Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23b86170-fab6-347f-ab77-0c7c4308f73e.roa
File:                     23b86170-fab6-347f-ab77-0c7c4308f73e.roa (raw, json)
Hash identifier:          vbku3wLsVlT4WakSX/dTwW3wzg5inJhW2hjrsmfTw8g=
Subject key identifier:   D6:44:D8:EA:4F:A4:00:D4:40:36:3F:71:BC:3D:C5:D3:0D:7E:4F:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A1188B5EC23B5AA67CAC850
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23b86170-fab6-347f-ab77-0c7c4308f73e.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1016:a100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:88:b5:ec:23:b5:aa:67:ca:c8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=3c911c6c-e480-488b-a182-564604ae522f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:f3:2e:65:db:ab:8e:b5:c2:17:eb:96:a7:
                    28:48:f0:2f:83:90:f1:14:7a:18:b9:d5:5f:36:4d:
                    6f:b0:b8:0f:ff:08:38:87:4b:0f:6a:ec:7b:c7:8b:
                    3c:bf:00:1d:88:6d:0e:90:d6:3b:5e:92:a2:e6:fe:
                    45:78:3f:d4:55:d4:5b:34:96:5e:5d:f1:07:1c:be:
                    7d:43:0b:18:c3:28:30:c4:c8:7b:fe:11:41:df:9b:
                    2b:e3:f6:fd:c4:1e:b1:bf:28:da:17:74:e1:b0:c3:
                    a6:0e:0a:bc:22:11:80:85:ae:08:16:8d:c6:6d:da:
                    1c:03:59:cf:a3:4b:48:a7:0b:28:a8:06:b3:bc:68:
                    0c:6d:16:e2:84:25:dd:99:e8:bf:89:e7:f8:96:1c:
                    6d:53:3d:62:92:1f:4e:53:66:90:b5:6e:ce:d4:df:
                    7f:08:2e:08:ac:73:c9:f1:3f:dc:69:11:c5:ff:cb:
                    dc:77:a3:ae:be:6a:ae:fc:4d:ce:9b:31:df:4b:49:
                    4f:a6:2d:e0:40:b7:72:97:c6:fe:bc:a4:43:e2:b7:
                    7c:db:06:e4:d8:3c:13:1b:15:be:3e:94:97:4a:f9:
                    f9:4d:a4:67:a2:4f:ad:14:d8:f4:bf:50:bc:7b:30:
                    de:a5:15:f2:c4:c4:96:4c:0c:7a:ef:85:74:44:5d:
                    66:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:44:D8:EA:4F:A4:00:D4:40:36:3F:71:BC:3D:C5:D3:0D:7E:4F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23b86170-fab6-347f-ab77-0c7c4308f73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:28:03:da:32:40:8a:42:71:c7:45:ae:19:c9:05:50:b1:91:
         38:7f:d5:f3:4c:92:5d:39:f7:80:de:b5:27:bb:72:fa:f4:c7:
         58:2e:f9:e6:cf:e1:3b:f0:c6:74:59:0d:ec:22:ea:21:26:c5:
         13:0a:12:04:92:83:8b:71:04:02:e4:b2:10:1a:52:97:a6:a0:
         4a:06:7e:0a:3e:6d:f4:ae:42:f6:7e:ca:c0:b7:ff:6d:9d:c4:
         08:90:44:65:f2:be:34:ad:f2:6e:e4:93:51:77:ca:c2:a7:54:
         33:14:3a:cf:e0:39:d2:3f:8e:a6:27:5c:69:70:6b:97:c5:70:
         0c:bd:1b:26:88:b2:10:e9:be:d7:53:2f:34:b4:9c:8b:d2:4a:
         eb:5f:87:c5:a4:b4:22:8b:7b:22:1e:02:cf:f9:7b:9f:27:68:
         b8:a4:7f:ab:5d:71:24:58:2b:b0:a3:a5:b3:e4:b8:1d:36:68:
         ab:ef:6e:89:ca:91:a6:e7:9e:e5:4e:3e:23:30:56:4c:be:db:
         63:6c:a6:57:11:77:ed:e0:e0:fa:68:77:56:d4:c9:b6:3c:22:
         d9:d0:90:5c:96:e2:cf:41:59:55:01:1f:75:a5:53:d4:15:44:
         8f:f9:c5:5a:39:ac:22:26:14:b2:25:d2:38:56:e6:eb:5d:dc:
         23:fe:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:50:58 2025 by rpki-client