Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88efc448-91de-3e12-a245-4e2354bc1b27.roa
File:                     88efc448-91de-3e12-a245-4e2354bc1b27.roa (raw, json)
Hash identifier:          DS5Mjdq+CJkFhL6QqHWSyLzpDJD+r2N7BA+pY5YIQHk=
Subject key identifier:   16:93:0F:2E:F5:24:C0:A7:1C:8D:9C:9D:8B:69:26:1E:F3:20:B0:38
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07ED08B910D40C31D7DE00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88efc448-91de-3e12-a245-4e2354bc1b27.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22677
IP address blocks:        2600:6c3b::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:ed:08:b9:10:d4:0c:31:d7:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=02a2fa6a-1999-4a12-af94-63074678aa72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c9:ed:3a:b2:7a:f7:f5:34:2f:4a:ee:24:ce:
                    5c:38:0b:63:99:af:1a:44:bd:bd:ef:96:db:77:23:
                    ae:da:a1:60:17:e5:98:8b:1a:de:de:47:7c:1e:7e:
                    50:a9:c1:c7:9f:61:4c:96:53:13:1f:30:cf:da:99:
                    d3:a9:1f:ca:3a:ea:aa:5f:db:c5:20:b5:94:cb:c6:
                    73:90:93:a7:26:b5:a0:7b:0a:73:bd:de:ec:34:ce:
                    ba:41:1d:17:e8:9a:9c:7e:b7:da:a2:6a:3b:ee:3c:
                    77:b6:e4:f2:e2:37:c4:05:a2:03:7d:27:ef:19:38:
                    9d:0a:08:19:d1:d0:69:e8:f4:b1:77:88:94:d8:05:
                    f5:d2:a5:05:b8:0f:c0:d9:2f:07:31:1b:7f:cd:dc:
                    58:a9:44:a5:d9:a5:9d:84:33:05:b0:ed:3c:d9:44:
                    cc:f5:c4:8b:a6:93:6b:ae:28:6c:ba:5d:bb:e8:29:
                    cf:c1:71:d2:88:36:07:b6:d7:c6:3e:f6:17:66:53:
                    03:be:bb:69:4c:90:c6:4c:99:f0:78:3b:f4:88:8b:
                    de:99:21:10:20:dd:a8:3c:c8:bb:19:00:df:41:68:
                    7f:05:61:4a:83:67:e3:04:e9:e8:b0:62:e8:dc:d0:
                    8d:c5:8a:19:de:28:e2:19:13:c3:e4:b0:33:ed:1e:
                    e0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:0F:2E:F5:24:C0:A7:1C:8D:9C:9D:8B:69:26:1E:F3:20:B0:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/88efc448-91de-3e12-a245-4e2354bc1b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c3b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:48:37:4d:a0:45:48:95:ed:11:4b:be:21:31:2b:da:d4:ed:
         c4:f2:c0:f9:dd:59:40:7b:bb:6b:7c:2c:39:a0:b2:da:c6:32:
         11:98:84:d5:ca:da:48:9b:3b:e7:5b:b7:38:ff:c7:d2:ce:8c:
         0d:8a:c1:81:91:65:c1:74:f1:b9:8d:10:1d:7d:43:36:46:a6:
         8b:39:d6:6b:ba:ad:a1:40:57:62:39:dd:4c:1e:f6:8f:0e:5f:
         28:74:07:71:b0:e5:b0:f8:2d:1a:80:ce:3a:00:2f:68:80:fa:
         85:cf:12:4a:f1:12:c8:1f:e1:4f:61:3a:07:6a:24:d1:4a:04:
         fc:9e:f1:4b:a2:e0:26:76:12:1a:6f:ca:87:fa:fd:9e:db:46:
         e2:99:13:cf:dc:4a:0c:3f:a2:2a:1d:88:b3:cc:27:8b:15:b9:
         0f:b8:0d:f8:53:71:30:3b:c8:f2:01:0b:7c:e3:99:0f:64:7d:
         c2:fd:f4:f0:cc:19:cb:77:eb:72:67:ba:38:12:59:31:d1:b5:
         8c:03:d9:5b:a7:e0:03:23:c9:64:d9:42:d4:70:9c:26:3e:56:
         68:e1:00:8f:f2:0f:b9:61:db:fe:41:44:2c:93:a2:8b:bf:bb:
         50:50:fc:a2:7c:aa:c2:f2:95:e1:16:f9:66:3c:76:e6:17:d6:
         98:43:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:08:15 2026 by rpki-client