Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa
File:                     3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa (raw, json)
Hash identifier:          gD0LIL2ppN3BfzQl3eocZ4DL514GtxFAVUMadRyhA+0=
Subject key identifier:   D6:69:62:52:21:BC:0C:91:48:F0:27:2D:FA:3E:79:DC:36:6D:04:CA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87CE28D5EEFE97FBB15F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1014:a010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:ce:28:d5:ee:fe:97:fb:b1:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=742e4122-100b-4235-80d0-3ee10acd2580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:45:a3:07:9a:dc:94:da:17:28:01:84:93:
                    88:bd:52:e8:bf:7b:c0:e5:09:c9:81:3b:d0:53:82:
                    07:7a:c1:1c:ff:85:7c:b3:02:73:bd:0a:21:74:93:
                    7f:ca:4e:7b:2a:bc:42:16:60:ae:a1:63:ab:4a:9f:
                    02:36:8f:0a:e0:bc:8a:52:9c:39:69:72:cb:93:8e:
                    96:cf:c7:7b:8a:e7:ef:b6:b2:2f:df:36:7c:45:d6:
                    77:cb:3d:d9:7b:99:58:12:fc:ee:42:da:c9:b7:43:
                    b1:a2:42:d0:4e:c5:a1:b3:ae:ac:26:37:fd:b4:1e:
                    7a:db:58:7a:66:9b:c6:53:eb:ae:2a:b2:df:6b:da:
                    a9:1d:88:95:99:0b:3a:25:f1:33:2f:5a:dc:a2:62:
                    88:07:b7:b0:f3:01:ef:c4:26:a6:57:76:60:df:c3:
                    e0:2c:ea:10:01:83:69:9e:ef:f0:aa:d2:11:bb:5a:
                    c1:29:a2:63:97:b9:ad:7b:ba:c6:97:95:74:60:90:
                    01:e2:ee:4f:d8:1b:b6:01:bd:00:81:06:3a:09:f6:
                    d7:0d:7a:dd:7f:dc:13:9b:14:38:03:b8:44:35:b7:
                    de:44:10:0f:0b:e6:48:c8:71:80:95:40:ff:d8:e2:
                    99:c2:52:aa:70:c3:2e:fd:f2:b1:f7:ad:d3:c8:b6:
                    b1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:69:62:52:21:BC:0C:91:48:F0:27:2D:FA:3E:79:DC:36:6D:04:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b3d2f6f-d24f-3092-9050-8a32040c4aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:a010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ad:d4:e9:8d:d2:47:81:60:06:af:9b:ab:25:23:02:18:0d:
         d7:eb:71:bd:5c:b0:0f:b5:86:a2:7d:87:0d:92:8f:c6:64:17:
         81:82:1e:8c:90:3c:04:80:20:72:6d:85:61:6c:c7:3e:a3:57:
         42:ad:ea:45:cf:d6:cc:80:85:22:ab:8e:a1:f2:d6:79:26:2a:
         cf:76:f7:36:cc:3f:89:6e:a4:ae:e6:00:08:42:c5:0d:16:08:
         4a:3e:af:c4:01:12:e7:55:28:68:ef:48:15:5b:dd:7f:7d:ef:
         ea:f0:02:85:00:08:8b:ca:ae:cd:73:a9:1c:53:39:02:de:77:
         e3:91:33:5d:7a:65:bf:9f:c7:7b:bd:60:7e:5f:15:bb:99:b6:
         d3:15:dd:7e:57:7c:27:d6:20:b3:3d:f8:80:20:63:6c:d1:47:
         d8:9e:d4:46:5c:9c:28:ed:d1:0f:43:35:dd:e3:30:4d:c1:14:
         73:06:a7:09:a7:e0:d7:f2:0f:cd:68:fc:2a:31:9d:90:70:a6:
         15:cc:bf:6d:72:5c:dd:a0:a6:46:39:a8:72:91:62:30:5e:b0:
         75:82:3d:d9:d6:ea:1e:56:a7:03:61:cf:56:24:64:1c:b5:fb:
         3e:5b:8f:08:a9:11:0c:2e:59:f5:a6:aa:5d:43:48:da:2d:77:
         01:74:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:35:14 2026 by rpki-client