Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2eb2d4f1-676b-32b8-813f-151561ee1d09.roa
File:                     2eb2d4f1-676b-32b8-813f-151561ee1d09.roa (raw, json)
Hash identifier:          uRsSTF/j6Nau9zwGs9cXA6v14CQNL5mYqD2bX6x+RBU=
Subject key identifier:   1F:8E:C5:69:E4:3B:AA:FA:66:F6:B5:8B:58:33:40:1B:28:F7:E4:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F566C815AA94558D3A60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2eb2d4f1-676b-32b8-813f-151561ee1d09.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1008:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f5:66:c8:15:aa:94:55:8d:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=b15807b4-d7ee-4b13-a837-fbb2e20570d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:43:38:fc:73:61:fc:21:22:13:b1:f3:7f:
                    d9:ce:c6:c5:29:d9:3b:64:49:3e:28:c8:77:5c:c3:
                    c4:3b:b2:f3:7c:f9:ba:6d:66:5b:89:fc:08:0f:41:
                    10:8c:24:ce:56:f5:04:7c:7c:0e:c6:db:0c:d4:43:
                    ee:1a:c6:c1:d6:3f:b5:dc:df:55:2a:6c:40:9e:35:
                    90:28:52:38:0b:00:e4:54:4c:18:7d:76:f2:5b:3d:
                    1b:d1:88:19:52:cb:36:a6:65:89:aa:94:c1:0e:49:
                    89:60:46:2a:89:f8:35:72:5b:b1:d2:cf:14:1a:05:
                    2f:46:d8:0a:0f:a5:dc:2d:b3:21:e7:c5:3d:b5:18:
                    63:a9:5b:5f:4b:7b:34:be:67:10:b8:52:c1:5c:4b:
                    53:59:8c:54:5d:70:71:f5:10:fd:a5:08:1d:88:a4:
                    96:42:27:ca:77:a3:e5:d5:ad:34:6d:4c:ea:0b:da:
                    99:a8:f5:95:a2:0a:33:b0:0c:c9:ae:bf:e2:c3:1a:
                    7e:42:c3:3d:2d:a9:f7:d7:d3:50:03:e1:06:68:41:
                    25:e3:63:09:7f:51:b0:66:54:2d:1f:87:57:0b:7a:
                    54:bc:5d:91:dc:19:b8:b9:18:cd:13:d4:e9:72:a8:
                    f6:a7:67:1c:8f:1f:6f:c3:3f:a8:9a:e3:46:12:a9:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8E:C5:69:E4:3B:AA:FA:66:F6:B5:8B:58:33:40:1B:28:F7:E4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2eb2d4f1-676b-32b8-813f-151561ee1d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1008:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ba:3e:4f:f8:ec:2a:1d:0f:39:be:da:d4:ec:c4:0e:24:03:
         28:13:6b:7b:bf:6c:a4:78:df:ed:44:7c:b6:ea:2b:7b:3b:ea:
         d9:4b:cd:38:d4:1f:b0:35:af:b5:0e:7d:9f:1e:ce:b8:0b:5b:
         88:14:f3:d2:44:eb:08:d6:c0:b9:2d:0c:d1:22:a1:7b:e5:9e:
         d1:f5:a6:e0:df:de:9d:5f:5f:1e:42:65:12:46:82:5a:1e:35:
         09:3a:97:00:23:bf:2d:8d:71:6c:e0:ab:ce:48:69:18:4a:0d:
         0f:9e:23:d9:0f:df:28:62:a3:99:d4:11:18:8e:03:4d:64:9a:
         81:5f:a9:73:2d:68:2f:87:9c:a1:1f:bd:3c:9b:d9:16:15:a0:
         8b:5e:28:ab:3f:66:c0:86:05:01:ad:c5:d2:d1:0f:0a:80:6e:
         4d:79:25:95:a5:3a:8a:a4:96:e4:9a:43:b1:05:f2:c6:fc:0c:
         f5:ab:05:35:e6:bc:20:64:e1:ce:6d:29:9e:19:25:6f:63:c5:
         70:2c:ee:e6:b4:73:44:a5:bb:f4:ab:d4:cb:57:85:cf:b7:6e:
         5d:ec:1d:11:4f:75:e3:bd:d0:f6:71:f9:44:75:ce:b6:b5:1c:
         58:d6:7f:1c:9e:d6:e9:f4:48:bf:b4:b9:8d:c5:b8:5a:da:a3:
         71:16:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:32 2025 by rpki-client