Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/243c83e1-4500-3202-a500-d0c90e43c5c0.roa
File:                     243c83e1-4500-3202-a500-d0c90e43c5c0.roa (raw, json)
Hash identifier:          zfs16imGyhckBVWvTqyFw5Ct5cj5Z02LVKIxMTzRTv8=
Subject key identifier:   73:FF:B2:CA:3D:E7:4B:EF:C1:A7:E1:63:7C:D5:7F:E9:6C:E1:EE:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C97EA954836D011886C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/243c83e1-4500-3202-a500-d0c90e43c5c0.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100c:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:97:ea:95:48:36:d0:11:88:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=fe624f75-940f-43b5-b44c-88386a1f9b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:8a:fe:07:39:b1:22:42:81:2c:a9:60:13:
                    d4:d8:37:20:ef:53:1e:6c:94:40:2a:3c:20:dc:2b:
                    7b:c1:6f:d1:b3:18:63:2d:fc:02:83:80:59:a6:1f:
                    ea:c8:db:c7:7d:9b:ae:cf:6e:4e:5b:10:4c:f5:ed:
                    f2:63:d0:4e:84:af:da:04:4d:08:13:c5:cb:5b:3b:
                    db:08:72:4d:50:04:07:33:0b:1a:52:ee:d6:98:e1:
                    f8:37:55:f3:e5:b2:e1:ac:d3:4d:f3:f3:bf:f0:ce:
                    c7:0f:3b:5c:26:10:90:8b:8f:ba:8c:ba:c6:c3:79:
                    69:4d:cb:2e:38:66:b5:e8:e2:6c:6a:2d:ed:cc:90:
                    72:16:51:bf:9b:73:b4:0f:f0:2d:df:73:9f:d5:b6:
                    11:bf:0b:b9:e4:d2:9b:f7:d8:6e:68:30:f6:3b:5c:
                    d8:ec:a4:be:eb:77:73:d1:f6:2e:47:19:14:8f:53:
                    6c:34:df:87:1a:01:e1:c7:6f:1e:4e:5c:b2:49:65:
                    3a:7b:83:09:59:cb:8d:4f:7b:1a:2f:76:84:0e:57:
                    ed:69:eb:e1:a9:e5:d1:d1:c0:bc:1e:8e:af:f3:d0:
                    ca:9e:73:b5:00:02:11:65:98:db:e3:ee:a7:18:d2:
                    ca:2e:b1:78:a4:a7:bb:c0:50:24:ca:4b:03:e4:b7:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:B2:CA:3D:E7:4B:EF:C1:A7:E1:63:7C:D5:7F:E9:6C:E1:EE:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/243c83e1-4500-3202-a500-d0c90e43c5c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100c:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:57:23:ce:64:12:63:da:bb:21:0b:ed:3b:70:d7:40:f2:88:
         e4:29:9c:c4:ce:55:ac:e1:31:9a:a5:8b:2f:72:4a:c7:3c:33:
         89:89:42:fc:da:c0:ee:4b:64:70:d4:7b:88:70:b8:6d:86:5d:
         95:ec:06:d8:7b:a7:3b:0f:ae:72:20:ef:fc:77:e2:96:71:00:
         0a:6e:1f:f8:bb:7d:bf:9a:46:a3:a3:76:39:0f:33:ac:99:ab:
         74:bb:b6:50:3f:e3:bf:5a:8d:50:1b:28:b4:d2:3a:c5:89:59:
         d9:c5:66:dc:81:76:72:84:bb:ba:5d:38:5f:10:4e:0c:ed:4a:
         14:25:a9:bb:2a:75:5d:94:e0:cc:fe:4d:11:a0:22:6d:a8:fe:
         60:b8:91:ca:a3:1d:ec:52:cc:ee:ad:67:00:7d:da:c6:b2:c3:
         6c:91:0e:23:18:fd:ce:f1:ed:03:ff:34:cf:5c:c3:83:f7:4f:
         0c:3a:33:58:da:67:2a:cf:9f:aa:50:d5:f7:da:26:36:a6:b1:
         d7:40:47:4a:55:3c:3a:28:66:10:5a:08:5f:3b:55:31:69:31:
         da:92:bb:d5:d2:56:48:c2:ab:76:e6:dc:1b:f9:96:7b:ab:62:
         ed:6b:20:da:58:a3:9b:60:b1:b4:39:72:eb:52:a1:41:53:fb:
         28:83:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:15 2025 by rpki-client