Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d688d00-a178-3f58-bdec-c9dd235dd58a.roa
File:                     7d688d00-a178-3f58-bdec-c9dd235dd58a.roa (raw, json)
Hash identifier:          vG2TRv+ubY+E9CT3FMnD4KbLdoHM+mqzUopygBDuBU0=
Subject key identifier:   2D:BA:B4:CF:78:32:E1:F6:10:56:8A:F2:F7:BE:9E:04:E3:6E:DC:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5E62F6259002AC486971EA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d688d00-a178-3f58-bdec-c9dd235dd58a.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     6167
IP address blocks:        2600:100c:b0f8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f6:25:90:02:ac:48:69:71:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=2c12defb-a7d4-4259-bf9b-7fd4fa39700f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:b0:ae:98:d4:d2:18:65:95:be:ec:fe:12:
                    c9:ae:cb:0a:be:50:d0:7f:2b:f5:f8:da:41:29:01:
                    f2:c9:ae:33:35:27:e4:53:c8:fa:84:8d:d4:12:ad:
                    01:6e:37:14:bf:1a:da:30:63:e5:8f:63:58:d6:31:
                    bd:c9:d7:5e:09:39:aa:a7:7a:82:22:0d:6f:e5:e2:
                    94:61:a7:41:75:b5:ea:bb:63:db:87:91:bf:6f:25:
                    a0:7f:76:2b:84:c9:3f:71:d9:f3:7d:e6:e2:71:3e:
                    f3:5e:5b:b4:f9:06:cc:1d:84:66:5c:dd:59:81:06:
                    5f:47:3f:60:1d:6e:c3:a6:ac:e9:14:01:08:bf:b6:
                    3a:b5:5d:4a:3b:36:13:40:2c:85:a2:ee:be:fb:cc:
                    7b:72:4d:e6:fe:64:28:29:58:50:9c:77:45:01:95:
                    e7:7e:69:73:84:df:62:cb:44:6c:6e:73:5a:cf:9e:
                    10:95:96:c8:6b:7c:59:ce:3a:c4:93:36:8b:56:49:
                    38:46:2a:5f:09:f4:35:13:24:77:6f:b5:5c:d9:ee:
                    9c:1e:70:41:e0:0e:e8:1f:a6:46:1c:00:17:c7:c5:
                    b1:43:77:8e:32:3e:b6:29:84:f4:92:6a:39:ed:04:
                    74:1c:f0:8f:3a:8b:f5:4a:03:62:cd:f8:09:91:fc:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BA:B4:CF:78:32:E1:F6:10:56:8A:F2:F7:BE:9E:04:E3:6E:DC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d688d00-a178-3f58-bdec-c9dd235dd58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b0f8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:92:c5:f0:4a:8d:ce:45:a4:40:f2:f0:5b:f1:89:bb:2c:
         34:fe:c4:68:76:9d:77:87:f6:12:6e:97:d5:d3:b0:c4:69:5d:
         90:1c:cd:47:87:df:7b:c0:a7:25:de:6b:09:77:20:79:48:67:
         38:8d:8e:53:10:e7:c9:6a:81:23:5a:6d:98:31:64:da:ba:ac:
         dc:03:44:ca:03:60:24:30:ea:9a:5b:06:dd:61:a3:0a:dc:7e:
         2a:4c:86:24:ff:ca:6a:3c:3d:be:d2:71:b1:20:b1:2e:a4:cf:
         20:11:46:13:da:b5:87:99:4b:ed:86:b3:69:61:10:a0:09:61:
         fd:f1:8a:71:22:ad:57:41:67:f8:21:5f:dc:16:c4:2a:98:43:
         d2:24:4f:28:ce:1c:e9:e1:0c:60:1b:99:cb:2b:e4:05:27:b8:
         13:6b:8c:90:c2:2e:a1:48:87:68:9a:b1:ad:02:63:11:c6:ab:
         37:b5:29:92:47:cd:b8:fd:23:cc:14:6e:3f:4a:ac:bc:0a:1c:
         35:48:29:b7:5e:14:c7:ab:0e:a0:e9:f3:a0:a4:28:35:b8:9f:
         63:d9:ad:93:6a:f7:8c:63:04:c8:d4:bb:30:2f:fb:0c:80:c5:
         65:fa:33:74:0c:e4:0e:43:05:fb:09:bd:49:e4:35:e3:7f:75:
         d7:f3:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 09:14:28 2026 by rpki-client