Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6066873d-ccac-314e-aca6-f2749423a71c.roa
File:                     6066873d-ccac-314e-aca6-f2749423a71c.roa (raw, json)
Hash identifier:          ICIcb9QRhwocYJk1hu/j12fHo4MrlWpZaYxijGVuxIs=
Subject key identifier:   4D:6E:70:32:30:8E:5F:F4:DE:A7:55:CC:EA:2E:9B:C7:6F:93:22:C6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD53B9B7ECA969C7338A30
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6066873d-ccac-314e-aca6-f2749423a71c.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1006:a020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:53:b9:b7:ec:a9:69:c7:33:8a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=7d149a5e-edb9-4816-aa58-2c3b11c413f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:49:cc:f7:22:52:b7:44:ca:b4:91:2e:ac:31:
                    da:6e:86:62:c4:80:5a:f5:c1:c4:cc:53:4a:2e:13:
                    a5:5b:81:67:e1:b3:6f:24:18:f7:66:cb:8e:d1:7c:
                    99:aa:e4:33:c2:f4:a4:4d:21:29:4e:ad:ff:ff:f5:
                    26:6e:bb:4f:9d:1f:99:0b:17:1e:a4:ff:55:52:85:
                    a3:73:53:31:4d:0c:8b:b1:c8:ef:94:44:f2:49:00:
                    ae:7b:1e:15:43:bd:29:1c:18:10:13:8f:30:35:34:
                    af:18:6f:cb:dd:b5:df:00:23:d3:c7:89:de:a1:c7:
                    2c:c7:c0:c1:69:12:67:8f:ba:7e:37:b9:de:62:8f:
                    41:86:e9:11:35:37:d4:0c:f2:99:f6:a1:60:44:c6:
                    57:c7:86:4b:3a:5e:72:e5:e7:4f:e1:7a:dc:66:cd:
                    19:04:44:96:15:4f:ce:26:8b:c2:ce:01:8e:25:b9:
                    e9:01:59:e5:1d:f7:4e:46:17:e8:13:13:c8:76:45:
                    ab:06:a5:30:34:61:bd:74:b3:a7:18:39:bb:b6:af:
                    5e:20:2c:7d:e8:7e:f6:ef:9a:1c:c6:2a:26:35:4f:
                    11:80:c0:57:d2:89:c8:57:b2:4b:59:b1:06:c2:2d:
                    b9:b5:aa:df:01:62:2a:14:dc:44:9a:19:fb:e7:61:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:70:32:30:8E:5F:F4:DE:A7:55:CC:EA:2E:9B:C7:6F:93:22:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6066873d-ccac-314e-aca6-f2749423a71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:a020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:16:4a:9c:ee:e3:21:c3:b7:89:b9:9b:3b:23:d8:cf:e2:c1:
         d0:71:dc:9e:30:36:85:73:cf:6e:00:95:fc:ef:3d:7d:65:49:
         7d:62:df:20:73:6a:86:2a:23:a7:07:bf:8a:1a:2d:55:86:e4:
         ea:08:3e:18:93:14:20:91:2f:ea:05:2f:35:e4:74:dc:95:1a:
         fc:68:02:84:9f:f9:9d:61:39:8f:c2:27:f4:d6:7b:15:b7:5e:
         d8:7f:9e:bb:be:56:92:9d:ee:01:8a:3a:bf:20:19:38:d5:d9:
         7e:57:d6:43:7f:df:5e:fa:e9:a4:a6:f5:04:7c:be:bc:5c:c8:
         4e:ee:ed:9c:65:88:8a:e0:36:47:0e:81:d4:ff:9c:70:1e:2b:
         86:25:d0:47:75:b6:a7:4c:f8:94:10:5b:5f:4c:7d:19:b0:48:
         88:c2:7b:83:a5:0d:8b:5f:99:99:44:c9:b1:cc:eb:21:c3:60:
         6c:9f:47:4a:51:e5:3a:ab:fb:07:b3:f9:4e:9d:1b:e3:bc:82:
         7e:f8:89:0d:eb:98:d5:c0:d9:59:80:5a:bf:80:e4:fa:64:24:
         5a:24:8e:ba:f1:ee:50:b3:1c:68:da:7d:bb:53:46:24:89:01:
         07:4e:71:9d:b0:73:63:1e:17:79:22:d1:8f:74:e3:fb:64:23:
         2c:72:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:44:14 2026 by rpki-client