Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/314eab03-fbfe-30d9-b71d-8743f43e539c.roa
File:                     314eab03-fbfe-30d9-b71d-8743f43e539c.roa (raw, json)
Hash identifier:          Q2qmq6O+7Mn1z1muJ+sfTRmREjKpvm1LPo1Hs/8K/wU=
Subject key identifier:   B8:8A:B2:D6:B3:D6:D1:2A:B1:4F:49:58:58:F1:18:37:D7:B0:30:B1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3727654581DE1EB1006200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/314eab03-fbfe-30d9-b71d-8743f43e539c.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1004:b150::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:27:65:45:81:de:1e:b1:00:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=418a419b-a88d-4bac-8129-eed0a03e51fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:69:b7:04:ea:63:f7:60:87:d4:7b:13:b7:
                    03:10:5a:c5:85:25:33:40:5e:78:aa:d7:76:b8:e8:
                    05:4e:4b:99:be:c0:44:34:93:98:5a:75:dd:f9:e0:
                    95:14:45:8a:d5:36:92:2f:3a:85:db:91:33:2b:65:
                    36:43:4c:b4:7e:89:4b:1e:7a:b9:a6:df:0a:67:18:
                    0d:fc:e9:e9:71:ad:52:5f:51:a6:30:07:a0:90:8e:
                    b7:5b:b6:70:8e:75:b9:20:79:fa:b6:52:5b:73:69:
                    38:8c:08:5f:85:22:21:aa:05:ce:7e:7e:bd:92:1d:
                    3e:d8:59:fb:4f:a8:28:0b:37:da:49:cb:5d:37:8f:
                    03:f4:f0:8a:c7:56:a8:1d:f0:31:3d:69:4f:e6:8e:
                    eb:bb:76:61:84:74:49:79:b1:44:82:ac:e8:53:6f:
                    79:1a:ad:4a:04:28:27:94:c6:4b:08:7f:ab:4c:f9:
                    95:7d:ec:aa:5d:c2:2b:46:93:ee:39:46:54:19:d9:
                    f9:f9:19:28:6c:3f:07:9a:ff:26:ff:67:24:2c:dc:
                    d7:7c:ab:23:da:82:a3:7f:d8:ef:a7:d9:6d:41:11:
                    60:c2:2b:ba:0e:3f:b9:03:69:76:bd:b8:50:82:31:
                    1b:5a:5b:75:26:0a:95:71:1a:06:e0:32:dc:92:f3:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8A:B2:D6:B3:D6:D1:2A:B1:4F:49:58:58:F1:18:37:D7:B0:30:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/314eab03-fbfe-30d9-b71d-8743f43e539c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b150::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5a:9d:9c:d2:1a:1a:b1:e5:8b:bd:62:12:41:8e:f6:28:17:
         8c:6b:20:36:07:64:ba:c1:f2:97:81:b6:3d:a1:30:bc:5f:48:
         9d:b6:40:8d:29:e6:aa:aa:b7:b9:d1:9c:25:b3:3a:51:2a:40:
         e9:00:5d:4d:e1:8f:24:10:e5:50:0d:64:e7:c3:e4:ef:1b:80:
         6d:ae:76:ee:1b:2d:cc:12:97:dc:48:e3:68:9e:a9:a2:5e:05:
         c3:98:f9:ef:33:96:3c:9d:64:77:5f:28:ed:b0:f9:3d:14:64:
         04:da:0e:bf:a8:94:60:63:5c:12:8a:07:f6:c1:a0:c7:92:22:
         18:66:a7:41:e8:4a:74:35:47:da:91:f7:d2:ee:ee:06:2e:2c:
         2c:36:ab:86:f5:14:42:22:4b:64:e0:28:b1:76:ef:b1:31:cf:
         46:fd:f1:7f:38:f2:b0:98:ee:ae:43:24:db:13:93:d9:c5:cc:
         6a:ab:be:16:39:70:1a:d8:d5:53:34:65:8b:18:d6:ac:9d:96:
         98:76:83:42:a4:3a:32:8c:b6:9a:ee:44:64:9c:81:63:0f:4f:
         b9:8f:4b:2b:eb:8c:81:cd:cc:db:b1:76:21:34:aa:ae:a1:18:
         c2:4c:ae:d2:ab:20:c4:f8:79:17:c5:a8:f3:b3:71:79:fd:6a:
         07:43:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:09 2025 by rpki-client