Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2effd435-394e-3905-b681-3853cb36fdd1.roa
File:                     2effd435-394e-3905-b681-3853cb36fdd1.roa (raw, json)
Hash identifier:          k+IssFfbh+xJZdgRxzThLz11eyM5jHgUZz/d1NOoYDQ=
Subject key identifier:   4C:7D:EB:B6:C9:71:2A:DA:5B:04:F8:3E:59:94:5D:76:52:8D:F4:72
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36ECBFC7A44F4E03131400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2effd435-394e-3905-b681-3853cb36fdd1.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1005:b1a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ec:bf:c7:a4:4f:4e:03:13:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=446cbc87-466c-49dc-8808-866e7f6dc277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ec:51:e2:71:25:19:16:f0:82:12:1f:34:2c:
                    73:ed:86:c5:3c:a1:b5:5f:18:24:47:a9:04:d0:84:
                    6c:2c:a6:f0:27:80:c1:75:73:13:f4:0c:1a:10:ba:
                    c3:1f:52:8e:35:db:55:8c:79:de:37:de:76:9b:f5:
                    59:b7:5c:90:55:cb:9c:9f:3f:0c:f2:0c:0b:b6:c6:
                    a9:74:32:2c:df:d5:2d:b9:85:61:30:cb:7e:55:a7:
                    33:20:7a:f0:4d:3f:e7:0a:f3:47:23:de:b4:1a:ec:
                    84:26:d5:f8:d4:7b:f5:1e:19:1e:ba:e1:6b:ab:8e:
                    20:00:b2:91:42:5a:ba:d0:c8:fd:0d:fb:ab:b3:57:
                    a8:35:44:5b:5a:bc:af:05:62:57:7a:fd:4c:e5:44:
                    e4:dd:0a:65:a3:0d:07:bb:55:37:c1:a1:af:69:17:
                    10:01:3e:04:6e:21:84:0f:c5:6a:7d:c6:23:1c:91:
                    7a:5d:43:b9:74:20:fe:c6:5f:f5:ae:11:20:1d:03:
                    21:f7:09:33:d3:83:6e:d5:66:d1:85:7c:3f:0b:8a:
                    0c:aa:13:df:0e:b5:d5:d6:d1:bc:09:46:a0:21:3e:
                    5a:ba:b5:48:7a:f4:b1:12:60:a5:b6:55:c5:74:3f:
                    60:02:eb:01:9c:5e:7f:c3:18:c9:1c:22:db:60:31:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7D:EB:B6:C9:71:2A:DA:5B:04:F8:3E:59:94:5D:76:52:8D:F4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2effd435-394e-3905-b681-3853cb36fdd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b1a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:ae:64:40:54:4a:98:47:ad:67:da:dd:07:25:25:a1:cb:
         05:50:a1:61:d9:d7:cf:a3:26:a2:e5:58:56:7a:26:97:02:b9:
         61:77:94:ca:fe:56:69:0a:05:a7:f3:be:c8:ef:66:82:04:f0:
         e3:42:b3:91:f4:dd:34:ec:75:fb:70:87:1f:47:17:5a:1b:d5:
         e7:e3:f8:ed:6d:d2:81:19:98:d9:7e:fe:73:4a:58:93:30:7f:
         12:30:c9:46:79:55:9d:08:a5:25:a1:f7:e6:78:5d:9d:be:1b:
         34:e7:f8:e0:61:cf:e8:13:7d:89:2d:00:d8:16:50:92:08:9c:
         8e:4a:e7:3c:ea:08:aa:f7:16:31:34:34:9a:06:ba:c7:17:06:
         d8:a9:fb:f5:6e:43:ca:ac:99:e1:f1:2b:12:74:22:9a:c5:e5:
         4a:96:07:2c:0b:2c:c0:8f:a7:27:56:bf:a2:20:8d:40:e6:45:
         12:79:31:7d:5c:f1:68:36:ab:29:9c:1a:3f:0d:35:dd:da:eb:
         19:95:93:18:9c:03:37:78:f5:64:56:ce:67:57:63:0d:d7:61:
         fd:c4:ae:41:89:59:99:07:f4:a3:e0:4c:2b:fc:3e:a2:4b:a7:
         3e:cf:2f:98:0d:f8:49:90:0a:56:b7:e0:de:d8:6c:f2:b6:1c:
         de:62:e5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:52 2025 by rpki-client