Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/158da650-d12c-345e-9b9a-c761b9a61a88.roa
File:                     158da650-d12c-345e-9b9a-c761b9a61a88.roa (raw, json)
Hash identifier:          wD2jL5+ayL20eHPj0AttS/SR3ZjEv1zQTpTLvwcYswU=
Subject key identifier:   61:29:2F:4F:1A:F6:D7:AE:57:6C:68:00:2C:E3:C5:33:DC:BF:DF:57
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3724B211F6F24768BDDB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/158da650-d12c-345e-9b9a-c761b9a61a88.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1003:b8d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:24:b2:11:f6:f2:47:68:bd:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=c24a5c6b-2556-4cb6-a03f-77449395f4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:20:c3:3d:0b:ba:c4:2e:ee:69:41:56:74:
                    b9:41:ac:90:36:6e:a0:5b:42:a7:f9:75:a7:b9:27:
                    be:fc:f3:ce:28:bf:72:d5:75:03:f4:18:2c:f9:a7:
                    17:ea:57:ab:fb:dd:5c:0e:6b:8e:22:16:38:84:7e:
                    6d:06:c8:0e:03:5e:6f:a0:11:8f:7b:fe:22:11:2e:
                    a0:e5:3a:e7:87:60:e6:52:48:3c:2d:e8:04:79:2e:
                    3a:e9:f9:d0:bf:c0:74:03:e3:0f:c0:98:3d:be:7f:
                    db:f7:62:ff:92:06:5a:9f:6b:7a:36:ec:34:dd:a6:
                    6e:9b:33:ec:c8:fe:ff:11:fa:a2:0b:30:90:05:1f:
                    21:72:89:ef:8b:36:33:7d:46:1c:fa:06:63:93:60:
                    b4:9d:b8:0b:5b:85:bd:19:7b:f8:c4:14:2b:e5:82:
                    34:3d:e3:ef:1c:7c:86:45:2c:a1:80:e9:25:44:a8:
                    f3:fc:b9:30:33:41:d3:82:0d:6f:61:a9:1b:0f:cd:
                    28:81:55:02:9c:58:c3:87:84:a9:d7:2b:1a:05:70:
                    a5:8a:b0:34:91:e4:9d:90:25:9d:2b:d6:d8:3b:42:
                    95:37:98:ed:2e:6d:a5:04:ab:35:6e:5d:63:ad:b7:
                    22:55:7a:e9:eb:cc:52:d4:a3:2a:73:08:18:a7:10:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:29:2F:4F:1A:F6:D7:AE:57:6C:68:00:2C:E3:C5:33:DC:BF:DF:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/158da650-d12c-345e-9b9a-c761b9a61a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1003:b8d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:67:97:1b:b0:20:5a:8b:34:95:60:47:bb:53:ce:83:d7:6f:
         e6:78:3b:e4:42:8e:03:c8:6c:e4:f6:b3:af:54:a4:1f:74:1d:
         0c:b6:e6:e3:c2:d4:37:f4:76:3f:d8:cd:e5:84:ad:eb:2f:d1:
         2c:7a:af:4e:c3:f1:05:65:4f:c9:ed:2d:e7:e4:d3:52:e7:5b:
         5f:1c:70:c2:49:cd:cc:e7:03:0a:48:2b:ea:f7:67:d9:5a:24:
         65:88:a9:08:b1:41:00:95:0b:5e:f1:1e:2c:80:31:a2:5b:42:
         9c:ba:45:fc:5f:b0:bf:1c:55:e5:72:29:89:18:76:b5:6e:14:
         14:7a:d0:b5:3e:8a:2d:89:0d:70:ac:68:8c:9a:2b:f5:28:1b:
         a3:63:b7:21:ed:95:ca:a4:79:47:bd:ee:ef:2c:bd:12:aa:8e:
         63:c0:02:0a:e3:bc:10:9b:9d:dd:c7:2f:43:84:b6:ab:c7:6d:
         06:a2:ee:ba:c8:5a:6b:b8:a6:59:28:ed:3d:cd:06:b9:dd:f5:
         59:97:ce:f2:56:bf:18:5e:94:a1:ff:fe:a6:d0:8d:33:2f:b5:
         fb:a6:a3:52:4b:7a:87:cb:64:7e:97:2c:7d:96:d6:cf:c6:d2:
         b9:4f:4d:b8:2c:f8:bb:25:3a:b7:9e:2f:94:36:03:12:ca:2f:
         ff:6f:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:40 2025 by rpki-client