Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf5fc5fa-0789-31ef-81cf-ba51862e5e6c.roa
File:                     cf5fc5fa-0789-31ef-81cf-ba51862e5e6c.roa (raw, json)
Hash identifier:          0YzTXRFVM4pt6geoXM7xarQfs7zSUYWFNGZcZiH4bJw=
Subject key identifier:   5F:40:E9:76:E1:FD:E6:9F:EB:D1:9E:9D:5E:D7:F5:D4:76:0C:04:8B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F32432BDA3EB4554C8369EC00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf5fc5fa-0789-31ef-81cf-ba51862e5e6c.roa
Signing time:             Wed 16 Sep 2026 17:41:13 +0000
ROA not before:           Wed 16 Sep 2026 17:41:13 +0000
ROA not after:            Tue 15 Dec 2026 18:41:13 +0000
asID:                     6167
IP address blocks:        2600:100f:a120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:43:2b:da:3e:b4:55:4c:83:69:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 16 17:41:13 2026 GMT
            Not After : Dec 15 18:41:13 2026 GMT
        Subject: CN=d51f7ccc-f3ac-42c5-8dc3-bd1f09193e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:fa:36:cb:1f:84:03:79:90:8a:c6:3d:22:
                    12:a9:cb:df:67:2d:66:3c:d8:3e:e1:4b:dc:dc:cb:
                    a3:98:39:52:58:08:8b:e9:4b:8d:ec:fc:a9:22:40:
                    d1:8b:09:72:1d:7b:f4:18:4c:f1:7f:b0:f6:11:10:
                    34:2b:33:54:72:0d:1d:0c:ec:30:66:ad:65:d4:30:
                    49:33:3b:ff:83:63:a2:ad:ff:89:e4:0a:82:85:c8:
                    fc:ba:6a:5c:86:e2:ef:2e:b0:c1:90:86:5e:95:82:
                    98:a4:a0:60:71:af:6c:ed:51:59:1d:85:e2:5f:fc:
                    f7:e4:78:bd:5d:b1:a7:2b:4c:25:67:1c:9d:11:e6:
                    95:fc:40:e9:dc:f6:02:37:83:59:fa:28:07:9b:92:
                    c9:78:b2:c0:13:2a:d2:a4:9b:b3:fe:f0:9b:97:40:
                    66:b4:40:3e:8a:b2:4f:ea:90:a1:bc:31:13:38:26:
                    93:71:b0:98:cb:b2:28:fb:ec:8f:6f:c5:1b:0f:1c:
                    9a:64:ab:cd:76:cf:7a:ac:ef:c2:14:24:08:0d:83:
                    59:31:82:dd:f0:83:dd:99:70:a0:79:fd:3b:8d:90:
                    f5:46:ee:e0:3e:8d:bf:df:10:32:74:68:c7:2f:11:
                    bd:51:7e:59:4c:80:e4:02:f0:f1:75:9b:bf:d7:8b:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:40:E9:76:E1:FD:E6:9F:EB:D1:9E:9D:5E:D7:F5:D4:76:0C:04:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf5fc5fa-0789-31ef-81cf-ba51862e5e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100f:a120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:74:a9:54:3c:53:5e:18:37:ae:93:8a:58:e0:5c:3a:4b:5d:
         f9:97:03:0d:fb:e8:52:54:ee:c4:18:51:f8:0c:74:f1:aa:a1:
         ef:27:de:41:55:15:1c:82:cb:3d:03:90:93:80:0a:2d:c9:2c:
         56:d8:4b:a7:58:f6:6d:81:31:18:5f:a9:a9:2b:f5:64:6c:fa:
         da:18:ce:21:46:14:8d:b4:33:6f:ed:84:2a:17:58:a1:99:23:
         95:d1:1c:82:1a:9e:0c:ac:26:3b:e3:9b:d2:4e:7e:89:94:d5:
         fd:62:b2:04:17:e7:9f:11:21:e6:c9:cf:3a:ae:a4:22:c3:fb:
         e0:5f:db:e8:c8:42:3a:7f:de:04:17:c8:c2:12:f9:34:81:ae:
         5b:cb:e0:d2:8e:30:de:a0:8d:d3:54:af:50:86:d5:87:3c:d3:
         45:7c:c3:99:79:47:4a:84:ff:e4:a0:c2:3a:b9:e8:b2:ed:58:
         30:56:62:3a:ee:1b:af:80:99:9f:b0:9b:58:5e:8f:45:3e:a7:
         cb:00:a4:26:9b:6c:a2:9b:a4:3b:95:50:24:a7:85:a2:a1:75:
         6e:43:ba:05:d5:64:41:68:b0:36:83:72:a2:0c:2a:98:a0:a0:
         94:16:c9:9d:1d:df:33:a4:c0:59:9f:f9:de:1b:f8:28:1a:1e:
         72:d8:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:55:46 2026 by rpki-client