Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05b0a8f3-1766-3209-b7d3-f2bc9cc99289.roa
File:                     05b0a8f3-1766-3209-b7d3-f2bc9cc99289.roa (raw, json)
Hash identifier:          D3qZmvuypCvoKAzaiFOqG5XPXU+ja4+/ebePuReZ4Io=
Subject key identifier:   5B:66:73:58:BE:C3:5B:58:2D:7B:CC:5A:7A:6E:1F:F5:0F:CB:72:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B5DD20BC3EB75CABB79539780
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05b0a8f3-1766-3209-b7d3-f2bc9cc99289.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     6167
IP address blocks:        2600:1004:a070::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:0b:c3:eb:75:ca:bb:79:53:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=39392103-6269-4012-817e-f86947763ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:d2:f7:b5:3b:46:ff:ec:db:42:65:72:40:
                    d2:c5:dc:ba:6b:40:b6:6b:21:42:29:57:04:38:4e:
                    c4:b5:34:11:44:63:a2:d9:17:d0:db:c6:5e:95:f3:
                    17:b7:bb:81:07:de:b2:75:7c:77:68:40:38:a3:a0:
                    7d:db:2b:44:16:4e:c2:23:85:e3:12:df:8f:63:59:
                    45:79:ba:7d:d7:5d:ec:4a:be:54:47:47:21:bb:87:
                    f2:43:b6:5b:34:8d:ef:fc:ff:be:02:f6:3c:b5:2a:
                    0f:eb:ca:86:c6:f4:a3:bc:cb:a5:19:82:d6:cd:f8:
                    6f:f6:7a:fd:f7:a9:7b:53:7e:ff:14:90:3d:66:82:
                    6e:2a:e4:a3:47:a4:63:19:75:97:4c:84:4f:9c:e0:
                    05:f2:0a:8d:81:e1:1f:aa:24:6e:39:b5:2a:10:14:
                    65:79:ce:1d:4e:c0:c9:aa:31:9b:bb:6d:17:a1:32:
                    d6:c5:8b:14:b4:de:a8:b4:6b:72:1f:a3:b9:a8:dc:
                    07:e5:27:a4:7f:72:7e:ef:34:ea:f5:27:32:3f:3d:
                    66:9c:a0:5b:cf:73:d8:cb:f8:9d:60:3c:8a:38:6c:
                    d4:67:a9:94:f5:03:06:c8:e6:83:fb:31:54:40:33:
                    33:43:0d:4a:af:1c:60:cf:2f:6a:20:59:5c:d2:89:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:66:73:58:BE:C3:5B:58:2D:7B:CC:5A:7A:6E:1F:F5:0F:CB:72:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/05b0a8f3-1766-3209-b7d3-f2bc9cc99289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a070::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:23:e0:f4:ee:72:19:ca:95:aa:4c:fd:2e:b7:05:97:18:9e:
         c7:0e:b5:0f:99:60:4a:a1:9a:c9:59:f2:83:eb:cc:1b:9a:f7:
         8f:ec:b2:5f:1d:bf:11:a8:0d:70:55:cf:02:84:62:de:3a:e1:
         a1:6f:2a:66:fd:56:9f:f2:0d:0d:f0:f6:db:90:4d:b2:bc:9b:
         d3:14:d3:3b:fa:8f:f9:30:b4:e4:64:b2:21:5a:02:c4:ea:7c:
         d8:e0:d2:7b:0d:69:f9:fa:45:df:13:44:b8:d7:d2:c7:e8:4d:
         81:44:71:55:8e:34:ab:fe:4a:70:c9:34:37:bf:9a:bf:0b:db:
         c2:38:e6:27:2b:c0:3c:1e:e2:f0:ef:3e:ac:bf:f6:23:59:0e:
         1d:d5:54:23:94:0d:1e:1b:67:7d:98:f4:68:f2:9c:6d:c4:ea:
         e0:2f:1e:35:5a:28:b9:76:10:dd:6d:ee:9a:21:20:39:68:32:
         18:8a:c4:a7:46:1c:6c:cf:33:7c:0b:4e:62:e1:09:e1:09:df:
         48:88:9b:c1:8e:1a:92:19:26:d7:57:50:41:35:11:1b:cd:bb:
         cb:22:e0:47:b5:03:1c:b7:76:de:7c:73:b5:34:77:95:86:0c:
         a1:ae:a5:4d:a9:c0:cb:3e:5a:15:f8:17:95:e3:c4:3a:db:39:
         2e:49:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:35 2025 by rpki-client