Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60741251-697a-377e-9e10-726d95497412.roa
File:                     60741251-697a-377e-9e10-726d95497412.roa (raw, json)
Hash identifier:          wpCcc4pIwi5CIB82Ebf3zO9K3dRP/w/534TK+6uSxpM=
Subject key identifier:   B9:F3:DF:C9:05:48:EA:9E:F5:AD:71:20:59:3C:FF:7C:08:73:E2:D5
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE4F1EBAD2AA735CA0B0CA580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60741251-697a-377e-9e10-726d95497412.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2600:1008:b230::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:eb:ad:2a:a7:35:ca:0b:0c:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=0a702a8d-a29a-4a9f-9611-63e3c5825531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:9f:31:20:3c:9d:f9:af:e8:54:63:d4:f3:
                    68:6a:29:cf:64:87:cc:7b:e4:52:f2:d3:c5:0e:80:
                    2d:9e:b9:9d:00:1b:59:f1:67:3c:58:32:a0:80:12:
                    a9:1d:e1:12:74:43:31:6f:40:42:ab:1c:a7:02:6f:
                    51:af:b4:0f:8e:f4:f6:d3:66:65:5c:6e:f8:b4:a2:
                    2e:57:32:51:4e:45:ef:50:62:02:c7:ed:3b:69:1b:
                    fc:83:bb:0e:02:31:c0:28:0d:9c:31:a9:44:b3:50:
                    c4:fa:2c:e5:a9:a5:d0:05:fe:9c:18:5a:31:50:26:
                    a8:50:fa:36:1b:64:c7:ae:70:ae:bc:5c:ea:c9:3a:
                    45:d1:a6:8a:56:92:ef:67:62:6f:ad:d7:57:7a:e5:
                    f2:c9:64:50:ff:e0:bc:fd:3d:ff:f5:dc:8f:eb:c8:
                    d3:42:80:02:9c:8a:a9:4d:67:8b:e9:e1:5e:a8:8a:
                    cf:35:d5:af:45:21:d5:ed:89:33:a5:d9:14:26:83:
                    1d:11:b1:fa:21:5f:73:64:fe:75:f9:59:f9:bc:60:
                    d6:75:21:51:65:ee:bb:44:8d:ae:cc:66:14:65:4f:
                    fc:b1:40:33:be:71:d1:5d:a4:11:4e:59:f0:43:ba:
                    bf:da:31:9f:d5:1a:07:74:fa:41:c5:31:85:4b:d0:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F3:DF:C9:05:48:EA:9E:F5:AD:71:20:59:3C:FF:7C:08:73:E2:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60741251-697a-377e-9e10-726d95497412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b230::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a2:29:b4:0e:69:1c:f6:75:23:2b:31:9a:62:2a:05:92:8c:
         83:07:1a:85:ca:6c:2c:52:62:6b:5a:ed:37:1c:e7:92:08:56:
         44:19:a8:ec:11:be:37:4c:4d:0f:26:33:d7:1f:99:44:4c:a9:
         cd:51:4e:aa:2c:6a:5d:41:7e:13:85:d0:65:f9:5c:72:7f:89:
         b7:21:10:8b:f3:61:f4:5e:78:71:49:5c:ab:37:64:f2:58:1b:
         10:77:1e:2a:1e:54:f8:ec:fd:ac:04:3e:57:43:83:d5:21:b2:
         5e:77:20:04:f5:35:18:e3:2d:d7:d0:da:b0:5c:a4:55:b7:7a:
         34:c9:8e:dd:70:83:01:22:9e:4f:f1:27:c1:31:2b:5b:ec:6e:
         aa:03:62:ff:48:c6:19:2e:eb:9d:20:9a:73:a5:73:73:f9:fb:
         be:c7:34:cc:ce:d1:df:28:73:87:c5:7f:2c:31:30:d7:d0:c3:
         31:fe:9e:27:4b:10:2a:8f:f6:1c:41:c5:df:f5:a5:95:16:fc:
         3a:81:6b:9c:86:15:5c:28:bd:fb:0c:ae:12:d6:82:5c:1c:3c:
         f3:aa:b3:3f:a2:83:75:33:6c:98:6a:3e:30:25:2d:ac:e4:15:
         30:f7:c2:09:24:1e:cd:c2:e9:14:73:fe:00:fa:93:e6:66:6a:
         d0:0a:b8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:55:22 2026 by rpki-client