Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa
File:                     374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa (raw, json)
Hash identifier:          oL9KR+a5Yt6Pd3tKh8nCuK0uRyF7+peBdA+LcAWlkRI=
Subject key identifier:   14:A4:EC:AD:16:E6:C8:0B:9C:C3:A3:C8:21:69:C7:11:04:17:37:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87CD4271328E6E336A7A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1011:a110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:cd:42:71:32:8e:6e:33:6a:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=677b396f-669b-4124-bf37-601d2d9dbff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:ad:52:0a:5a:e2:5e:92:eb:59:42:e1:57:
                    a4:1f:1b:28:5d:3b:65:bb:08:dd:4d:56:0a:4d:95:
                    53:89:14:c9:63:b2:79:ee:6a:18:4a:d4:52:69:c7:
                    bb:87:c4:fa:97:a0:e1:c7:cb:cb:40:43:98:48:30:
                    89:39:07:44:9d:12:ea:16:25:7f:2c:9d:ee:58:86:
                    08:9c:57:61:68:10:a6:ed:cc:06:5f:3a:60:09:18:
                    b7:91:19:a1:18:67:ae:d1:9b:3b:2e:09:bf:c8:90:
                    f9:28:0d:47:68:49:b0:92:fa:2d:27:d0:24:b9:12:
                    d2:92:f4:54:29:d0:a6:e6:5a:2d:62:93:61:10:db:
                    f9:a4:a0:09:b0:a5:a0:ec:5c:85:a7:ff:8f:19:f1:
                    19:9c:35:a1:b2:17:d0:a2:e1:72:1b:7e:e9:f1:32:
                    b5:84:f3:b1:b4:50:1f:83:f6:6c:50:e5:77:d1:fa:
                    7c:d9:ed:8d:11:c3:5e:cc:bb:8f:ea:69:5f:b7:aa:
                    48:0f:6a:ec:e2:78:8a:a8:fa:b2:0f:39:75:89:84:
                    3a:35:a4:e6:60:ee:9c:18:22:49:6a:d2:4e:df:f8:
                    37:ca:99:42:a3:3e:f6:2b:5e:9d:5e:4b:48:3d:06:
                    34:b7:24:2a:b6:ee:a4:e7:02:54:a2:ce:1d:4b:11:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A4:EC:AD:16:E6:C8:0B:9C:C3:A3:C8:21:69:C7:11:04:17:37:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/374e5ed4-5bc1-33be-a2ed-13296a2b3875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:02:7e:27:6d:48:dc:2f:64:06:4a:6d:a0:cc:eb:6b:0a:a3:
         f8:bd:08:fb:32:e9:7e:33:28:ad:82:73:47:fa:f3:43:ed:a8:
         01:63:76:fd:65:fa:e9:a9:e1:85:77:d1:92:97:36:36:69:6b:
         69:dc:73:9f:cf:ae:5a:17:c8:98:1e:ce:08:5f:00:21:d3:dc:
         b4:6e:50:23:87:9b:04:be:a4:ce:f4:ba:ea:82:b4:0f:9b:70:
         ce:ec:49:87:81:70:11:7e:68:3b:7a:bb:33:9f:60:9b:e9:fb:
         29:27:c5:73:98:bc:6c:cf:de:5b:07:67:29:70:fb:e1:3b:69:
         88:10:67:e9:71:13:48:5b:ad:cf:54:fd:f8:d1:97:4b:1c:61:
         24:3d:ac:dc:75:46:29:7a:ba:74:aa:5c:65:43:11:9a:f9:c2:
         4b:91:70:a8:d5:ef:b8:61:03:6d:57:39:b0:15:ce:09:77:f0:
         36:dc:d5:60:98:f0:7e:39:5e:01:3e:31:65:e9:26:52:85:61:
         44:73:b7:cf:c7:4b:d1:3e:e3:9f:2f:db:4d:35:46:01:53:9c:
         c9:80:df:c3:74:4c:9c:ea:69:e2:09:09:3e:32:59:de:5b:f8:
         5b:44:3d:6f:c8:2a:bb:47:48:83:79:18:70:ee:7e:44:78:cb:
         3f:2d:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:28:46 2026 by rpki-client