Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a21d23d-5601-3e47-8699-857924c4db7e.roa
File:                     3a21d23d-5601-3e47-8699-857924c4db7e.roa (raw, json)
Hash identifier:          NZyUXBIm7Ossn7I3KpPEFV5dXfYvffUA0gQJiuepAB8=
Subject key identifier:   87:9B:ED:84:62:81:3C:AA:2B:04:89:05:81:2D:78:96:5E:70:05:8F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F17323BABE9C2AE11F94200AA
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a21d23d-5601-3e47-8699-857924c4db7e.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     6167
IP address blocks:        2600:100d:f022::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:3b:ab:e9:c2:ae:11:f9:42:00:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=bef9cced-4e0c-42b7-9b09-8eeb65f01a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:77:9f:ad:83:35:20:63:5c:d1:c5:05:10:
                    36:09:30:eb:c6:de:70:e3:25:ca:ee:ab:e6:db:8e:
                    52:c4:1a:60:9b:d6:bb:83:bb:6a:67:5a:e2:9a:9c:
                    ab:d5:fc:7e:29:6d:fd:a5:4b:c1:ea:bd:2f:d3:b6:
                    8b:6b:33:55:67:b7:af:9e:99:a8:cb:5c:d0:7c:2c:
                    e0:27:a2:ab:6c:a3:66:28:43:7f:a0:45:99:fa:cb:
                    ce:c7:2c:56:9b:5a:e9:26:eb:6e:86:96:b7:f4:20:
                    91:a2:6c:4b:e4:13:8d:ee:43:fa:8c:31:24:9f:07:
                    40:96:2b:a3:84:16:e0:f6:63:5d:82:e5:c9:04:bd:
                    7d:13:a2:e2:98:40:fe:9b:5b:7d:7c:5b:0f:70:c1:
                    7a:85:41:9b:3e:3a:e2:f9:b9:aa:78:cd:4e:40:cf:
                    6f:8a:c3:f6:1c:e8:09:a2:56:e3:3c:b0:f8:7c:be:
                    d6:e1:d0:3b:8e:b0:49:01:3b:16:74:7e:9e:91:79:
                    4b:6f:18:cc:15:0b:5e:c8:c7:d8:7a:e3:2d:cf:dd:
                    7e:87:7c:02:f0:19:56:c1:67:6e:ae:e4:72:31:c8:
                    6a:79:89:58:0e:fc:b5:94:76:fa:7d:e1:11:9b:bf:
                    a7:74:02:b1:51:24:a4:fb:96:a0:e1:ba:e5:dc:e1:
                    8b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9B:ED:84:62:81:3C:AA:2B:04:89:05:81:2D:78:96:5E:70:05:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a21d23d-5601-3e47-8699-857924c4db7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:f022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7c:c2:32:c1:b7:bd:4e:6f:69:f7:e6:35:5e:28:d4:67:01:
         5a:3b:63:7e:99:4f:62:68:29:da:1e:dd:2c:a3:db:d8:29:49:
         26:5a:18:f3:20:c8:a3:a4:db:c0:91:a6:0e:4b:fb:45:a5:c5:
         60:39:4c:1d:68:b7:14:27:e7:0c:33:73:3f:7c:5a:8c:ae:6a:
         79:02:2d:87:e0:a4:dd:40:f6:10:12:eb:2d:42:2c:0a:f9:73:
         f3:cc:c1:85:c9:79:93:ae:3a:4f:43:46:8f:6f:4f:3d:75:be:
         dd:7f:45:9a:08:9e:43:a9:1d:f2:c5:6b:7f:ae:30:37:48:07:
         1e:15:78:09:df:02:ce:82:23:cd:3d:f3:6a:22:4c:f7:c8:cb:
         4a:48:bb:a7:6c:cd:2c:ae:3a:89:6b:ee:ed:62:1d:72:14:a8:
         c6:34:07:ea:50:c6:1b:ad:ae:a2:04:ce:97:ec:cd:45:ce:9a:
         77:d4:30:ac:7a:89:7b:49:c6:cd:b2:45:23:5a:ac:75:71:d5:
         93:c8:72:00:52:b0:45:d8:82:e7:69:65:9c:af:1f:32:00:e4:
         0f:af:24:d7:4b:8f:f7:55:3c:67:b4:e4:11:0b:87:6e:0d:67:
         9e:c6:5b:0b:55:03:e2:67:52:72:9c:c6:d1:20:9c:86:20:c3:
         23:9f:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:51:11 2026 by rpki-client