Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa296b6e-a59f-3641-b026-11c4c2de1bec.roa
File:                     fa296b6e-a59f-3641-b026-11c4c2de1bec.roa (raw, json)
Hash identifier:          mbgtdvNZekbPLvYS6mF2wX9jvl92ZG+4YxqmpmaCJII=
Subject key identifier:   29:09:35:63:F2:0C:51:FC:D8:A7:CA:EB:6A:2A:5E:33:5A:27:F2:E6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F89A86FE682679CE4C5D3CD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa296b6e-a59f-3641-b026-11c4c2de1bec.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     5650
IP address blocks:        2606:4d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:6f:e6:82:67:9c:e4:c5:d3:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=3d4578b8-856f-45ba-9c90-5c744c51fcfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:a8:4f:63:f4:52:d3:ad:49:25:aa:ae:00:
                    ea:98:29:0e:c9:01:06:d7:d2:27:15:29:d0:01:25:
                    d3:d3:6c:e7:ba:f9:be:35:2b:69:ef:de:27:0f:9b:
                    e9:64:3c:3f:40:6d:35:71:52:fa:13:bb:70:f1:21:
                    d4:36:cf:43:9a:d4:df:ba:88:7f:27:e3:bc:9f:b1:
                    ce:17:ce:94:e3:02:44:07:bc:d6:95:b5:3d:98:b5:
                    c8:8b:7c:d3:bd:1a:92:19:2b:cd:ea:33:ac:8c:a8:
                    10:22:67:12:22:9b:5c:cf:34:4b:f4:74:b3:ca:dc:
                    c4:19:c7:05:02:0d:37:fc:8a:c6:af:8f:40:cc:d7:
                    9e:e3:5a:a1:2a:ff:a7:37:f7:cf:af:79:98:84:e1:
                    88:13:d6:8e:4a:80:aa:b4:e2:f8:a6:80:4e:2e:52:
                    67:ce:db:65:98:29:c0:41:9f:a5:6c:ff:de:4f:46:
                    2a:d4:c8:f6:32:46:5e:42:85:25:1b:a9:22:38:3d:
                    73:57:ab:f4:29:90:f8:79:9d:76:da:8a:e9:ed:8c:
                    cf:e3:3c:82:5e:c2:2a:68:ff:74:07:da:42:af:97:
                    16:53:3d:a3:91:a0:37:ba:8c:bf:1c:74:1d:12:30:
                    63:46:45:8b:82:c0:cf:0f:3d:33:da:40:b2:fb:d7:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:09:35:63:F2:0C:51:FC:D8:A7:CA:EB:6A:2A:5E:33:5A:27:F2:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa296b6e-a59f-3641-b026-11c4c2de1bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:86:f5:b0:ec:5c:1a:51:93:c6:fe:4f:c6:d0:ad:b1:39:57:
         47:2d:4e:e5:62:c4:bc:ff:12:cd:c9:8f:b8:7f:f8:79:d6:5e:
         39:a2:1c:37:f1:89:0a:09:28:14:4a:35:dc:f5:c2:f4:94:8e:
         4b:e1:c5:a9:13:d6:98:cf:d5:49:60:48:03:ac:be:51:7e:4e:
         46:b9:c4:de:b2:85:33:21:74:ba:0e:ac:83:26:b5:37:4f:e2:
         96:ba:a8:8b:56:7b:e6:d3:55:99:e8:4a:50:d3:8d:d3:dd:25:
         f0:9c:17:1d:94:00:7b:ed:14:20:35:2b:ac:f7:df:cb:ef:c5:
         e0:29:9b:56:6e:d5:0a:24:28:a2:71:ba:02:51:75:af:e3:13:
         99:93:77:fe:b6:95:01:ee:04:47:52:f5:46:ca:8f:5c:5a:98:
         8c:40:f8:ab:a5:80:d6:75:a1:ec:bb:7f:f7:18:5f:2b:fd:90:
         f2:94:d2:24:75:cc:9b:cb:08:59:c3:d2:12:21:c8:36:55:4c:
         98:2c:ea:3d:70:34:a2:da:24:fd:66:d6:f6:d0:0b:39:f1:5c:
         a4:76:2c:c4:3f:11:76:7c:6b:f9:ad:37:7b:c1:28:32:4f:a7:
         7f:33:a8:77:f9:16:d0:ac:c0:be:02:da:47:19:de:d2:65:90:
         b0:3e:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:49:28 2026 by rpki-client