Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/903ae284-4558-38b9-bc50-1bb4560596d3.roa
File:                     903ae284-4558-38b9-bc50-1bb4560596d3.roa (raw, json)
Hash identifier:          OJ9bEWA1tnh90P/+4TvBSmU0JdDuccWr+3pN8QLql7E=
Subject key identifier:   93:10:2F:AA:E3:32:2E:89:30:95:0D:DC:50:0D:B7:F1:F1:33:73:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD7ACC05BC41210DE37070
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/903ae284-4558-38b9-bc50-1bb4560596d3.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1003:b4d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:7a:cc:05:bc:41:21:0d:e3:70:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=f7e3ea6f-faee-4369-8f4b-19ac3f40e65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:18:36:c5:be:df:7c:54:96:23:ac:24:30:06:
                    ee:9e:0c:36:29:06:ad:98:5f:77:a1:eb:8f:9a:8c:
                    3d:29:1f:f6:52:38:90:f1:1e:2b:d1:34:8e:88:26:
                    dc:7f:d8:88:8c:be:ae:39:36:3e:55:df:d8:94:d6:
                    ee:fa:79:4b:47:ba:c2:df:4b:e8:17:79:4e:61:da:
                    d9:d7:44:77:d0:56:6e:e0:ce:ca:c4:bd:5e:e2:62:
                    d9:be:98:f1:ed:48:10:08:0b:8f:04:e0:6e:a3:87:
                    df:db:05:b8:49:54:d7:b4:cf:92:ca:17:08:ad:cd:
                    a0:63:59:6b:fc:27:ff:bb:88:59:54:5d:f1:3a:36:
                    dc:8b:c9:0b:a7:7e:57:1b:23:ca:f3:98:8a:d2:a7:
                    34:ca:22:93:db:1c:78:01:e9:6b:56:6b:cc:f2:67:
                    13:c8:33:21:ed:97:e9:a0:fa:09:2a:90:3a:e5:ce:
                    14:1a:9c:19:d9:de:91:b2:b4:f9:e4:d8:33:20:96:
                    fa:e9:f0:c9:ab:27:9c:7b:ba:19:ae:bd:e8:5d:96:
                    48:f0:26:2b:22:08:97:9c:a8:42:b9:8f:59:79:79:
                    d7:5b:93:d1:93:87:8f:81:15:da:35:cf:d1:0b:61:
                    51:75:ac:f9:f9:93:32:3e:19:82:06:e2:9d:ba:81:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:2F:AA:E3:32:2E:89:30:95:0D:DC:50:0D:B7:F1:F1:33:73:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/903ae284-4558-38b9-bc50-1bb4560596d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b4d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:71:21:cd:f8:1d:45:9e:8c:20:73:4b:bc:3b:0c:dc:b7:95:
         f7:3a:fc:62:9d:73:3a:36:cc:39:05:d9:35:41:bd:e9:a8:12:
         3e:03:e7:2d:41:0a:f2:30:ec:6f:7a:97:5c:8b:0b:3b:28:60:
         eb:eb:75:33:f0:05:d0:f6:f7:4a:02:5e:32:d6:8d:3d:9f:38:
         ca:7d:39:fc:08:5e:cd:cc:e6:50:2a:9d:42:e3:dc:b6:5a:b0:
         42:ff:3d:c1:b2:da:77:2c:f8:36:dd:7a:da:94:71:7e:08:26:
         c2:c2:dc:80:f5:4c:dc:af:02:46:1e:f8:c3:07:5b:0a:42:da:
         c9:20:2c:d9:a2:16:e6:d0:7e:94:f5:5f:83:0b:03:dd:7d:c5:
         92:02:be:0e:ff:1f:29:cc:80:06:e0:de:2e:e3:e5:0f:8f:83:
         42:5f:9a:23:70:d5:b1:27:a5:5c:c0:2c:fa:74:d0:d6:0c:73:
         96:2b:3b:8f:7c:be:a4:53:0e:1f:7a:08:14:ca:fa:45:a7:dc:
         8c:15:50:a0:b5:bc:71:19:1b:f1:4b:23:f7:96:ec:b0:6f:1f:
         ae:6f:26:65:d0:e0:b2:bf:20:db:ed:b2:81:d1:8f:b3:d2:5f:
         a4:41:e2:c5:bf:e7:75:70:36:20:e7:10:cb:68:91:d0:a3:fa:
         f1:1a:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:04:54 2026 by rpki-client