Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/73a3561a-f229-325a-b6b9-d4be374d5d8b.roa
File:                     73a3561a-f229-325a-b6b9-d4be374d5d8b.roa (raw, json)
Hash identifier:          yB79dL0yAmsM7s3n9bZrDveFESF3QDF0OwuGOXQu28A=
Subject key identifier:   03:DB:6D:A6:DD:71:EA:EE:C8:32:1D:73:0B:F7:8F:BF:F8:BC:9E:35
Certificate issuer:       /CN=60cf5ad8-4c66-4ed9-8456-123c69bdd612
Certificate serial:       010D0C9F4328584F4986D7AA5F0D7DDD61DB8A80
Authority key identifier: 42:08:21:29:9F:A6:CB:AE:CB:C7:5D:9D:66:63:10:18:8F:68:FD:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/73a3561a-f229-325a-b6b9-d4be374d5d8b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     31945
IP address blocks:        2602:f49a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/60cf5ad8-4c66-4ed9-8456-123c69bdd612.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/60cf5ad8-4c66-4ed9-8456-123c69bdd612.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:d7:aa:5f:0d:7d:dd:61:db:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60cf5ad8-4c66-4ed9-8456-123c69bdd612
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=acde6894-bb88-487a-bcc8-efa8a0250715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:6c:a3:f1:f8:3c:06:be:c6:54:f0:f2:f6:
                    56:2e:09:37:69:90:dd:61:60:4d:24:b8:71:ed:44:
                    80:47:51:8e:9e:63:0e:4f:62:53:4d:16:45:b0:fd:
                    2b:00:05:98:f8:00:83:0f:11:6b:31:f6:50:7d:ec:
                    7d:69:9c:aa:10:ed:ff:12:82:ce:00:e4:69:92:90:
                    ca:97:6d:75:18:a1:03:8c:3e:41:47:ac:a5:91:96:
                    34:5a:43:ae:1d:27:61:f8:ea:d8:e0:d3:6a:60:01:
                    a7:a2:87:9a:3c:57:24:54:32:8c:72:e8:a5:55:89:
                    a9:42:f8:a6:92:f3:d3:32:86:50:8a:f8:38:ef:e7:
                    fb:43:1d:6e:a9:91:19:d1:0d:56:87:cb:c6:fd:28:
                    d6:3f:bb:24:18:58:8c:50:50:0c:18:c1:7e:8c:90:
                    15:0b:c2:74:f9:a2:50:01:cb:8a:4b:4d:e8:81:be:
                    d7:cf:13:10:f3:03:31:4e:62:22:eb:fb:45:5a:a2:
                    42:68:b5:58:0a:5d:78:f8:9e:12:90:54:31:be:3a:
                    e9:42:a9:74:25:98:4e:db:f0:f4:12:d7:47:1b:a8:
                    3a:0b:ce:02:37:76:9c:85:46:47:ea:a5:f8:6a:b6:
                    c0:84:cf:30:cf:0a:88:37:4b:07:22:ba:46:a9:7f:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DB:6D:A6:DD:71:EA:EE:C8:32:1D:73:0B:F7:8F:BF:F8:BC:9E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/73a3561a-f229-325a-b6b9-d4be374d5d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612/60cf5ad8-4c66-4ed9-8456-123c69bdd612.crl

            X509v3 Authority Key Identifier:
                keyid:42:08:21:29:9F:A6:CB:AE:CB:C7:5D:9D:66:63:10:18:8F:68:FD:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/60cf5ad8-4c66-4ed9-8456-123c69bdd612.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f49a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:6a:b4:47:ae:9f:dd:e1:50:9a:5b:81:00:b4:33:b8:b3:
         ae:3c:d5:a4:e3:1c:8b:f9:04:31:af:34:93:82:31:33:b4:1a:
         f9:42:d8:37:f9:a4:22:6b:4c:fb:d0:7b:bc:b0:5e:7c:fb:e9:
         69:c7:4e:8e:8d:8d:4e:ad:e0:3d:37:19:ce:37:05:f1:55:9a:
         48:78:67:5b:e1:a8:3c:e4:bd:a4:69:2c:15:d7:3d:fe:af:28:
         f7:96:e3:11:ac:a6:b0:10:97:de:ec:c9:36:81:30:75:27:22:
         9d:b7:d6:8f:fd:47:34:0d:15:27:c3:e8:d8:70:b8:35:d7:ec:
         68:a5:18:5a:39:a2:88:21:cd:be:8d:3b:06:2c:07:bf:ad:2e:
         8c:ed:54:94:fd:94:9d:d4:7e:cd:98:e9:47:74:57:28:de:8a:
         6b:1e:fe:63:dd:16:83:46:50:23:f9:aa:be:a6:a7:c5:6d:18:
         81:06:a3:fd:ec:7f:59:aa:62:a3:38:f2:ed:86:8c:10:c4:85:
         68:dd:e8:e8:3d:0b:51:3c:74:72:4c:e7:25:05:22:ab:07:ed:
         0f:f3:f8:b2:d6:5f:37:1b:14:da:88:8a:5b:9f:69:ad:3c:fe:
         8b:fa:5f:98:80:c5:0a:71:54:5f:64:a9:8c:1c:34:6b:32:88:
         7a:42:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:46:37 2026 by rpki-client