Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d446c4c-5641-3c78-9278-89f7e3204b34.roa
File:                     6d446c4c-5641-3c78-9278-89f7e3204b34.roa (raw, json)
Hash identifier:          RR5nSqekf9WVj6gDP0jKSClbxi/i8592HBFTe94tuAM=
Subject key identifier:   D6:8F:E3:C5:E9:E0:F7:D1:A8:3D:DB:D4:D5:0F:53:83:52:E1:52:F9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD565F5E5DF11590265CC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d446c4c-5641-3c78-9278-89f7e3204b34.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1007:a000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:56:5f:5e:5d:f1:15:90:26:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=ea35310c-d0b6-465d-ab84-41d3383e5fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:13:07:12:e7:0b:34:65:bd:74:a7:e9:b5:35:
                    3e:d9:8f:ff:e5:80:f8:be:f8:7e:13:75:b4:36:5a:
                    a5:a3:2d:76:44:61:d5:97:53:88:0c:e5:52:64:b4:
                    fc:0e:78:2c:08:f9:f4:d1:ad:39:c9:23:22:08:3c:
                    a0:f2:b5:12:09:4b:71:98:a0:c8:2f:2e:a0:64:3a:
                    74:73:aa:88:51:de:c6:7d:83:9b:41:cb:fd:1c:1f:
                    65:cd:e7:a9:f2:c5:ee:21:0a:87:f0:38:c2:76:b3:
                    88:c8:9c:11:4f:29:61:e3:82:71:4a:e9:3b:f4:0c:
                    95:17:65:5a:00:cb:fb:c7:1e:c0:7c:f1:0a:46:bf:
                    e2:f3:93:a5:81:d1:f0:8a:7a:aa:ff:99:91:1b:35:
                    93:4a:5f:ad:9b:25:c8:19:89:00:0f:ec:3f:bd:b5:
                    d7:ef:20:3a:fd:ce:b5:78:d8:2e:40:19:bb:1e:88:
                    4a:9d:0b:f3:32:03:f8:b0:09:74:f3:67:e6:dc:0c:
                    87:8d:c0:db:86:10:f7:29:42:c8:0a:18:30:eb:77:
                    8a:83:a6:9c:31:ee:01:20:ea:a0:8a:7d:48:5c:85:
                    27:72:bf:be:a3:70:0c:80:f1:4b:c9:8e:d6:25:51:
                    da:8d:9e:fe:8b:e4:1c:0b:53:d5:a7:49:f8:b2:7b:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8F:E3:C5:E9:E0:F7:D1:A8:3D:DB:D4:D5:0F:53:83:52:E1:52:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d446c4c-5641-3c78-9278-89f7e3204b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7a:82:a4:95:43:ca:3e:b9:34:a3:d2:1a:a9:17:a4:60:4e:
         3b:1d:bf:6a:64:28:b2:7b:a2:ef:8b:46:79:01:62:b9:03:24:
         61:98:27:64:b5:a3:0e:61:3c:37:fb:a6:41:1e:99:e7:66:88:
         0f:ef:44:1e:ca:17:81:80:49:dd:29:0d:45:8f:11:8a:e6:fd:
         3c:68:14:70:95:c2:f7:83:c5:e3:c4:02:56:0b:72:7f:ad:42:
         97:9a:52:9c:c6:0e:f7:9f:ee:eb:92:57:0d:bd:53:b9:68:49:
         1d:3a:21:6e:da:de:ad:bd:23:6c:a7:f6:42:68:ac:61:b9:c4:
         b2:5f:0c:0b:b4:37:9b:7d:0b:c4:5c:54:47:c2:2d:99:ca:6a:
         ec:24:b3:c3:af:08:49:91:a9:91:dd:b6:b3:5c:1b:91:29:d2:
         82:ae:8e:2a:a7:b4:e8:db:2c:18:36:3c:05:2c:af:e3:bd:9e:
         a4:4e:3a:2f:c7:f6:ab:45:4a:cb:ce:53:d9:78:ad:fc:f1:4f:
         da:e6:76:d0:af:99:7d:16:44:1f:88:be:98:65:52:e5:02:27:
         75:ac:6d:fc:e1:b4:b4:10:5c:b6:25:83:55:b0:78:11:9f:e4:
         ef:bc:5f:eb:22:80:31:e3:da:17:87:16:be:f5:f2:39:06:78:
         52:e0:60:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:27:53 2026 by rpki-client