Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd9e157c-4a66-38b4-857d-cf63ddd98fd2.roa
File:                     dd9e157c-4a66-38b4-857d-cf63ddd98fd2.roa (raw, json)
Hash identifier:          fr9uWG1K2aCaOpIydCKC0iXGhECrRe56NwlYNet0qy0=
Subject key identifier:   1D:54:E0:40:66:A8:01:10:3D:A7:33:81:F9:27:87:72:72:12:01:4F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F86DD98593CF695227F686EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd9e157c-4a66-38b4-857d-cf63ddd98fd2.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     6167
IP address blocks:        2600:1001:f1ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:98:59:3c:f6:95:22:7f:68:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=bbf6e8a0-5963-4066-b26c-7e4f03820905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1a:b0:82:a9:80:56:c4:0e:83:36:1d:3a:82:
                    a8:be:f6:a1:7e:91:20:82:4c:65:b1:a7:48:29:c1:
                    2a:d8:f2:84:d0:33:ac:5d:e0:a2:ff:ca:ac:5d:86:
                    ce:e9:61:40:18:5c:b8:36:70:e1:32:32:d2:65:7f:
                    03:bd:17:fd:10:fd:7a:a5:4f:46:ce:e7:4f:12:45:
                    d2:fc:12:db:aa:7f:ce:32:96:77:38:78:34:3a:e7:
                    ad:cf:2f:df:11:c0:2e:c7:06:ae:8a:67:5e:cb:f5:
                    0a:f1:c0:f6:54:4a:45:0f:19:f1:79:04:61:33:9e:
                    3c:a3:53:b1:5d:aa:ef:7a:42:b8:2d:2b:b3:b0:ce:
                    af:e6:dc:99:82:4f:13:46:10:23:da:6b:dc:9d:ba:
                    c9:5a:00:a5:32:03:a6:41:69:50:92:c5:76:f5:e7:
                    72:13:4f:16:1e:20:f6:78:4b:8d:72:df:05:cd:e0:
                    1b:94:0a:4f:86:9b:27:5e:3f:28:ba:ed:21:b4:8b:
                    e0:31:5b:7f:ca:f1:98:8d:c7:b3:9a:e8:78:e7:84:
                    92:c7:f5:fe:94:c6:4b:c8:5d:f3:e5:da:9a:39:4e:
                    9a:6f:cc:4f:a5:e3:2a:c2:77:7e:10:f9:1e:80:08:
                    f0:4a:f1:93:34:59:0b:b8:8c:76:a2:0d:94:d7:43:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:54:E0:40:66:A8:01:10:3D:A7:33:81:F9:27:87:72:72:12:01:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd9e157c-4a66-38b4-857d-cf63ddd98fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:f1ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:ff:79:b9:13:32:61:28:7f:f7:f1:02:24:9c:bb:5b:60:
         57:36:07:2c:a7:75:46:cd:80:f5:99:ad:77:32:65:ac:2d:e9:
         e3:c2:80:4a:21:c4:1f:6f:f8:36:db:98:ee:fb:61:8a:4d:0b:
         89:cb:82:54:d7:80:f6:1b:99:6f:6e:18:37:af:64:51:df:61:
         20:43:73:83:8d:01:dd:fc:7c:ba:ed:27:bf:7d:3b:6d:a4:25:
         a4:b6:58:53:c3:51:8c:93:d7:e9:f1:e8:af:03:84:14:9c:77:
         39:19:0f:38:cf:7a:09:d6:13:92:15:94:5a:9c:59:ad:b5:15:
         ba:dc:b0:88:9a:ba:f2:ae:24:e3:79:44:39:da:6f:7a:b4:b1:
         e7:57:04:7b:91:01:28:9d:a9:4a:bf:58:5b:6c:1a:bf:c0:9c:
         12:b0:0a:e7:c7:a2:58:41:3b:b2:1d:c8:e2:5a:b1:08:ac:45:
         41:eb:79:dd:7c:1c:4b:e0:45:fa:12:51:5c:ba:95:26:ed:df:
         f9:94:3c:d6:ca:6b:e0:05:5e:c9:b5:9b:29:a6:20:bc:f6:84:
         85:ce:0a:98:3f:30:c6:12:7a:1f:56:bd:4b:72:c7:03:36:72:
         a3:6f:80:e9:cb:77:c0:16:19:4c:41:1d:de:e5:38:7f:62:a1:
         3b:41:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:26:42 2026 by rpki-client