Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1923d3e-9fbe-3d44-b957-8beadb5404f4.roa
File:                     b1923d3e-9fbe-3d44-b957-8beadb5404f4.roa (raw, json)
Hash identifier:          dbQojUSwFDbS9wbxFRFACxWGzeTJ2mRCv1e0zARj72Y=
Subject key identifier:   1C:82:FF:C0:C3:D8:00:ED:9F:AD:5F:AD:95:97:E9:5A:94:79:AE:96
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49898BAA7B058A4635DBE2C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1923d3e-9fbe-3d44-b957-8beadb5404f4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2607:f160:28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:8b:aa:7b:05:8a:46:35:db:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9ce59ae4-3e9e-41db-80e8-9ad3faacc79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c9:71:b9:42:63:6c:41:ce:9f:6a:9f:ea:79:
                    7f:ba:26:f5:38:c3:72:3f:1c:90:4a:24:28:0f:e9:
                    37:bc:73:bf:2a:da:3a:59:2c:89:02:d0:e7:07:3a:
                    b5:23:ee:86:01:65:81:ea:ac:18:f2:6a:a0:5d:5e:
                    df:dd:d0:ce:e2:e3:ef:2f:77:1f:96:54:3f:9c:04:
                    97:06:c8:0d:52:2c:78:52:80:91:f2:4e:33:19:d2:
                    aa:0f:8e:60:f6:ad:d6:fa:19:ba:e1:c8:98:12:d4:
                    a9:1b:1d:30:ca:49:aa:1b:16:85:86:28:1b:35:0a:
                    7c:61:51:be:0a:54:3a:6d:56:d8:26:d5:3c:f4:9b:
                    bc:0d:56:33:77:29:6a:13:41:7c:15:5c:bf:ce:15:
                    51:c9:51:17:a5:36:40:1a:ff:86:c0:dc:80:38:9a:
                    e8:56:a1:c6:ce:a1:57:77:65:f9:d9:53:80:1e:28:
                    5e:14:7a:aa:7f:bb:64:0c:03:cd:c2:d9:3b:ed:12:
                    81:37:e9:9b:77:13:48:a3:83:fc:22:65:c6:59:1f:
                    39:02:bb:7f:30:6f:7e:41:86:06:1b:e7:7a:e7:ab:
                    d2:40:a0:41:80:11:3a:1e:00:3c:2a:19:b1:80:46:
                    1e:a3:f7:5f:56:dc:60:cd:7e:91:d6:33:d6:d3:a5:
                    5a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:82:FF:C0:C3:D8:00:ED:9F:AD:5F:AD:95:97:E9:5A:94:79:AE:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b1923d3e-9fbe-3d44-b957-8beadb5404f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:28::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9a:37:e3:78:d4:82:93:54:c8:59:ec:2d:f3:35:59:92:85:
         1d:ef:c3:11:91:e9:5b:2a:5d:42:47:0c:8b:4a:59:6f:52:73:
         48:ad:47:09:cc:a0:c6:78:2e:54:4f:da:26:63:9b:ca:6b:b4:
         fb:b0:6e:52:f1:16:db:8e:29:3b:05:c4:61:b5:6b:82:42:ec:
         87:ab:68:26:04:ea:52:13:1b:52:8b:12:92:e0:b5:c0:41:22:
         ed:dd:27:3b:4f:b9:cb:1f:cb:9b:81:e4:00:40:a5:b8:a6:ac:
         37:c2:b7:d4:3a:57:5d:ea:68:74:98:d4:4c:62:76:d6:45:5b:
         42:c9:2c:8c:1e:c5:f8:8f:37:a1:9d:fb:98:89:45:82:92:ab:
         f6:6f:a2:b3:ca:ad:6e:2b:68:15:6a:9c:77:f9:f5:78:c9:80:
         80:3a:3d:1f:a3:d0:5d:ad:46:26:0d:dc:23:6a:90:4e:17:e7:
         75:ab:73:82:fb:04:eb:9e:20:b8:7e:e9:4f:25:0a:df:05:fa:
         fc:80:13:4b:60:99:0c:39:70:20:c6:0f:b3:6a:bb:79:03:e6:
         07:2f:38:5a:82:9c:29:97:38:d5:66:6b:78:45:89:f7:59:56:
         00:a5:f0:c5:b1:57:7f:c7:aa:bb:e3:c1:92:ec:19:4f:01:8f:
         19:7e:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:59:50 2026 by rpki-client