Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae5f4963-68fa-3e79-8d20-4173db9a2560.roa
File:                     ae5f4963-68fa-3e79-8d20-4173db9a2560.roa (raw, json)
Hash identifier:          UY6R4R3QsCPJX3Q86UXOcAak+RHkR8Lg/Jt05dX5ULg=
Subject key identifier:   DE:9F:A6:5D:73:DA:42:39:19:50:42:15:69:88:5D:D8:2A:1F:01:FC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F2D87D2EAF146AD5C38ADAC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae5f4963-68fa-3e79-8d20-4173db9a2560.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1012:a130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:d2:ea:f1:46:ad:5c:38:ad:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=b0d1cc0b-a6ab-4518-93c9-f44548a1636f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:95:bc:33:bd:2d:1e:e7:eb:de:fb:7e:39:
                    e3:cc:75:eb:41:14:cd:a7:11:b5:26:1e:91:8c:ae:
                    6f:12:1a:44:89:eb:88:37:9e:94:38:28:e4:63:51:
                    99:33:3c:61:e4:69:70:8c:cd:cb:8a:6a:af:cb:bf:
                    d4:8c:9d:0a:c4:ec:32:c0:12:88:89:58:83:68:ef:
                    80:49:7b:5f:ae:e1:a4:f1:b2:a7:34:e1:24:cb:1f:
                    e2:f8:59:82:8a:13:8d:7f:05:e0:ec:9a:8a:c9:f7:
                    e8:dc:54:42:bb:f0:85:62:e2:74:ff:53:16:74:f2:
                    0c:83:43:3a:92:11:1a:cd:a7:a0:7a:1e:f1:29:93:
                    c5:04:84:83:45:48:ea:5e:8f:7f:75:e6:14:3e:3a:
                    01:e3:73:88:e1:b6:1b:68:6e:09:8a:97:0f:bd:29:
                    27:fa:7c:25:4e:4e:e5:fc:27:57:40:51:7c:c3:71:
                    40:9a:16:6e:64:1a:ac:2b:5e:5d:d9:fe:86:51:b5:
                    17:56:82:17:fa:35:56:88:ff:e0:10:b7:e8:5b:27:
                    39:74:f2:37:df:4e:e5:f1:a9:48:30:6f:d9:8a:27:
                    a1:29:e8:27:4d:e3:fb:81:c1:53:40:58:6a:37:d0:
                    e5:13:1c:e1:2d:3c:df:71:85:37:3c:61:3f:fe:a8:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9F:A6:5D:73:DA:42:39:19:50:42:15:69:88:5D:D8:2A:1F:01:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae5f4963-68fa-3e79-8d20-4173db9a2560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:a130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:15:6c:d6:36:58:2f:04:40:99:8b:a3:10:5b:7f:db:94:0c:
         fc:a0:e6:8a:7b:95:ab:94:c4:d5:55:86:1a:04:2b:5e:f2:b2:
         06:c4:f2:1b:5b:25:75:98:71:5e:62:94:97:75:4a:cc:88:df:
         67:bd:8c:92:1c:d4:c2:2d:a4:fb:db:15:48:1c:ae:5d:85:4a:
         03:c8:bc:a5:80:af:61:40:bf:3f:f7:1b:16:d2:69:44:11:ba:
         90:01:a2:9b:58:35:48:40:43:7e:3d:78:9c:0b:80:df:62:98:
         e4:0f:e2:f7:f5:69:0e:4b:ae:db:cb:48:bf:40:81:7d:e4:36:
         90:fb:37:17:3f:a9:e9:35:36:0b:e7:44:85:ad:15:6a:79:b8:
         d1:d9:56:84:a7:28:2c:ce:3b:73:9c:7e:d7:fe:59:9d:cd:28:
         75:29:3f:96:cd:9d:c3:61:f5:e0:0f:0f:cb:50:4d:76:71:40:
         3e:a9:0b:9d:39:f5:6f:91:58:bc:4b:a9:a9:28:8c:84:3e:5b:
         e7:e1:39:8f:f0:d6:fe:53:7f:98:7b:5d:cf:00:df:45:ae:85:
         fa:b8:99:79:e0:6c:a7:75:fb:34:a6:91:57:92:33:99:c8:14:
         4a:13:85:50:ae:67:86:fa:94:66:dc:04:76:f5:c3:3c:10:b1:
         f1:8d:08:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:23:28 2026 by rpki-client