Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/030b2508-4a93-35f9-8a12-ce1d9338f724.roa
File:                     030b2508-4a93-35f9-8a12-ce1d9338f724.roa (raw, json)
Hash identifier:          tWzVO21djI8VR6SScONoZCm6xT+vDt3xtbruqz2Yd2c=
Subject key identifier:   02:0A:54:CE:3E:BE:C2:80:B3:FE:F4:74:CA:A2:D6:86:2C:AC:A2:62
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F2BAAF2EE3C6B0CB6300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/030b2508-4a93-35f9-8a12-ce1d9338f724.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1007:b030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f2:ba:af:2e:e3:c6:b0:cb:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=4b660068-8dbf-4eb7-b722-5c2a6df209f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:76:9d:f8:d6:b6:54:3f:37:ff:a6:c9:9d:85:
                    37:d8:04:f0:dc:af:b6:a8:df:40:87:f8:31:01:d4:
                    2e:04:cd:e5:d8:dc:a4:a8:dc:dd:9d:0c:a0:9f:b5:
                    49:1d:e3:97:89:a9:e2:34:6e:37:9d:1d:77:ec:5d:
                    b3:33:4e:4d:f8:ec:cb:65:33:33:e0:78:3a:1b:4a:
                    f4:93:4b:fe:7a:14:3e:2f:1f:2c:d4:5a:71:ad:60:
                    bc:67:48:fc:35:fe:d0:d8:a5:ab:59:04:60:7f:8c:
                    8b:5e:c8:39:98:61:1c:70:2b:c8:0d:54:f2:8e:ce:
                    2a:0a:33:ad:3a:93:cc:4c:46:62:c8:a1:c3:f5:e2:
                    bc:40:d1:df:b0:82:fd:2c:0f:ad:3a:0e:f3:1e:b3:
                    0a:c7:7b:c7:73:a3:a7:90:ba:d5:3e:0a:91:15:e0:
                    e3:e4:6f:07:4a:22:08:80:44:f1:c2:48:80:1c:8a:
                    00:2d:85:c7:eb:8f:d8:8b:32:ed:de:e1:32:ec:76:
                    90:21:b3:e1:73:15:e1:c4:a5:8f:81:8d:66:c4:e7:
                    82:b5:56:50:e4:42:14:ef:54:92:90:68:a7:bc:c4:
                    a3:6f:cf:8c:8e:5f:2a:7c:5b:ff:f6:4c:6b:89:ea:
                    44:ed:ca:37:ba:5a:fe:4c:27:81:f8:91:53:cc:5b:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0A:54:CE:3E:BE:C2:80:B3:FE:F4:74:CA:A2:D6:86:2C:AC:A2:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/030b2508-4a93-35f9-8a12-ce1d9338f724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1007:b030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:eb:35:88:93:be:cb:1d:f6:b0:e9:c9:1c:6d:7a:14:83:ba:
         e3:d8:dd:d8:09:bb:a5:64:dd:18:1b:29:ab:80:3b:a8:df:b3:
         9f:07:df:5d:47:cb:74:12:21:b4:45:42:3b:17:df:03:10:8d:
         89:81:13:0f:13:30:51:3f:d8:88:c0:84:5f:c2:d8:cb:eb:d9:
         47:f5:9f:3c:72:90:ba:1d:f8:a1:ee:ec:0e:5d:ac:4f:54:07:
         0e:51:5c:f1:ba:5e:84:96:9a:b2:70:65:89:5e:d6:25:87:04:
         32:da:15:ce:a3:4d:56:13:52:0c:31:63:06:89:75:1f:38:e8:
         2a:18:40:e3:65:8f:02:75:7c:1b:4c:ac:13:37:f6:73:fd:ba:
         df:19:39:cb:4b:3f:1f:d6:4a:ba:98:5b:cf:df:e3:9e:d1:25:
         d5:9b:98:35:3b:65:f6:8a:25:63:f1:30:aa:c9:4b:28:a4:70:
         24:39:da:0c:e9:2f:db:5d:c1:16:42:79:7e:7d:5f:02:00:56:
         9d:c1:17:26:ab:db:ad:85:e7:da:1a:14:bf:04:54:07:a9:7c:
         ad:a8:b9:62:97:b4:13:be:16:37:63:cf:72:c9:da:c7:cb:58:
         b2:cf:c8:02:74:dc:17:72:69:15:56:5e:96:27:b1:cc:fe:a6:
         28:35:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:55:55 2025 by rpki-client