Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0725599a-5295-3da2-8a6e-ca682d3ff9ac.roa
File:                     0725599a-5295-3da2-8a6e-ca682d3ff9ac.roa (raw, json)
Hash identifier:          TwfBTxtvoy3g7jLrisYq15gH/RcxUcDBtVjgv+ile0M=
Subject key identifier:   9E:64:A3:D2:78:75:D6:F5:40:B4:4B:AA:68:17:56:10:62:60:FF:6E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C7DA20C7A4DAACE3AE700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0725599a-5295-3da2-8a6e-ca682d3ff9ac.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100e:b180::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:7d:a2:0c:7a:4d:aa:ce:3a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=2e655fd3-74ab-48f0-9508-459c757654cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:15:80:55:bc:04:9d:fa:ac:37:78:24:4b:
                    1e:db:14:8a:e8:a6:39:a0:dc:78:49:fe:f8:22:48:
                    9d:da:73:23:78:3d:4d:08:da:f8:38:ce:83:e8:53:
                    85:65:e1:ea:f0:dd:c4:5f:8c:be:89:e7:d0:78:b8:
                    dc:a3:a1:7d:0e:3f:19:b0:a1:b3:08:48:05:17:4f:
                    45:49:a2:84:a0:7e:f6:6e:de:47:61:bd:a1:6c:70:
                    41:ff:5a:f0:aa:05:17:23:9e:a4:c0:69:3b:d0:93:
                    75:4a:f2:a7:f0:c3:bd:25:64:1a:e7:e7:85:a6:b9:
                    78:62:6d:95:20:38:5d:42:3b:39:21:37:4a:bf:75:
                    ac:20:8f:a4:44:99:08:14:b5:b3:d9:84:0b:7c:6d:
                    8e:b2:db:ac:02:e2:49:37:ef:ef:4b:62:16:f5:b2:
                    df:06:8e:2f:3d:0b:b5:e9:e0:55:29:78:34:34:c5:
                    e0:b8:95:32:e5:70:1f:57:8c:10:64:2e:85:d1:29:
                    07:fc:9f:ea:74:12:d4:3c:42:fe:cc:b3:04:ea:71:
                    10:16:39:87:df:06:36:78:d6:fe:87:fd:2c:2d:b3:
                    dd:01:fd:f1:5a:f2:c7:04:ef:50:26:16:89:51:fb:
                    07:7f:e7:a6:05:48:5f:58:4e:e8:e9:56:71:a9:d5:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:64:A3:D2:78:75:D6:F5:40:B4:4B:AA:68:17:56:10:62:60:FF:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0725599a-5295-3da2-8a6e-ca682d3ff9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100e:b180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ee:7f:47:f8:4b:27:3b:45:5d:2f:61:8c:a5:3e:7c:6a:c7:
         df:9a:20:24:bc:e0:54:cb:ec:f0:66:c1:f1:ac:3b:c5:d7:46:
         cd:d8:8c:60:9a:6a:89:40:6a:68:69:cd:72:df:cc:84:66:bb:
         67:71:92:bc:97:4b:61:23:d8:60:fd:d3:5f:c7:9a:b7:72:18:
         64:b6:72:da:e6:f4:3e:af:0f:d3:f7:89:11:e0:ed:8b:08:e4:
         9a:1c:85:c0:c2:d2:a1:2f:5e:77:5d:11:84:fb:75:e3:9b:8c:
         b8:c9:cd:d0:14:d9:fb:fd:50:4e:8f:be:3a:be:4f:3c:db:55:
         43:88:50:94:28:27:ec:6e:07:69:cf:5b:f6:7a:f5:91:5b:91:
         1d:b6:7f:7b:b1:f8:84:ff:52:66:ff:5a:ff:a5:d6:62:57:0f:
         b6:c6:dc:c0:3b:e1:63:7f:9e:14:b8:26:ff:52:e8:c1:4f:1c:
         d6:c4:d5:00:d6:f4:8d:d1:33:c7:b5:e0:a0:c5:53:67:bc:a2:
         c3:98:61:69:ad:81:46:a7:dc:f7:be:67:0a:f2:53:62:ba:b9:
         0a:71:5e:bc:10:d2:c0:2f:c8:09:51:44:cb:00:aa:f2:91:b4:
         ec:b3:0e:05:be:29:7c:e9:4f:20:9c:ca:7b:86:3a:57:ef:5f:
         d0:e4:65:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:25 2025 by rpki-client