Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffb44c1e-b3c0-3bbb-904f-e566dfc47d2e.roa
File:                     ffb44c1e-b3c0-3bbb-904f-e566dfc47d2e.roa (raw, json)
Hash identifier:          iq2a2lF4aV+/6IerZfMIqXhYqO406WTAM0Yx5Gi8V3Y=
Subject key identifier:   E9:EA:36:A7:5D:39:D2:1D:9C:35:CD:56:07:8E:CB:9F:52:D1:EB:6D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F119CDF04192498EBF3E02040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffb44c1e-b3c0-3bbb-904f-e566dfc47d2e.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1008:b268::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:df:04:19:24:98:eb:f3:e0:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=1e3cf937-6891-4b56-919b-8ac36ffe508e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:15:f7:af:c0:1e:d3:75:81:64:72:73:40:
                    67:1b:11:f6:ff:69:7a:cd:3b:f9:ca:cc:02:26:93:
                    e7:e8:82:e2:35:8e:65:ea:1b:01:63:ac:2e:32:4a:
                    78:52:bf:21:8f:0f:7b:c1:32:7b:ec:b2:8d:d6:c7:
                    a0:f4:74:a2:ce:ee:d7:7a:70:fb:6a:3b:76:62:63:
                    42:f7:10:b2:b5:b9:0e:53:6d:57:fc:71:3a:21:37:
                    96:53:78:52:26:99:bc:80:dd:68:34:ef:49:dd:4c:
                    ae:3e:da:42:66:71:2a:8a:22:5d:8f:c5:39:9e:93:
                    ef:af:6b:1a:fe:c1:b4:14:e5:7e:82:fc:45:88:a5:
                    90:b1:b6:7a:26:95:60:7a:34:4a:3a:b9:60:0a:15:
                    8a:6e:15:27:95:ec:5b:3a:03:5d:e6:dd:ef:6d:d1:
                    46:82:20:a0:f4:33:85:a0:21:f1:26:26:36:d2:d1:
                    d9:96:3b:a4:ef:d7:1e:33:cc:91:36:2e:e7:0d:63:
                    93:78:9d:69:2c:03:95:8c:a1:d3:fd:af:8a:4f:09:
                    b2:3a:49:21:15:69:1f:a8:30:65:4c:bc:ec:78:e9:
                    a5:b1:69:eb:63:81:dc:5e:97:47:26:7b:58:42:fb:
                    20:0e:42:ba:93:52:16:c8:58:c4:3b:7a:a7:62:4f:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EA:36:A7:5D:39:D2:1D:9C:35:CD:56:07:8E:CB:9F:52:D1:EB:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ffb44c1e-b3c0-3bbb-904f-e566dfc47d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b268::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c1:1e:aa:ef:38:b8:70:86:6e:72:f0:10:c0:98:15:5e:08:
         5f:47:42:00:41:7c:06:81:d6:13:88:bd:f7:7a:2d:49:5b:ce:
         84:14:53:33:bf:d6:1b:7b:70:65:c1:58:85:88:1d:2b:c1:a3:
         7b:e4:be:21:b3:42:c3:69:0e:c2:45:fc:b8:7f:06:1a:bc:86:
         f2:d1:9f:f9:05:9c:62:23:d5:a5:33:d3:fd:f8:34:65:e2:75:
         2b:10:6c:32:37:c9:75:d2:17:12:86:cf:38:73:1e:ff:8d:c2:
         e7:34:23:d1:94:ea:b5:c5:35:79:d6:fc:16:a2:ab:f9:a3:45:
         16:73:2e:03:8e:52:e7:96:40:30:d8:5b:d3:4c:34:b4:82:8f:
         5e:7c:07:56:7e:99:2c:b6:48:16:85:6c:c1:e3:fe:d0:34:46:
         23:dc:26:db:56:d2:5e:fa:df:f7:37:f5:e9:cd:0b:a0:83:fd:
         68:89:f6:79:96:a3:9a:a2:9b:7e:ef:84:77:0c:33:ca:04:72:
         ac:b5:50:6a:da:28:cb:d4:2a:ea:18:09:87:dd:5a:44:f5:b8:
         52:41:3c:42:fe:fd:80:b1:2b:1f:15:01:93:07:14:f4:e0:72:
         be:af:be:b5:c5:17:a8:81:a6:cb:cf:e0:20:2a:e8:cb:3a:f1:
         b0:04:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:02:52 2026 by rpki-client