:5e:71:36:f7:21:e5:
                    26:15:80:af:38:db:d6:40:f1:f9:85:5b:b5:eb:f7:
                    61:f3:46:ad:27:cd:23:5a:c3:17:8f:d1:b2:a2:24:
                    47:54:25:73:89:0c:a6:bc:1b:a9:63:da:a0:82:44:
                    57:7b:6d:ee:64:5c:7b:f3:ed:65:43:3d:78:4f:48:
                    0d:cb:7b:56:f0:b1:f6:53:4c:8b:ad:6b:3b:48:1e:
                    48:0f:e4:fd:68:04:11:ca:b8:d3:ab:96:e6:ea:8d:
                    bb:83:5a:c9:28:e4:18:fb:a9:54:0e:d2:c4:8b:30:
                    2c:fb:63:ce:48:b4:8c:50:76:8f:94:80:0b:13:ab:
                    e1:11:1d:fc:5b:6d:34:02:56:0e:41:ba:a7:11:ca:
                    ca:db:d1:00:72:65:15:97:0a:ca:62:03:de:e3:d1:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:97:67:48:5D:C5:D6:98:C5:67:79:1E:FE:76:46:E8:84:D2:5F:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/600e6b8c-0b05-3b70-8d6c-1c8c1dec2dba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847/87132220-d69c-4e1c-9689-e9ecb5a1d847.crl

            X509v3 Authority Key Identifier:
                keyid:12:E6:93:7E:46:63:C3:D9:3A:4D:D3:DB:68:2B:F6:89:C7:15:F8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/87132220-d69c-4e1c-9689-e9ecb5a1d847.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:506:204::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1d:0e:8a:7d:40:2e:d9:64:1d:93:f3:7d:37:53:8b:db:2a:
         d8:a0:3c:b4:7b:42:51:db:dd:6f:6a:08:d3:68:a0:c9:ac:f3:
         cc:ed:9c:6a:76:f9:a1:93:98:96:1d:7a:30:cd:99:b2:e5:ed:
         66:8c:56:bc:6a:09:69:48:95:99:fb:78:13:dd:47:cf:52:1b:
         ca:c4:5a:73:4b:7f:04:17:5a:88:5f:e2:2e:7f:42:fb:9d:24:
         4a:e3:64:15:da:71:57:9f:04:12:20:9e:63:63:98:61:5a:d8:
         6c:94:48:4d:4a:2c:6b:c4:00:f3:2d:39:1d:e9:79:c4:79:18:
         2f:aa:f8:f3:1a:a9:bd:22:f1:25:15:b3:62:6b:dd:83:a6:b2:
         fd:b7:18:3c:20:7b:a2:b6:38:5e:e1:39:9d:8a:87:5d:64:f3:
         74:50:28:a4:83:72:55:6e:b7:57:b6:63:4e:b1:40:4d:1e:cf:
         42:d8:c4:b4:42:dd:ff:fa:06:e0:ff:1a:18:a8:67:11:96:bc:
         89:0f:1e:de:59:38:da:d7:5a:b2:ec:16:ff:6c:ff:b6:90:50:
         a1:c9:ec:97:e5:22:6e:b7:d9:f6:2c:81:aa:70:87:3d:62:cb:
         ba:04:ea:0c:f0:34:c2:74:45:7b:b2:29:c3:22:24:f8:72:c9:
         05:6c:e5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:03:41 2026 by rpki-client