Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/269868aa-a50e-3e36-af9b-7922dc8a522c.roa
File:                     269868aa-a50e-3e36-af9b-7922dc8a522c.roa (raw, json)
Hash identifier:          UdOQr1dQZPQhDaboz4vsno6fozyuaGkfC7ncw6wQT9s=
Subject key identifier:   E9:95:E8:94:83:6C:29:16:B5:54:E3:37:D5:15:D2:BB:B6:8D:F0:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C37292D2BF16DA387651800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/269868aa-a50e-3e36-af9b-7922dc8a522c.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1004:b310::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:29:2d:2b:f1:6d:a3:87:65:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=6421a54a-cd4b-4d73-9f8d-901f10d0191a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:d2:3b:3c:43:ec:b0:4e:2c:94:1a:e6:8b:
                    d3:2e:c7:48:bb:a1:f1:e0:d4:82:8a:9e:ff:97:1a:
                    cd:b1:07:05:3d:f7:44:93:af:25:49:de:d6:21:97:
                    7c:d6:19:c6:50:60:7d:e5:10:59:5b:37:29:8c:50:
                    bb:d4:f1:54:bc:23:f2:a3:8b:06:77:28:5b:bb:74:
                    0b:40:23:73:35:38:cc:a2:10:32:8b:d0:dc:8d:57:
                    f6:5d:11:ac:88:7e:07:6f:0a:57:4f:f0:0a:d7:7f:
                    6e:77:ca:fa:b0:e0:94:d1:30:a6:62:c4:36:4d:03:
                    db:ae:73:34:a8:88:54:61:48:8a:e3:64:b2:7e:97:
                    48:13:06:bf:c7:e9:25:ad:62:c3:c5:c1:c8:9f:51:
                    e9:47:59:2e:1f:fe:02:2f:d3:81:af:a0:9c:9f:98:
                    7b:73:45:13:34:db:6e:a8:67:c6:35:44:12:bb:68:
                    d3:51:af:8e:f2:cd:fb:df:cd:1b:a0:fb:aa:d4:ca:
                    4b:08:2c:88:99:10:4e:46:8e:e0:f3:bb:5f:84:bd:
                    bc:d0:e6:8e:fb:91:44:03:fe:99:e8:b8:73:71:09:
                    42:e8:78:0c:a5:c7:d6:ec:8a:44:35:24:ae:b3:ef:
                    e4:c4:58:5b:0e:ba:28:74:ae:e8:21:9e:79:14:2a:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:95:E8:94:83:6C:29:16:B5:54:E3:37:D5:15:D2:BB:B6:8D:F0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/269868aa-a50e-3e36-af9b-7922dc8a522c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b310::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:1a:63:3d:5c:ce:44:6b:d1:b7:31:35:de:bf:6e:ac:18:
         f1:1f:84:ad:bf:3e:db:cf:04:13:ec:85:67:1c:77:19:b6:4a:
         d4:cf:a4:05:c3:cd:18:de:40:3d:fb:bc:7b:1a:f0:f4:76:89:
         de:bc:55:df:8e:8c:f9:3c:0e:76:63:c1:c4:22:21:cb:5d:c6:
         1b:23:6b:03:36:3a:cb:08:60:91:53:4a:ca:4c:1c:f7:9c:02:
         eb:ec:80:b2:69:90:da:ae:d7:87:9f:3d:43:23:69:d0:14:de:
         d1:d6:c6:c3:a9:c2:9b:2e:10:b1:2c:e0:88:1d:d0:81:32:c1:
         47:f0:57:ef:9b:82:06:56:c0:f9:56:16:ab:0c:44:ef:e2:de:
         50:a0:ad:3f:63:ba:b3:0f:e8:e8:63:c9:47:af:6d:51:d7:cf:
         3e:16:d8:31:ec:fd:49:80:8e:b9:b8:99:9d:84:d0:a1:d9:2c:
         7d:1d:e3:b6:b3:60:16:d8:f2:60:21:1e:3b:77:57:96:9b:6e:
         6d:00:ed:e3:3a:50:a9:b1:23:ed:2f:bc:7a:87:4b:d7:77:33:
         27:ab:93:3e:5b:a0:6f:00:50:72:ef:43:d7:79:c5:dc:32:12:
         fb:ea:ac:ab:8e:e6:f7:57:15:77:b7:58:6d:92:26:2e:9f:35:
         7f:0a:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:00:18 2025 by rpki-client