Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bac7482-a473-3cec-a04e-60eba21eeb9f.roa
File:                     2bac7482-a473-3cec-a04e-60eba21eeb9f.roa (raw, json)
Hash identifier:          4g3jgP3PVXPgjxvGtMYr8Hlwu/X8CY/Fjcv3OmENvII=
Subject key identifier:   F3:72:5E:AB:D2:0B:D2:F1:DD:0C:C4:6D:16:ED:8D:EA:02:82:F1:FD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A1189F7FA5836BB71696980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bac7482-a473-3cec-a04e-60eba21eeb9f.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1016:b150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:89:f7:fa:58:36:bb:71:69:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=eab383ae-809c-49d3-8fd5-848de8c7fbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cf:9e:f1:55:e9:09:fd:c5:3e:79:6f:79:54:
                    e9:ce:b3:6b:03:69:f9:8b:f1:ce:5a:99:8c:cf:d3:
                    3b:c6:37:be:1d:7d:f1:68:f7:06:5e:9e:a9:8e:ea:
                    9a:46:23:ff:2d:78:f4:a0:54:62:52:c3:5e:0c:68:
                    12:9f:b3:43:9c:83:6b:6e:d5:4b:30:30:3b:ef:1a:
                    6c:c0:5b:24:30:67:e2:17:f7:9a:9b:3c:5e:28:59:
                    87:eb:cc:18:54:79:f5:4b:6c:1b:5d:4b:70:fb:35:
                    d9:2f:dc:7a:de:ee:19:b3:18:ee:c0:46:5c:26:51:
                    b4:87:db:a8:28:5a:48:d7:bb:44:7f:17:73:54:4f:
                    c7:a9:1a:51:1f:56:06:96:48:f0:eb:1b:1f:d0:8e:
                    e5:a2:3f:a2:57:93:6a:a8:76:79:c0:6c:06:cc:e6:
                    38:ea:d1:6c:0c:15:d0:6a:31:a7:03:1b:d4:e0:b9:
                    e5:d1:07:8e:57:21:02:a8:3e:5c:38:e1:37:0f:9a:
                    31:e3:42:c4:71:79:bf:b5:f4:15:97:41:f2:71:70:
                    2d:af:40:25:78:af:ba:2a:d9:76:98:1a:80:82:2c:
                    d0:3b:e7:7e:68:ca:b9:a9:66:ef:dc:49:e2:a6:5f:
                    85:4b:7a:fe:4d:b3:52:1f:a3:b9:8d:19:b4:ca:9f:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:72:5E:AB:D2:0B:D2:F1:DD:0C:C4:6D:16:ED:8D:EA:02:82:F1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bac7482-a473-3cec-a04e-60eba21eeb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1016:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:a5:f7:39:3d:0f:6e:6e:e4:2b:6b:37:0b:69:59:b3:e9:
         b8:7c:3c:6d:2c:08:a5:98:87:51:ad:f2:ed:8b:aa:83:12:40:
         6f:7d:46:50:32:ff:42:9b:de:d4:5a:ba:8c:22:ea:06:e2:4d:
         39:be:bd:b4:f9:36:cd:25:3e:01:c5:49:9a:23:cb:6b:f1:78:
         99:9e:ef:5a:26:16:06:2a:4b:ec:1a:4b:e1:48:7a:e4:40:7e:
         19:90:19:90:21:f4:48:86:b4:4d:1e:21:1e:db:99:c7:81:e0:
         d1:d3:91:1d:4a:e4:96:66:10:52:c6:d4:01:9c:39:97:03:67:
         ea:45:f9:43:71:2d:29:33:4a:2c:10:96:a0:c0:47:8a:f7:6d:
         82:ab:ec:c3:19:79:02:17:0a:db:a1:48:11:0b:e4:32:f9:13:
         ad:f7:0b:dd:95:45:0a:46:8a:70:2d:e8:df:0c:3e:49:c1:e2:
         6a:67:9a:a8:de:cb:99:a6:27:e7:a0:4a:b4:6d:7a:2a:5f:ba:
         4a:e1:2b:2e:c3:b0:b9:a1:b6:9e:0e:09:03:95:4a:aa:f0:17:
         08:17:ca:d9:f4:63:57:98:7c:da:c0:a4:c6:4e:9f:de:f3:cc:
         f9:7a:7b:5d:1d:d2:86:65:24:af:97:9b:1c:6b:a0:c0:1a:2e:
         cf:6b:15:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:08:33 2025 by rpki-client