Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8dad86-d214-3178-9bf2-b5f13e06c48b.roa
File:                     cc8dad86-d214-3178-9bf2-b5f13e06c48b.roa (raw, json)
Hash identifier:          xcAP/+yxVJWl7qsOXenFgjsd7cfGKwxInhFGqN4KsZ8=
Subject key identifier:   74:26:02:3A:7A:C8:6B:D1:F6:CD:1D:B7:CD:B2:C2:12:4E:57:75:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06726A95E4AFEE80AFF0F480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8dad86-d214-3178-9bf2-b5f13e06c48b.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        2607:f160:8800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:6a:95:e4:af:ee:80:af:f0:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=6e55ddd7-7f3b-4e2b-bd9d-e0f25f03030d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:7b:9f:a4:a4:5b:be:09:5d:15:06:dc:0c:
                    ec:6d:bf:82:5d:f4:47:3b:2e:6b:80:36:f3:b2:5b:
                    29:c1:d1:fa:6f:7e:77:b2:46:27:af:30:62:71:bc:
                    c7:21:b7:76:51:9e:3f:34:57:ae:a3:46:9d:3a:d7:
                    81:be:3c:e7:6e:98:84:34:db:31:33:d2:d9:8c:92:
                    32:1a:c9:c7:cc:c0:92:d6:38:1b:a8:9e:22:45:0d:
                    b4:69:c6:42:27:e4:a2:52:a8:bf:70:6b:f6:a1:76:
                    67:3c:37:0a:a9:cb:aa:5b:1f:26:5e:cb:91:fe:41:
                    b4:8e:0b:c8:91:24:e7:96:01:3f:09:3d:21:f5:9e:
                    0a:9e:3b:ff:66:75:92:b8:08:e1:15:1a:82:ba:45:
                    7b:db:64:8b:60:98:13:ff:5e:dd:44:43:19:24:1e:
                    73:8c:67:8f:e9:e0:15:fb:c2:69:3d:e9:cc:a4:d6:
                    92:ee:ef:66:bc:e5:2e:ba:ed:c6:e6:71:96:57:3a:
                    69:ea:fb:f0:80:35:f8:f9:98:4b:2e:97:15:d6:09:
                    22:09:17:0a:c3:b1:91:05:3b:09:49:c2:3f:8f:6c:
                    0b:c9:19:34:5f:0d:f2:49:34:5d:fb:b7:0f:4e:87:
                    13:c9:e7:ab:bf:4b:d0:3c:ae:2a:dc:a9:71:79:5a:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:26:02:3A:7A:C8:6B:D1:F6:CD:1D:B7:CD:B2:C2:12:4E:57:75:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cc8dad86-d214-3178-9bf2-b5f13e06c48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:8800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:14:68:68:d0:ed:b9:09:da:24:fa:d0:73:ca:dc:30:a7:38:
         fd:b4:5a:c2:d6:3f:a9:2d:25:42:ff:6d:b1:6c:77:25:d8:97:
         48:9f:45:d4:66:93:b7:8a:21:36:03:c7:81:0b:9c:e5:cc:78:
         4e:70:60:34:d3:69:69:d5:d1:e1:61:47:07:b5:00:88:42:97:
         5a:2a:f6:1c:66:9b:4b:e4:19:73:0d:c3:df:3f:f2:4e:7e:e6:
         65:59:6a:94:58:40:45:54:00:d4:8c:5e:c3:84:bd:ea:22:3f:
         9c:54:08:48:e9:96:25:e7:e7:93:5c:6a:49:ad:34:f7:7f:56:
         57:12:34:ec:c4:4e:cc:58:52:e2:e7:01:ba:e3:f7:cd:19:5f:
         5c:2c:c9:43:5c:5b:db:94:d2:1c:bc:03:f4:39:1d:e4:43:01:
         6b:39:3d:c4:7e:9a:b6:0e:4f:2a:f8:fe:d2:b2:a2:bf:78:3c:
         92:41:a0:26:49:e2:ef:48:fb:40:98:93:95:1c:38:de:45:18:
         c7:27:33:55:44:28:72:4f:23:b2:c1:37:31:a5:d5:b0:97:b5:
         7d:66:76:c3:61:4d:6e:08:a2:12:89:43:22:e2:6a:74:76:5a:
         45:87:42:55:2e:8f:96:e8:3a:80:da:a6:7c:5f:61:63:47:2b:
         ad:da:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:28:32 2026 by rpki-client