Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d4040b4-7778-327c-9e53-5aec7ad49cbc.roa
File:                     8d4040b4-7778-327c-9e53-5aec7ad49cbc.roa (raw, json)
Hash identifier:          SdFVhd24HqosRftbTLXUjc7dyXOBEESV7EV91pyBTrY=
Subject key identifier:   5B:05:C0:D3:8C:76:C8:9F:B6:91:0D:5B:6E:08:36:7A:E3:2C:35:7B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD7CEDECAB4F5463A99440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d4040b4-7778-327c-9e53-5aec7ad49cbc.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1004:b0e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:7c:ed:ec:ab:4f:54:63:a9:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=690e8d19-6637-4ac2-aaf9-58825da6d9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c4:47:fd:30:96:66:3f:b9:30:41:24:46:ae:
                    fe:cc:7d:a4:ad:02:8c:80:7f:dd:ba:35:9a:68:c7:
                    84:5f:4f:d6:e9:08:9e:90:75:15:8f:1a:1f:25:4e:
                    59:6b:d2:80:32:b6:0a:e7:c9:89:83:45:a7:59:71:
                    a9:a9:e7:d0:20:63:d4:65:07:f4:d6:c9:f9:d6:57:
                    8d:67:09:97:b1:cb:14:82:9b:fc:81:1b:13:81:f9:
                    1e:e0:7e:32:47:7e:22:9a:f1:26:8b:c1:87:6a:5a:
                    2b:75:df:3c:fd:44:79:3e:70:79:ac:cb:79:43:17:
                    16:de:d7:67:3d:a3:d0:53:ae:1d:48:d9:fb:86:9d:
                    7a:ec:5f:fd:43:11:29:86:e6:c7:f8:42:e3:e4:63:
                    e5:36:17:75:41:90:9a:40:c6:7d:83:b5:f2:30:42:
                    e6:2e:73:6d:55:48:b5:54:1c:5e:20:83:67:98:21:
                    cd:71:9c:a3:73:de:9a:99:9a:70:e0:02:90:f8:e8:
                    96:97:49:cc:37:d9:3a:d1:24:24:8c:22:7a:66:ab:
                    cf:b6:91:4f:dc:e9:0b:1d:01:0e:df:fb:af:4f:e7:
                    c3:a8:6c:56:9f:e8:fa:24:c6:90:d5:8e:08:0c:90:
                    6f:3c:e2:3a:e8:09:5a:51:d2:68:85:59:93:2f:2f:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:C0:D3:8C:76:C8:9F:B6:91:0D:5B:6E:08:36:7A:E3:2C:35:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d4040b4-7778-327c-9e53-5aec7ad49cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b0e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f8:88:ff:d9:b3:d7:c0:10:0a:37:46:d3:f5:07:c1:6d:fc:
         94:3a:5a:b6:55:0d:bd:3b:ab:a1:5a:a9:7d:86:26:57:08:4c:
         c1:0e:30:79:11:c3:d4:dc:25:b0:f6:13:59:cc:a4:65:5e:ab:
         dc:aa:09:0e:16:a7:0e:d9:5f:25:51:a4:a6:57:f8:6d:27:7c:
         b4:7a:e5:19:13:c5:7c:69:ef:cc:77:2a:5e:c5:17:7d:a2:c2:
         4d:c9:d1:42:40:92:45:4f:33:b9:82:8a:19:b7:b8:db:83:a2:
         3e:99:da:20:07:49:46:ff:a4:6e:f3:23:4a:a1:24:be:7e:bb:
         be:8b:8f:78:43:56:4a:b8:a0:f4:f5:72:aa:0b:11:49:df:1c:
         da:c1:91:66:db:89:db:42:20:cf:8b:ee:a1:83:6f:fa:6c:b3:
         aa:54:b9:23:3b:f3:c0:d2:c3:5f:1f:0c:8f:e1:eb:92:f2:7c:
         05:49:0e:8d:d1:e4:5e:88:ef:a7:86:83:52:64:83:3b:f6:c3:
         b2:ba:b6:80:bc:52:85:fe:95:b3:45:4b:d7:45:db:25:d2:f3:
         77:ab:16:fb:08:49:6b:cc:c1:d4:64:21:47:80:47:d2:c0:83:
         35:ff:f5:82:37:ca:4e:d0:a4:1c:12:aa:a2:70:e0:25:87:cd:
         56:d6:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:32:48 2026 by rpki-client