Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ebb19e6-1b47-3d70-b96e-71753e5e5422.roa
File:                     0ebb19e6-1b47-3d70-b96e-71753e5e5422.roa (raw, json)
Hash identifier:          jjVBRyy/H1TlsHhKZ1NFSVXMB6Pwe195dBK61BorwtQ=
Subject key identifier:   8F:81:C2:38:FE:10:F9:D2:6F:D5:1A:43:C8:14:7E:68:3C:DA:01:37
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117F8908467195860E6C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ebb19e6-1b47-3d70-b96e-71753e5e5422.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1011:b150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:7f:89:08:46:71:95:86:0e:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=7dddbe8a-a595-43a2-b05a-3dd909491463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:4c:1f:7a:da:00:49:01:f6:2b:81:df:d5:
                    46:04:84:c8:2e:bd:c9:8a:38:e9:e3:ad:43:46:c0:
                    19:60:c3:44:a1:dc:25:cc:a8:ab:66:7a:14:bb:c9:
                    78:5e:c9:fc:8b:f7:89:cb:16:2c:ee:eb:f0:71:b0:
                    2d:b9:b6:da:d7:95:dc:59:cd:4a:9c:22:ae:90:a9:
                    e8:56:26:e5:9f:f4:27:70:65:95:cc:08:8a:c2:c1:
                    21:be:81:72:35:38:6c:0a:7d:c7:e1:7b:02:8f:b1:
                    61:87:67:bf:55:be:64:7d:ea:d9:dd:02:60:a8:f5:
                    ea:32:64:8d:b1:e3:c6:4f:79:a9:b7:c5:d4:7c:91:
                    b7:58:00:4b:41:1a:a8:9d:4e:9f:f2:2f:c2:42:a2:
                    6b:b7:ba:cc:2e:d1:4c:7c:46:5f:a0:82:8d:48:f9:
                    a0:ea:8d:16:d2:b3:8d:78:bd:1a:33:7b:ec:cd:d7:
                    e6:c1:fe:e8:fa:a5:fb:f7:86:03:39:93:5c:f6:ed:
                    99:ea:70:33:da:e3:ac:e8:e8:07:e6:43:45:4c:9c:
                    11:ca:fd:6f:be:fe:7f:7c:c7:8a:ac:c5:58:74:9d:
                    26:27:8e:a6:a3:06:9b:8c:29:23:1e:5b:3c:d2:48:
                    0d:53:bb:82:b0:89:bf:01:84:03:78:a5:99:91:48:
                    49:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:81:C2:38:FE:10:F9:D2:6F:D5:1A:43:C8:14:7E:68:3C:DA:01:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ebb19e6-1b47-3d70-b96e-71753e5e5422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1011:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:f4:d5:4d:1a:c1:a0:bb:5b:bc:3b:eb:86:30:94:a7:0c:
         bb:3b:77:c1:e4:4f:72:57:dd:7f:84:e6:ab:aa:e8:2f:d4:d8:
         9c:a8:b7:1f:9e:e9:6d:bb:f6:4a:9b:77:b3:2b:60:67:b0:2a:
         82:e1:72:2e:d8:59:9c:b3:1e:23:1e:f9:a0:a5:48:3b:13:22:
         ab:05:99:61:99:ad:f5:fe:f4:f3:29:9d:a2:04:80:68:c3:bd:
         25:09:13:0c:d6:56:f7:46:a7:ef:29:48:a1:84:ed:1e:4c:37:
         1f:c2:17:17:c9:73:8e:0c:b3:0a:bf:62:f3:7e:ee:bd:88:5e:
         3d:63:e1:ee:4b:a9:ab:6f:4e:c2:d2:d9:f3:92:3d:dc:48:ff:
         a8:1b:53:6e:17:ee:e2:da:5b:20:45:cd:49:39:93:1c:22:01:
         83:57:d6:95:e7:f2:31:f7:ae:33:eb:0a:46:db:e6:fa:70:c2:
         68:c5:49:29:5a:7b:48:75:92:b5:83:5e:85:6d:73:dc:ac:9c:
         8b:c7:f3:a1:3a:44:8b:11:6b:0c:8e:9b:d1:15:c7:6f:b5:05:
         49:96:e7:79:82:f3:72:79:54:c4:86:21:bf:9f:c6:43:ae:e6:
         43:ce:14:58:fe:c5:2d:ae:27:1c:d7:0c:6c:d0:4b:85:98:5f:
         0c:6c:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:52:13 2025 by rpki-client