Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fe8eead-558c-3b94-8dc7-4e0347b6e0bb.roa
File:                     1fe8eead-558c-3b94-8dc7-4e0347b6e0bb.roa (raw, json)
Hash identifier:          YbAWLR//SBwoKbIecGZlwHRc06Oqj/8EzljK7JXKy68=
Subject key identifier:   53:9A:FB:C4:63:B3:B2:AE:B8:B0:46:0F:53:3A:A8:94:17:C5:42:F1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F49877A912320EEC036A28D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fe8eead-558c-3b94-8dc7-4e0347b6e0bb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:100d:a125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:7a:91:23:20:ee:c0:36:a2:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4bc2533c-9c71-4b98-adc1-7b2966eab12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:25:78:7e:ac:c5:ef:a0:a1:34:62:60:3f:
                    a3:1c:01:c8:75:fe:c6:59:b9:e4:52:16:0f:10:5a:
                    08:c0:fb:9b:68:08:25:8e:44:6a:4a:f8:af:15:2c:
                    10:b5:57:08:78:fb:84:31:0f:d7:d5:d7:86:b7:cf:
                    f4:3f:d1:00:cf:01:46:70:92:98:36:86:77:85:77:
                    83:fc:2d:7c:06:eb:e5:d6:79:79:86:b4:cc:5c:27:
                    99:51:f7:b5:02:e8:e8:99:7b:e4:db:d0:d9:c1:34:
                    7a:43:d8:b7:49:41:73:09:aa:23:1b:7e:b8:35:4f:
                    0c:20:2e:14:61:99:e9:28:92:0a:f8:ee:25:14:91:
                    ce:8d:37:cc:df:ab:63:3f:ca:3e:7c:3e:5d:39:7f:
                    81:9b:98:60:00:58:12:97:5d:39:e5:c1:c2:d4:d4:
                    53:44:b4:ec:dd:4c:d3:44:73:46:fa:76:93:23:bd:
                    60:1b:ce:98:ea:a2:40:9e:12:76:a4:46:06:f6:73:
                    5a:8a:94:cd:f0:d6:c8:1a:2f:fb:fd:49:4d:82:0a:
                    98:e2:b9:ae:bd:d6:2e:b4:28:e4:fe:f1:07:52:c6:
                    77:8e:55:bf:b4:95:54:66:56:db:f8:51:79:31:16:
                    e0:15:69:e8:99:c7:6a:a2:6f:f0:3b:92:f3:00:07:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9A:FB:C4:63:B3:B2:AE:B8:B0:46:0F:53:3A:A8:94:17:C5:42:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fe8eead-558c-3b94-8dc7-4e0347b6e0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:a125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ea:33:e4:83:90:3a:db:e1:03:95:cc:f4:09:3b:c5:a1:16:
         18:ab:2f:b2:4a:16:27:fd:c9:3b:e3:9a:55:2a:dd:47:4a:7a:
         0f:e0:d1:b0:69:cd:11:3f:b7:e8:00:53:fe:ac:90:2e:b5:eb:
         5d:c7:07:46:c5:69:7f:fe:11:0a:2e:a1:30:c5:78:29:24:cb:
         f9:37:c0:d5:a4:78:30:f8:97:4e:a0:20:46:f3:91:3b:ab:e9:
         c3:d9:3d:23:ea:82:39:28:6c:f7:49:7c:d8:49:69:2b:05:38:
         e8:26:02:13:92:d2:18:dd:74:88:b2:01:e7:d8:24:9f:32:71:
         57:c9:ab:9e:f8:3c:4d:eb:25:8d:3c:86:1d:5b:76:c0:39:01:
         8b:7c:02:b3:14:0c:cd:4c:97:10:87:13:fa:9a:91:a9:02:3a:
         fb:61:04:ee:dd:db:4c:58:c6:e3:41:f4:42:94:bb:74:46:dd:
         b8:cc:4d:d0:8a:43:ce:14:27:64:02:2f:d3:07:8e:ad:29:69:
         65:67:cf:06:60:da:a8:29:37:0d:07:e9:15:9b:63:03:50:32:
         21:c1:bc:cc:3a:fe:a7:6b:ac:5c:a7:36:3b:0f:4d:2e:49:1a:
         57:a0:3e:6b:16:fc:99:14:e1:11:b0:d7:bc:16:08:52:ef:4e:
         3e:24:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:37:17 2026 by rpki-client