Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a0266ab-17f3-3aad-861d-a25fb2da1229.roa
File:                     3a0266ab-17f3-3aad-861d-a25fb2da1229.roa (raw, json)
Hash identifier:          gywUK/uJI6gwV86B8yF3pe+q5BF7XSYEO4Xl9QxtFxQ=
Subject key identifier:   20:81:2E:D5:0C:9D:08:72:8B:20:39:5C:E0:12:CE:FC:1F:1E:D6:B0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5E62F0FF20F411AB5CE04810
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a0266ab-17f3-3aad-861d-a25fb2da1229.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     6167
IP address blocks:        2600:100e:b340::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f0:ff:20:f4:11:ab:5c:e0:48:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=0956c039-a5cb-4a67-88ac-232c7ab135ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:0b:50:e1:fa:87:e8:bf:e5:3d:a6:86:cb:
                    a0:4e:2a:1d:e2:67:5d:1d:8b:9c:b8:55:92:de:17:
                    9a:b1:7f:ee:6b:48:2b:96:60:b2:06:f3:ec:2f:61:
                    91:36:57:c1:e4:3a:6e:b2:9a:4d:e0:1f:49:c0:13:
                    91:c1:cd:39:35:0c:25:f1:35:48:da:1d:3a:8a:85:
                    9b:04:56:e4:9a:2f:34:55:79:e7:0b:63:63:b9:5b:
                    da:99:20:8f:a8:82:7b:b4:88:a4:bb:f3:5a:ce:ed:
                    3e:b9:a8:2d:7f:c8:43:53:ac:5f:b3:25:85:fb:c0:
                    5f:52:b2:88:15:ce:d6:ad:1b:cf:7f:26:82:42:e6:
                    ae:0c:cd:af:b5:ba:9c:5d:a1:b6:79:d5:51:31:37:
                    aa:14:cf:e6:65:ba:82:c9:80:95:ad:88:77:21:49:
                    68:9c:c5:38:e3:ea:d8:31:ef:5c:fa:29:db:39:76:
                    bc:7e:39:f1:21:04:28:2c:7f:a8:cf:4e:81:df:0f:
                    5d:4b:96:48:77:3e:a7:6b:d9:64:d4:a8:39:1a:34:
                    d7:93:3d:ef:06:71:d9:a8:f8:2f:b2:ad:ca:46:c7:
                    19:78:67:eb:32:99:e3:d3:33:5d:ed:28:eb:ac:97:
                    ab:e2:d8:46:80:e5:9e:f6:22:94:68:99:96:87:82:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:81:2E:D5:0C:9D:08:72:8B:20:39:5C:E0:12:CE:FC:1F:1E:D6:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a0266ab-17f3-3aad-861d-a25fb2da1229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b340::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:32:60:20:7e:17:e0:8d:96:d1:b1:73:52:39:b0:07:bb:cc:
         e4:49:00:40:ee:16:1e:b5:20:ee:b2:41:f7:06:58:4a:9f:5c:
         6b:04:82:66:3a:ab:b6:5f:c0:64:b4:07:d4:c6:13:37:40:ca:
         58:31:e9:d6:da:d9:23:0e:40:48:7a:1a:bb:8b:96:4d:66:58:
         bd:6c:c2:7e:78:b3:41:b9:44:1a:44:83:a9:71:ac:c2:89:0d:
         cd:7d:bf:bb:0a:59:d1:85:07:00:35:ec:05:87:6a:e0:51:cb:
         8a:ba:65:61:34:e9:d7:63:d7:04:79:2f:32:86:91:8d:b3:71:
         91:f9:1f:19:21:91:01:0c:8d:0b:bd:9b:f9:c9:43:b6:57:0d:
         f1:a8:fc:01:12:8a:42:6a:45:b7:05:99:9d:cd:7b:ae:2e:6f:
         a6:dc:04:c2:3f:a4:5e:a7:45:f3:d3:b1:10:80:cf:4d:01:a3:
         da:23:eb:50:a4:40:56:13:d4:26:8f:53:e6:a1:c5:65:17:72:
         0e:3b:f7:64:f2:b0:10:d0:20:49:ae:ed:dc:14:a1:f5:19:6b:
         4b:64:98:f4:8e:54:06:3a:cf:08:df:a8:e2:9b:91:d7:79:80:
         5c:84:7f:f6:8b:d1:69:1c:09:50:95:36:64:4b:3b:c3:e3:dd:
         71:51:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:57:08 2026 by rpki-client