Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c8b0ca9-9779-3f01-bd28-2273720071b3.roa
File:                     9c8b0ca9-9779-3f01-bd28-2273720071b3.roa (raw, json)
Hash identifier:          bnlxKcBpLExF50peJmMnNiRcCw85yzzE9o9thwX9UcY=
Subject key identifier:   36:05:12:3A:06:E7:BC:DA:60:A1:21:44:D2:B8:67:69:42:58:65:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD57922B6561992DF91B30
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c8b0ca9-9779-3f01-bd28-2273720071b3.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1007:b158::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:57:92:2b:65:61:99:2d:f9:1b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=0ff6f808-8a22-45a1-a6fa-0e2518681fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:99:25:d2:e9:d2:6f:70:61:6f:b8:b5:4d:
                    03:79:7a:5a:27:0b:4a:ec:03:d8:41:42:93:0b:af:
                    8b:cf:1b:92:e2:19:f8:82:ae:73:95:38:33:27:a8:
                    df:ac:8e:2c:06:ea:d6:2d:1d:be:2e:6c:21:cb:af:
                    d9:19:da:ae:ed:92:a5:ec:b9:a9:90:9d:09:9a:9c:
                    e0:12:f9:0e:79:0e:58:44:d6:60:36:74:af:6d:ee:
                    2a:93:b8:e2:b4:63:fe:92:43:7e:77:12:5c:ca:a7:
                    ec:45:e8:f1:a2:b6:e0:ef:9c:40:a1:9b:03:0e:27:
                    b1:cd:85:42:f7:b8:ef:ad:ac:0c:eb:f9:85:52:e9:
                    7c:74:98:3e:81:da:90:c1:b3:68:37:68:6e:5b:3e:
                    88:1e:c1:f5:e3:12:5d:2c:c6:56:74:72:08:39:4d:
                    cc:f5:33:f5:c8:0e:aa:57:79:14:7f:fc:b1:4f:81:
                    b3:e1:f2:a3:16:27:7c:ba:d3:34:76:ae:9e:e0:6b:
                    f2:5f:7d:2b:88:3f:c1:f5:79:0b:3b:c6:30:c2:18:
                    fa:6d:a7:bc:3a:9c:38:1d:76:74:e0:0f:8d:a0:29:
                    5f:42:58:8d:b3:89:22:71:7f:9c:2a:30:1d:f2:e3:
                    1d:32:5d:05:62:8e:b7:0a:a0:39:60:47:7e:59:60:
                    0f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:05:12:3A:06:E7:BC:DA:60:A1:21:44:D2:B8:67:69:42:58:65:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c8b0ca9-9779-3f01-bd28-2273720071b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b158::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:8f:44:59:91:21:39:bc:6c:a6:43:d6:0b:7b:fe:bd:15:41:
         92:e6:bf:91:04:46:46:63:f1:9d:c1:11:14:6f:7b:62:c4:17:
         d7:d0:18:17:39:f8:c4:4d:4a:70:ed:bf:eb:c4:98:c6:bc:6b:
         65:36:76:4f:a6:70:ab:46:bf:52:5d:17:47:93:c3:cd:cf:00:
         c3:cc:63:c8:21:a5:e1:5c:b0:36:20:0a:bf:40:90:bf:6e:ad:
         2d:f3:19:5a:93:a0:63:df:2f:f8:c0:e0:2b:7c:ad:7a:cb:d6:
         f3:25:7b:98:ea:8d:2d:66:57:11:af:7b:88:fd:d9:a2:48:e4:
         17:2d:8f:b3:8d:69:10:46:c0:83:96:48:aa:6f:a7:34:78:83:
         f8:9e:40:ae:9c:10:c1:78:29:05:24:4b:31:cc:09:d4:95:d8:
         27:e0:d1:10:0f:a5:d5:31:64:fb:9f:dc:21:6a:00:1d:8f:67:
         ac:a7:ae:2d:03:89:50:6a:71:8f:77:ee:e2:80:18:d3:1b:2f:
         0c:a8:e7:0f:62:91:e1:ce:98:57:fb:9f:8d:5f:68:86:0d:6c:
         de:49:cc:e0:44:12:af:79:fd:d6:6a:c7:f2:54:3b:50:e8:94:
         18:08:f0:9e:3e:48:6e:3a:66:da:2d:96:b7:64:e9:37:df:27:
         d7:c8:dc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:14:58 2026 by rpki-client