Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa
File:                     4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa (raw, json)
Hash identifier:          1HxLRtyWfjCpUBM17jDZYU+byPSx559JLP2/lN7ahEA=
Subject key identifier:   46:E1:DA:FE:95:E0:87:8E:35:D6:44:E1:28:79:3B:99:36:06:8B:DA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EEEB7791B5480ADACBC8A6880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        2600:1012:b230::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:79:1b:54:80:ad:ac:bc:8a:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=9fde7ddb-ee56-4388-a147-f2bcbcc94d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:5b:7b:82:fc:c6:50:95:7f:80:98:83:01:
                    4c:99:70:23:14:2a:71:f7:ad:04:a8:d0:5a:a0:0d:
                    6c:a7:4d:22:89:0e:42:d8:e2:9d:ab:6b:4d:8b:ac:
                    2c:13:f7:f1:d0:ad:9c:f0:29:48:74:a3:bb:7e:0e:
                    5c:b8:47:c9:fb:36:6f:14:a9:57:00:36:0b:dc:0a:
                    17:41:f2:f3:34:31:23:74:c9:b1:b0:49:59:30:0c:
                    c9:32:e8:85:ee:e8:76:f1:55:43:41:70:d8:c2:29:
                    64:8d:f0:f8:6c:1a:5f:06:75:a3:41:87:73:de:3c:
                    e9:3e:cb:50:8c:16:2c:44:f1:b7:27:d5:5c:3f:fe:
                    ca:2a:cd:f2:3f:22:fa:d0:80:01:45:2c:9b:a5:94:
                    0a:e5:d7:5d:67:28:90:f0:18:9b:f7:fc:d3:a6:f0:
                    78:e0:af:9c:f0:47:a8:85:c9:e3:fe:a1:6a:e9:b0:
                    6f:e9:8f:81:cd:8a:03:08:5c:eb:3e:51:58:88:cc:
                    de:81:3c:f8:e7:dd:8a:e8:73:75:a5:fc:6c:4a:11:
                    61:88:59:f9:8c:7b:c9:f2:4e:c4:eb:75:8e:1d:78:
                    da:2d:49:d0:89:c4:5e:b4:6f:41:c6:87:e4:e5:34:
                    5e:cc:0d:05:67:8c:97:8b:b0:15:80:e4:24:99:df:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E1:DA:FE:95:E0:87:8E:35:D6:44:E1:28:79:3B:99:36:06:8B:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4fcc9f02-5b49-31e1-9aa1-28fc586d2db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1012:b230::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:da:7b:f6:ec:92:11:a6:46:96:41:29:16:9a:5a:87:29:4a:
         e5:70:76:6e:5e:c7:8b:6a:8e:35:4d:4b:f1:ac:31:c0:41:67:
         91:16:e7:d9:3c:1b:db:b7:a5:0f:95:c3:36:4c:26:46:ea:98:
         89:97:4f:5c:e8:35:7c:2e:a2:2f:c2:df:eb:18:d6:13:13:e9:
         a1:39:36:30:2f:be:90:0e:33:fa:19:4b:6d:fc:05:99:6b:92:
         40:5f:05:9d:8e:d2:a8:78:f0:b2:04:21:50:4b:b5:4b:dc:16:
         90:7e:39:38:83:22:86:64:8d:3e:cb:37:ed:94:a9:f6:be:b9:
         d0:99:00:79:14:4f:6d:07:61:99:d8:c2:72:9f:a2:1a:9d:69:
         8e:ad:1c:9a:b6:fa:3f:8a:e6:fa:e1:e5:eb:3f:7d:90:62:b3:
         67:a5:46:3f:9b:82:11:3a:fc:ff:ee:63:c1:32:33:50:88:90:
         7b:07:b9:91:84:33:f9:be:be:e9:7b:a9:f6:31:d8:05:02:d3:
         08:23:b0:ef:d4:63:81:0b:de:b6:7d:9a:96:95:e4:ab:75:a3:
         c0:68:0c:95:c4:78:e1:5f:cd:2f:57:1a:73:4e:4f:8a:cd:2b:
         dd:3a:b3:d6:f3:6c:17:2e:79:b7:b9:69:f6:18:91:96:7f:2e:
         b1:41:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:45:57 2026 by rpki-client