Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c4f427-4442-3402-aed5-2e911972c64d.roa
File:                     21c4f427-4442-3402-aed5-2e911972c64d.roa (raw, json)
Hash identifier:          bcOnuJeC7/xRHqSiuaGpyAEOZuYOZMMAFFY4/mBX34Y=
Subject key identifier:   DE:78:B4:14:91:18:16:3A:8A:3F:23:73:2F:E4:36:8B:A0:91:10:AA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EBC7714700388EE6D117B5700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c4f427-4442-3402-aed5-2e911972c64d.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:100e:b248::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:14:70:03:88:ee:6d:11:7b:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=9b54286f-7226-42bd-95ae-2594dd09c867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:76:90:05:21:ad:ba:1d:ce:60:89:b9:e6:
                    2e:69:83:67:42:03:9d:4b:37:df:99:d4:03:24:b7:
                    06:6d:59:d3:9d:22:89:d1:ad:93:d8:34:66:ba:fb:
                    76:59:59:c8:e2:de:fa:f6:b7:f7:23:b2:ff:ff:ab:
                    89:68:6e:94:35:5d:31:92:be:08:31:b2:31:92:db:
                    d2:df:d5:49:74:f8:84:40:5d:66:cd:98:64:7f:0f:
                    f7:04:95:b6:bc:ff:2a:17:c8:3e:89:a0:23:24:a9:
                    ae:26:67:e1:f2:12:c2:23:54:df:f4:a6:ef:2a:b1:
                    97:cc:9e:cd:6e:2f:c2:6f:87:2a:ed:40:01:6a:97:
                    76:4b:89:ec:aa:f2:52:14:f4:e8:dd:ba:8c:dd:c2:
                    d4:4c:e1:d4:54:90:01:78:f7:14:b1:02:32:a3:3e:
                    d1:a1:5a:47:26:67:fa:f2:f2:40:f6:50:b0:fa:ab:
                    07:d8:d5:94:00:24:fd:92:99:b5:9d:21:3e:d6:5a:
                    ec:67:1e:16:ce:88:23:4a:52:2c:4f:0f:6f:9a:ee:
                    45:ca:ef:c9:86:2d:e5:be:3a:ad:6f:b1:44:e3:eb:
                    24:ad:30:4e:86:8b:37:54:0e:38:89:22:41:05:94:
                    61:88:0f:b8:03:35:73:2f:0c:b9:fa:2e:4d:46:78:
                    31:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:78:B4:14:91:18:16:3A:8A:3F:23:73:2F:E4:36:8B:A0:91:10:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c4f427-4442-3402-aed5-2e911972c64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b248::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b8:00:37:c2:c7:63:62:68:db:2a:6b:8e:6a:52:32:a4:f9:
         77:e7:fa:b9:95:14:a0:2a:70:1b:8a:af:14:39:6d:11:7d:9b:
         65:cf:3a:ee:fa:ed:ce:14:8b:04:00:11:34:e4:4e:d0:6c:ae:
         2a:d9:28:87:88:b2:75:23:6e:51:0f:7d:47:6a:90:b8:d0:60:
         26:36:95:b4:49:91:7b:c7:99:d3:2b:c2:59:ee:83:aa:67:35:
         67:22:b1:e9:fa:d2:d5:94:1e:85:41:8f:d8:d2:a5:eb:e3:79:
         a1:c3:5f:bc:e9:35:f2:a2:09:0f:b4:ce:a7:13:b9:10:94:a4:
         70:a6:b5:08:45:b9:61:0c:b6:f2:46:c3:76:ce:fe:10:94:b3:
         23:16:31:ae:cd:46:eb:a7:61:b3:91:87:85:f1:e8:d8:77:09:
         e0:42:2a:63:3d:f3:ff:77:0d:ed:de:d9:82:74:0c:67:06:82:
         2b:dc:93:9a:3b:74:40:27:76:3e:5e:8c:a6:ac:a7:19:c9:94:
         34:ee:5e:0d:75:da:84:87:70:c6:94:16:2c:00:dc:6c:a0:0a:
         2c:04:65:ee:b5:95:57:11:a1:46:c5:0d:7f:a4:1b:d3:cc:8b:
         0d:ef:fa:41:cf:da:6b:ee:0f:04:06:45:10:66:76:7f:7b:56:
         88:d1:3d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:49:30 2026 by rpki-client