Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf43ae6-7228-3ce6-b887-8d2913c6bee9.roa
File:                     4cf43ae6-7228-3ce6-b887-8d2913c6bee9.roa (raw, json)
Hash identifier:          4Srf01SFpi9+vAfaOimAAMh8H38IVanIUfVaDguyUdU=
Subject key identifier:   10:87:2C:D7:91:26:CC:4E:3A:B7:22:C0:7B:59:F5:CF:40:5D:EB:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB77ABB1D6599648909B000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf43ae6-7228-3ce6-b887-8d2913c6bee9.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1012:10e0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:7a:bb:1d:65:99:64:89:09:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=8da0f2ce-e93c-43f0-a1ab-1992f54dcc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:5c:1f:6d:ae:de:5c:8b:0c:c2:77:3b:dd:
                    a8:6a:54:27:dc:54:33:81:1e:7e:7a:ea:97:db:c7:
                    93:dd:c1:dc:a2:22:5e:f2:b2:ed:7c:e1:cf:1e:bd:
                    7d:84:9a:88:07:c2:f6:b7:27:25:60:6a:61:ea:f7:
                    56:f2:29:ca:44:61:12:fd:46:42:c0:07:a2:3a:aa:
                    85:99:f8:7d:7b:43:74:5c:21:de:3c:6a:61:54:14:
                    74:ac:8f:82:2b:b2:4b:de:6d:37:63:6e:4b:da:54:
                    cf:64:8f:0c:d3:ff:5a:ac:e6:d8:9b:13:fb:9e:68:
                    87:ed:8c:49:a7:c8:d9:68:4e:05:96:b9:4f:b6:26:
                    46:44:4a:bc:0b:b2:2f:47:6e:bc:16:f2:82:d8:54:
                    9b:b4:e6:3a:d0:7e:da:8c:6d:52:db:e4:78:e9:df:
                    66:33:6f:98:d0:a1:8e:f6:ea:0d:4b:e8:04:74:e8:
                    03:43:46:3b:e4:bb:19:02:6b:80:ea:a2:7a:0f:c2:
                    06:71:1e:d4:8f:8b:90:19:d6:8a:e9:cd:ad:bf:1c:
                    c9:c0:74:5b:05:62:81:ee:6e:6f:33:0d:0a:42:bb:
                    68:e6:0a:c2:77:df:3d:c7:b8:31:c0:c1:8d:6c:b1:
                    0b:7b:a9:4b:79:72:8d:6a:a1:d8:4e:6d:6a:01:ae:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:87:2C:D7:91:26:CC:4E:3A:B7:22:C0:7B:59:F5:CF:40:5D:EB:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf43ae6-7228-3ce6-b887-8d2913c6bee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:10e0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:06:00:d1:fd:d7:ce:a3:77:f6:7c:5a:9b:8c:37:69:a9:
         7c:7b:50:4c:48:f2:eb:33:57:02:8e:1d:93:c6:38:af:d5:f2:
         09:95:f8:85:ad:2c:18:fc:3b:6e:1f:56:f2:8c:e1:0d:54:1e:
         62:35:ce:40:a1:39:5c:90:c9:55:b4:db:6f:ac:4d:5b:e1:51:
         1f:5b:00:3f:7f:73:73:0c:85:e9:ab:a6:ab:ce:1e:65:40:48:
         4a:9d:f6:3a:5a:92:b8:cb:02:e9:72:b1:36:d5:a0:82:95:1b:
         db:a3:5a:83:fc:de:8c:22:44:e5:0f:01:40:52:4c:c2:28:5f:
         62:96:14:95:c8:0f:65:5d:17:71:dd:26:5f:75:18:dc:c0:31:
         70:fe:7b:ee:df:42:d5:c1:ea:64:3e:d1:00:86:62:df:8c:7a:
         f4:85:24:0f:5c:74:d5:38:37:2b:eb:8a:59:47:a6:78:09:f2:
         25:cb:4c:29:98:62:69:f7:bb:d6:19:97:8d:7e:cb:e0:46:26:
         6a:8e:03:bb:f2:b5:39:2a:c9:24:43:20:61:8a:58:fd:ae:92:
         e3:b0:45:46:c4:68:b3:e3:9e:8b:a7:22:7d:4c:c1:11:2b:aa:
         16:65:98:11:8a:34:96:0d:e0:1b:33:de:b1:6a:84:72:f8:95:
         2e:70:1f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:47:31 2026 by rpki-client