Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11bdbca6-79ec-33c3-9b19-d69125e26a7c.roa
File:                     11bdbca6-79ec-33c3-9b19-d69125e26a7c.roa (raw, json)
Hash identifier:          wPy1B5o8Wily0M9PFl7mRqFAOKG9tQyH+mirGOkhq+o=
Subject key identifier:   E2:E0:3D:DD:64:21:E4:89:3E:0C:C2:52:A9:97:3E:BA:1F:CF:25:58
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EDCC1AD23CC4AE6959C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11bdbca6-79ec-33c3-9b19-d69125e26a7c.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1005:d160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ed:cc:1a:d2:3c:c4:ae:69:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=4b129282-14d5-4478-bfd4-46615565d4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:46:df:a1:14:10:22:3d:91:97:b2:8f:38:
                    2c:45:c4:80:33:af:95:0d:6a:c0:8f:41:08:53:85:
                    f3:72:fd:30:f6:fe:4d:81:32:ff:04:11:23:1d:00:
                    9f:a0:6d:51:30:c7:93:33:7a:7c:cf:e4:8f:c9:f9:
                    75:83:c7:ea:b1:3f:57:9a:f8:71:2b:99:38:0d:28:
                    58:86:82:f5:24:71:f5:f9:98:2e:b8:bd:9b:62:ab:
                    13:76:f6:8c:96:86:fc:78:1e:ea:90:01:37:88:be:
                    cc:fb:f4:8c:8b:ec:16:67:5e:3b:1a:36:71:f5:8f:
                    74:7a:e2:d4:62:f2:98:24:c5:d1:db:32:ae:2d:09:
                    31:cf:ea:0d:3d:39:ef:e8:b4:9a:2c:96:34:17:95:
                    f0:68:c6:21:f4:ad:a0:eb:60:c9:37:f1:1b:91:c7:
                    e5:48:75:05:62:52:ed:e9:f2:97:64:4f:c9:63:d3:
                    02:ef:34:bd:9c:ab:06:a6:d0:78:1a:e9:fd:7a:ad:
                    52:d1:fc:8c:50:95:ca:94:97:20:ae:63:74:12:04:
                    ff:17:be:ac:f1:6b:60:71:b8:ce:0f:bf:ac:5a:63:
                    c1:28:cd:d0:4b:a8:44:04:27:45:a2:d0:49:00:ff:
                    aa:a9:3e:6d:19:c7:48:2a:8e:dd:70:8c:d4:ad:49:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E0:3D:DD:64:21:E4:89:3E:0C:C2:52:A9:97:3E:BA:1F:CF:25:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11bdbca6-79ec-33c3-9b19-d69125e26a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:d160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e7:dd:1e:e1:2a:07:6a:de:9b:99:65:72:c7:59:f9:73:47:
         be:ca:cf:e8:13:71:c6:2b:ed:0a:b0:0a:02:82:41:dc:66:26:
         9e:09:e2:b8:80:3d:02:a2:39:2c:e7:bb:49:9b:d4:27:08:49:
         80:6b:12:55:8e:a3:2b:b5:58:fb:b6:9a:04:f0:ed:b6:77:7f:
         4c:56:98:67:5b:06:36:27:46:9b:0f:81:62:31:4e:f8:39:f3:
         5c:2b:7f:6c:09:c3:68:88:17:74:0a:09:bf:d6:76:d7:68:14:
         52:0e:c2:aa:8a:31:52:4b:fb:78:67:01:e8:3d:4f:aa:9e:f2:
         fc:33:5c:d9:73:48:df:85:80:5d:ae:79:ed:a2:86:94:d0:9d:
         66:56:f9:26:43:ec:7e:db:53:fd:a8:e1:cf:ce:ef:d0:64:ae:
         1a:8f:1e:e9:d4:2a:27:df:07:06:71:72:5e:96:c0:6e:4e:60:
         4f:fc:47:9a:07:8e:f3:73:39:31:c5:b3:96:88:8c:a2:75:2e:
         d2:dc:26:b3:7f:da:c1:d3:46:fc:48:99:35:7c:25:72:49:23:
         46:73:96:b7:0c:27:45:cf:20:f4:b8:66:47:be:e0:ea:0c:7e:
         68:8a:d2:7e:af:bc:79:69:d5:52:9e:79:84:44:43:da:8d:7c:
         80:31:ef:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:22:52 2025 by rpki-client