Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01edfa6b-9cd8-32ae-99b8-698b30c3d45c.roa
File:                     01edfa6b-9cd8-32ae-99b8-698b30c3d45c.roa (raw, json)
Hash identifier:          r4QPHT9oa+bFmGSbSLO4ExCk7x+a96WRI5AcOpfltWU=
Subject key identifier:   5E:40:F1:AF:27:25:34:20:67:70:10:D6:25:C0:2A:28:62:F3:E1:AD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD1D7864231124DC66DDB80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01edfa6b-9cd8-32ae-99b8-698b30c3d45c.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1006:b350::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:d7:86:42:31:12:4d:c6:6d:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=e4392dfa-5326-4908-800d-812128a4c6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8d:50:87:8e:9b:08:b1:5c:7b:ba:82:34:4b:
                    58:bc:0e:dc:4c:48:e3:d4:c1:5c:98:bf:a9:93:b9:
                    3a:b1:61:11:68:ae:be:b0:6e:df:d1:7a:e9:81:db:
                    0c:02:fb:d2:a8:4b:56:93:cd:29:02:f8:2c:14:e2:
                    6c:c7:6a:63:0a:64:05:9a:3a:49:95:f5:a1:e0:63:
                    a1:60:31:73:e3:3c:6e:c9:75:a3:58:5b:84:31:8d:
                    15:63:a2:15:fe:a8:14:64:43:2c:6c:4c:c1:89:64:
                    89:d3:ad:d5:d0:1f:f4:be:14:2c:42:8d:29:a6:27:
                    8e:47:4b:a0:98:c7:c7:10:9e:40:55:69:d5:14:74:
                    0a:f7:0e:de:61:c9:29:2a:d6:96:1c:01:aa:e9:3b:
                    68:58:bd:61:42:16:7c:a6:ad:b4:9d:7f:3f:a1:de:
                    95:38:64:a9:c2:c4:fa:5a:59:41:e7:fc:10:6b:60:
                    36:71:94:ce:ab:bd:fa:dd:5b:63:c0:b9:d3:a0:d2:
                    be:38:9f:05:2c:c5:30:13:8e:35:e3:d8:12:b0:f8:
                    d5:5a:90:ff:34:81:64:46:aa:50:76:d6:73:b1:5a:
                    41:a0:7f:79:5a:cc:c6:49:6f:12:3e:db:96:9b:0d:
                    29:72:a2:9a:e9:d8:69:91:0d:2e:4e:9e:46:5f:d5:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:40:F1:AF:27:25:34:20:67:70:10:D6:25:C0:2A:28:62:F3:E1:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/01edfa6b-9cd8-32ae-99b8-698b30c3d45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b350::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:89:3a:70:ef:79:f2:7a:7d:38:71:d0:0d:c8:2f:33:4e:70:
         08:32:30:06:5d:0d:56:b9:21:86:6e:0f:8b:d6:45:4c:fb:f5:
         32:11:74:02:24:bf:a8:49:18:85:24:b4:61:9a:c9:53:31:a0:
         0f:9e:fe:d5:99:a8:e8:33:58:c0:26:9d:b8:c7:f1:8b:ed:55:
         ae:69:eb:73:49:19:58:59:08:b2:bf:29:51:a3:74:06:56:db:
         f7:28:1a:52:0c:f4:48:67:f4:f6:64:77:42:76:8a:18:49:a3:
         f7:35:b7:79:7e:9a:cd:16:a4:57:5b:86:64:e7:0b:dc:c3:45:
         94:65:23:12:06:1a:96:a1:0d:52:0f:40:03:71:cf:42:cd:72:
         14:e5:bf:f5:7c:75:0e:eb:f8:8d:92:ca:ac:b4:06:0c:ce:1b:
         98:c4:0a:ba:90:01:6e:94:ee:b7:88:70:6a:09:b2:bc:f8:76:
         c4:c9:d3:ab:76:59:8c:25:c3:ee:9e:16:1a:a7:ab:24:90:3b:
         c7:3f:27:76:a1:c8:0f:d9:26:dc:6a:17:bd:0d:f5:d8:73:b0:
         8a:c9:05:65:cf:79:8e:50:b6:40:54:a1:ad:67:58:54:52:3b:
         f7:28:0a:3d:3d:a9:87:e8:71:c5:fd:ca:ef:25:80:9c:d2:82:
         ce:e7:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:44 2025 by rpki-client