Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28bcc75f-b95b-33f0-9083-e52a2f445194.roa
File:                     28bcc75f-b95b-33f0-9083-e52a2f445194.roa (raw, json)
Hash identifier:          B3yLjQqdCGHKqKMv1rKynGQSh10CRbwjow/9sJ7BqRI=
Subject key identifier:   0D:B8:52:53:3F:93:7C:82:CC:81:C8:9A:4F:D3:0A:FE:9D:B7:D5:28
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117E10464814F664450F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28bcc75f-b95b-33f0-9083-e52a2f445194.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     22394
IP address blocks:        2600:1014::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:7e:10:46:48:14:f6:64:45:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=480dadcb-4122-46ac-9ccf-bdbfda01ff9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2e:6c:c9:d4:dd:ae:f2:e7:fc:2c:68:84:c0:
                    64:13:23:4d:a9:35:ba:b1:16:be:08:b4:49:45:80:
                    86:f0:25:be:65:12:b9:ae:57:d8:2b:7a:86:a4:fb:
                    48:85:43:9e:32:58:06:c0:ba:90:9e:85:ba:be:2f:
                    f9:0d:ba:00:2e:df:b4:d4:17:b6:b3:77:86:13:64:
                    85:d7:0a:af:6e:f9:54:72:bf:bd:f8:fa:08:6a:98:
                    76:42:98:46:5f:66:9c:43:c6:1d:73:5f:68:04:c6:
                    9f:17:57:80:47:b3:23:3f:ce:de:8b:1c:f3:1f:7c:
                    3d:f4:46:25:42:3a:a9:f3:5a:4c:a0:c3:5d:8d:82:
                    67:29:34:6b:98:01:4e:e9:21:c6:d2:bc:51:6f:bf:
                    e5:5b:ab:ec:fc:aa:88:5b:c6:a3:18:80:00:5a:30:
                    e2:9e:c6:ec:eb:21:9a:e5:a5:09:02:92:07:e6:c2:
                    f7:f0:4d:b1:4c:87:8e:fd:bf:19:2a:61:99:27:04:
                    1e:6b:f7:c4:9b:b9:64:bc:22:87:48:2e:8d:ee:68:
                    14:38:88:90:31:1c:c1:d5:86:81:76:3d:6f:14:a1:
                    2f:7b:51:d2:8b:1f:31:19:57:34:69:62:44:b8:6f:
                    d5:e6:eb:65:b2:be:2a:8e:01:bc:c6:75:d2:01:a3:
                    e5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:52:53:3F:93:7C:82:CC:81:C8:9A:4F:D3:0A:FE:9D:B7:D5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28bcc75f-b95b-33f0-9083-e52a2f445194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:69:30:9f:32:4f:53:87:8c:df:77:77:fe:fb:1c:73:1d:
         e5:4a:1e:d6:af:96:ab:51:4c:30:5d:a8:5b:26:51:06:bc:62:
         73:47:00:6f:41:b8:56:15:98:b1:bc:76:97:90:aa:e3:33:89:
         fa:5e:cb:52:4c:00:6c:54:8d:6a:c4:df:60:df:7f:ea:54:60:
         e9:3b:1d:b2:91:16:4b:e0:ff:74:b5:a3:45:bd:b8:9b:83:01:
         20:2b:1c:66:88:dd:96:cd:41:ce:d1:ee:9d:83:be:d1:97:2c:
         05:5c:67:5b:c1:bd:23:7c:a3:88:15:56:88:81:c8:2c:f4:6d:
         0c:aa:e0:fa:41:4c:48:fd:ec:2e:63:b1:4d:be:35:00:3d:68:
         7f:dd:2d:d5:4e:31:f9:40:06:6b:a4:e1:74:44:2f:24:14:d5:
         8f:ab:f7:61:d3:8b:e6:67:d8:c4:0a:5b:5e:7b:37:46:61:d8:
         c5:aa:ed:8e:fd:3f:48:32:2e:4f:2c:23:5f:61:63:56:14:a8:
         16:9b:2d:d0:a5:ff:f5:6b:f4:4c:a6:4e:b0:d4:5d:fb:69:b8:
         11:2f:68:fc:4b:ad:b0:ff:2d:f3:a0:84:54:0c:df:00:aa:12:
         67:25:c4:99:4f:15:45:73:a5:a9:a8:83:a2:b5:ce:da:f9:27:
         1a:a5:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:58:26 2025 by rpki-client