Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc95477-2fdb-3460-8609-84a9e99b0a40.roa
File:                     1fc95477-2fdb-3460-8609-84a9e99b0a40.roa (raw, json)
Hash identifier:          3anQOXWf08BxbqwvJYNm2WxGnzI7ANgjxO4AkvIoESM=
Subject key identifier:   66:F0:FF:B8:2B:C0:3A:8E:73:CF:3B:7E:6B:9C:89:16:14:CE:84:53
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C95ABFD3A87AE4A6F7180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc95477-2fdb-3460-8609-84a9e99b0a40.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100c:b030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:95:ab:fd:3a:87:ae:4a:6f:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=b43c9e00-68f4-43ae-b435-ca9009b3c290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:4a:58:76:ae:ee:fc:9c:f9:78:c4:3e:46:
                    f3:e0:f6:b4:00:eb:6c:d6:50:50:c3:9b:b3:d1:98:
                    20:9a:dc:02:a6:3b:f0:5d:8d:de:84:7e:79:68:a5:
                    02:e6:67:6b:bd:70:cb:97:74:bd:a6:bf:bc:2e:5b:
                    fb:06:77:4e:20:38:00:f7:5e:e5:be:9b:d0:c1:ac:
                    85:9a:1b:ed:27:94:dd:28:29:7b:45:c4:99:63:c7:
                    ad:b8:11:48:57:d3:e2:9d:e4:3d:03:52:b8:ff:d2:
                    b5:2b:08:65:26:03:43:f9:13:4d:3d:68:4f:cb:26:
                    66:40:40:1b:9a:b9:43:85:7a:1b:58:3c:59:64:e3:
                    19:56:8d:90:cf:a2:ed:4f:a4:66:46:28:74:7d:04:
                    16:13:54:27:ff:ab:13:d5:b4:18:d5:60:5d:68:3b:
                    1e:07:e9:95:82:d2:be:38:0f:45:f8:6f:a1:1c:64:
                    18:fc:9d:f3:e1:25:1b:3c:d3:61:4b:88:6c:de:28:
                    bf:0c:e7:69:ad:35:3f:a5:40:4e:e6:04:57:98:d8:
                    52:28:b4:34:0d:03:21:d4:dc:36:d1:a9:c1:a1:b8:
                    3c:61:90:55:5f:84:83:ae:6a:5e:c4:60:1b:f4:52:
                    dc:3c:2b:8e:a9:77:79:21:3d:98:7e:af:9f:a7:e8:
                    5e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F0:FF:B8:2B:C0:3A:8E:73:CF:3B:7E:6B:9C:89:16:14:CE:84:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1fc95477-2fdb-3460-8609-84a9e99b0a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:b030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:2b:de:1d:0e:fa:61:bb:08:b0:ba:7b:94:5a:75:3d:20:b2:
         d7:a9:65:25:5b:96:cf:3e:79:56:70:bf:89:c9:a7:4a:bc:3f:
         e5:90:d9:91:86:d0:5c:79:94:05:9f:8a:eb:21:ae:2c:72:7d:
         3b:fb:b5:ea:39:ff:56:b4:31:68:21:da:f6:06:f6:0a:a8:1f:
         92:c4:9e:50:72:b5:4a:a9:ef:d7:88:dd:f3:82:80:c0:23:f5:
         70:f9:c2:79:e6:61:98:06:4e:5f:84:81:8e:d5:7a:7b:10:6c:
         a8:d3:9b:99:cd:ff:3b:a1:cb:55:88:a4:68:c4:eb:cd:7a:5f:
         cc:70:25:91:fd:99:e9:40:ae:56:de:d4:0c:04:8e:89:17:8b:
         08:30:a9:8d:8b:6d:0e:b6:10:0d:33:aa:ac:6c:49:a1:c0:35:
         df:07:05:f5:ce:54:55:fa:0b:43:cf:2c:38:ab:ad:f4:9f:41:
         a9:95:65:34:a8:33:85:c4:fe:78:0b:7b:03:e0:90:9e:de:00:
         4d:7e:43:ab:f6:fc:ae:f2:bf:b0:33:e5:27:14:d5:ac:91:c6:
         c0:ca:5a:3d:c8:39:42:73:8a:f1:04:fc:1e:a3:0a:53:44:6e:
         f9:7b:d4:d7:31:5f:75:fc:77:e7:c8:72:24:db:2b:d5:3b:7a:
         5d:92:b1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:00:29 2025 by rpki-client