Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2061b90a-eff4-3ac4-b496-af22d2bdcfc5.roa
File:                     2061b90a-eff4-3ac4-b496-af22d2bdcfc5.roa (raw, json)
Hash identifier:          ZMSFYxt87cTeCJqqRq/P8zBCoNI7c/PUTvz5VyK86Aw=
Subject key identifier:   DC:56:7F:5F:52:B4:D6:AB:58:88:D8:07:F1:72:30:75:BD:C2:E3:16
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C9A87929980256D45BF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2061b90a-eff4-3ac4-b496-af22d2bdcfc5.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:b0d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9a:87:92:99:80:25:6d:45:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=4f37f83b-8b91-431b-b9ba-3e475beb5fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3c:b1:bb:62:99:e1:bd:33:49:d3:4c:a6:c7:
                    43:29:e9:15:44:8a:42:14:52:b7:65:be:74:53:8a:
                    d2:a0:73:f9:18:19:08:7f:66:a1:fa:b0:ef:6a:09:
                    e1:d2:a5:e8:59:1d:ba:c4:3f:e2:5e:8b:72:08:97:
                    53:27:08:f5:a7:56:b7:62:47:25:14:5d:20:d2:0a:
                    e2:d9:36:29:31:21:f6:cd:2c:86:8e:21:95:6a:fe:
                    a0:ad:fb:1a:9f:47:b3:da:8a:19:9d:64:bf:44:d4:
                    e5:4f:86:00:16:d7:62:ca:3a:f5:fc:55:e5:33:a1:
                    cf:67:ab:2d:ed:e7:69:67:4a:3c:f3:30:75:82:68:
                    46:5c:46:27:61:c1:cc:38:a6:8e:f3:fb:6d:05:84:
                    5a:aa:af:18:46:ea:85:3c:dd:33:76:57:90:1d:a6:
                    61:c0:a1:da:b5:e5:e7:4a:26:71:7f:db:fd:3d:21:
                    26:c1:d9:74:30:18:95:3c:04:9f:3d:08:8d:38:cd:
                    3e:14:5a:35:55:6b:09:a2:b1:27:34:d3:9b:44:b2:
                    0c:9d:06:f4:b0:dc:b1:eb:7e:8d:d2:38:99:fb:f6:
                    39:4b:e3:5e:13:4a:30:47:f6:34:97:20:a7:94:ff:
                    99:24:f5:68:2e:a4:8f:02:47:b9:dc:e4:8b:b4:eb:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:56:7F:5F:52:B4:D6:AB:58:88:D8:07:F1:72:30:75:BD:C2:E3:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2061b90a-eff4-3ac4-b496-af22d2bdcfc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:b0d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:0b:c7:b7:ab:d0:f2:cb:ef:da:29:54:bb:3f:29:59:ca:82:
         cb:61:41:20:66:31:14:55:3f:52:89:6b:dc:fd:bb:f6:be:2d:
         de:15:e3:09:32:95:68:6d:d6:6c:6b:cd:be:43:06:60:2f:ed:
         e8:0d:de:e5:9d:47:7d:a4:08:e1:f6:23:ad:44:8c:3d:1a:53:
         3c:96:1e:a7:07:ea:2b:f5:0e:ce:d1:27:f2:28:bc:1c:08:ac:
         19:ff:ef:10:e7:28:4a:55:f5:3f:d0:91:94:c5:77:17:b9:c1:
         5b:c2:41:b0:1c:a5:18:a3:7e:40:48:9c:33:9e:df:37:76:b5:
         27:5b:df:1a:a0:9f:f2:2d:5e:8e:5b:51:68:72:d0:60:e7:04:
         98:ed:b9:3b:0a:8d:be:b2:6f:ca:e9:bb:26:0a:c7:d0:0e:bc:
         da:51:dd:4e:46:d4:df:59:f1:31:1b:ca:e8:e1:25:17:88:29:
         fa:b6:8f:df:ed:5d:03:ae:98:a7:ab:a1:8f:04:eb:d2:17:b8:
         e6:86:19:92:1c:3b:5f:3d:cd:ef:a7:0a:a8:26:e7:f7:12:5a:
         94:d7:e5:48:28:d8:ac:b5:7c:9f:da:26:e4:20:9c:10:f9:05:
         e9:92:46:23:77:db:ab:af:06:c7:11:46:ba:4b:09:62:a6:f6:
         e1:d0:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:04:46 2025 by rpki-client