Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ec551c1-fbbc-34da-b3fc-d8f0887d8cab.roa
File:                     3ec551c1-fbbc-34da-b3fc-d8f0887d8cab.roa (raw, json)
Hash identifier:          BYg3xMltIupBWgqliiioZMt5FOa3yuC737cZegOWqfk=
Subject key identifier:   80:42:59:77:99:D5:F3:85:8A:08:B2:7E:BA:50:53:0F:99:A2:7F:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87DA826207789FD32F2C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ec551c1-fbbc-34da-b3fc-d8f0887d8cab.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1017:b420::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:da:82:62:07:78:9f:d3:2f:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=0678893a-b9e8-417a-862d-e4e8d3a7e078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:89:87:3d:02:de:c1:05:18:2f:bd:ac:7e:
                    9c:74:11:42:f6:ac:1c:c4:26:d2:ba:6b:29:9f:06:
                    07:36:6e:7a:6d:cd:61:2c:4d:26:63:02:2d:7f:45:
                    ef:56:1a:02:34:b9:71:92:b9:6d:3c:1f:55:e9:d5:
                    52:a5:a4:e2:67:0f:a7:8e:ca:f8:7d:d4:8e:58:65:
                    99:08:f3:4c:86:48:d7:94:94:ce:ea:08:39:42:b0:
                    a0:b9:07:65:4e:7e:20:8d:df:c3:a4:26:e6:27:27:
                    a0:d9:eb:ee:01:fe:f3:c0:6c:9e:84:fc:06:d2:6b:
                    7e:11:55:1a:d3:10:81:2f:a3:4f:4e:5a:c1:8f:48:
                    ae:04:9e:98:b4:c0:22:a4:1e:d4:f3:c1:18:49:6a:
                    5a:a0:0d:a5:c0:3e:c2:18:e0:7e:0e:50:11:47:14:
                    fe:43:dd:3a:79:cb:63:45:de:39:d2:65:3e:74:03:
                    bd:4f:e2:35:99:17:9b:ef:8d:06:de:f7:6a:8b:72:
                    86:ff:84:5d:71:7f:ab:eb:66:65:b9:c5:bc:10:56:
                    c5:29:ed:e6:40:f3:fc:63:ae:f5:68:af:35:b7:07:
                    99:4c:b5:27:a6:b4:60:d4:ee:bc:dc:d5:8b:fe:e5:
                    31:1b:5e:28:0d:fa:6f:13:52:14:1c:ef:ff:ce:90:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:59:77:99:D5:F3:85:8A:08:B2:7E:BA:50:53:0F:99:A2:7F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ec551c1-fbbc-34da-b3fc-d8f0887d8cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1017:b420::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:8a:70:70:a2:a3:2c:0a:1d:fe:f1:d1:b4:fc:1f:09:24:
         28:db:83:1b:b3:ef:4b:3b:0e:2e:8f:13:71:8c:5a:b7:47:2b:
         aa:dc:6d:24:e7:7e:32:34:ac:27:c3:d0:85:e8:7a:5d:1e:68:
         38:15:3b:2f:b3:06:b0:04:ce:0c:e0:bd:7d:56:72:ec:a2:58:
         6e:07:1f:1e:c2:23:9f:44:23:f2:67:8c:9c:2f:46:0d:a1:bc:
         9e:77:8c:c5:12:01:20:70:4f:d7:8d:d8:83:d4:26:33:e5:04:
         74:b7:65:14:2a:f0:9f:7c:f9:de:7b:14:d3:98:ab:c0:54:cf:
         3a:c2:c4:da:65:d7:0c:10:01:c0:e1:e6:42:50:21:61:9f:e1:
         07:0c:ef:78:ad:97:6d:f1:08:3a:8a:fe:9e:98:4a:87:6c:bd:
         80:56:84:7a:95:9d:57:63:96:c9:76:6f:ee:70:9c:9c:b2:e5:
         0b:e5:f5:7b:de:66:e7:5e:98:8f:ac:3b:bd:06:8f:59:33:61:
         45:90:6c:5d:fb:7c:12:15:1c:1d:63:5b:76:fb:35:b3:57:f2:
         6d:2f:e6:e0:2f:9a:49:ec:f0:90:18:de:bd:ad:1c:27:9a:01:
         4d:56:9a:6f:15:d4:d8:33:94:fd:ca:19:96:2d:b1:f2:2c:5d:
         35:bb:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:00:52 2026 by rpki-client