Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa
File:                     31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa (raw, json)
Hash identifier:          NA/elfcrsM2QKzP3dxdPx1ZHO1ZbVo+GIVWI6yAKgto=
Subject key identifier:   31:AA:EE:39:62:C0:24:A3:4E:57:EF:23:12:9E:90:4A:AF:36:17:EE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C982156897C36C7E90200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:100d:9e00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:98:21:56:89:7c:36:c7:e9:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=f40033c8-02d1-41f7-a518-9e45edcd491c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7e:fc:96:66:37:14:e0:d0:31:86:41:9f:00:
                    24:ff:61:f6:68:5a:52:0f:2a:bd:f3:fd:e5:a2:63:
                    00:8a:f1:74:32:b8:d5:7b:43:7c:af:0d:82:87:1c:
                    7e:5b:bd:d8:37:f3:51:f8:a2:e9:39:81:07:88:0a:
                    26:aa:73:1c:de:fa:40:fe:a7:92:38:a0:76:5f:f6:
                    62:db:a3:43:79:c5:6a:86:52:36:71:ad:aa:b7:60:
                    c6:a0:d3:7a:65:16:6d:99:bf:aa:2d:d8:c4:bf:aa:
                    35:21:15:85:9d:a4:0b:66:56:d1:a7:f0:f0:32:46:
                    29:6b:b4:8c:c1:64:17:a2:12:2d:22:2a:51:0d:d8:
                    51:bc:9d:10:b5:36:e1:af:5d:08:fd:ef:3f:d7:7a:
                    17:82:06:f0:98:4c:eb:d2:92:6a:04:bd:94:41:32:
                    3d:b2:67:be:56:6e:1a:3c:47:e3:f2:32:6a:cb:bb:
                    ff:4c:de:13:6e:73:f6:bd:9b:ef:98:57:74:ec:f0:
                    17:fe:9a:d9:f9:69:64:0f:21:98:71:d2:b3:bf:b3:
                    7a:98:98:ea:36:dd:cd:57:b2:40:97:47:94:db:cd:
                    e0:18:90:2b:10:79:a2:0a:5e:3c:2d:f5:3b:a5:96:
                    2d:42:64:78:f5:5b:58:09:99:09:2a:7b:5c:2b:af:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AA:EE:39:62:C0:24:A3:4E:57:EF:23:12:9E:90:4A:AF:36:17:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31aa9d3a-2c20-3bcd-9920-7845e6cd1d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:100d:9e00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a6:c5:24:5a:5d:ff:59:c5:80:58:a5:bf:7d:0a:c8:dd:7c:
         bd:1e:2b:e3:38:13:a8:04:48:05:5d:3f:ca:a1:9d:3a:7c:aa:
         8f:95:dc:81:dd:98:14:55:4b:a5:43:6e:a0:33:64:bc:06:36:
         98:1f:70:de:4e:fc:af:6b:6c:7a:d0:db:ef:9b:54:bb:e9:e9:
         63:56:02:a9:64:84:95:64:ba:96:f6:ef:54:b7:5b:e5:8f:47:
         5f:ed:36:51:da:b1:b2:83:cc:48:68:ca:ce:3a:5b:6a:5b:d4:
         ce:ec:b1:cf:0e:ef:d5:b3:ea:58:3b:9a:76:9b:4a:aa:25:be:
         33:3a:fd:f8:fd:85:fb:a5:0e:8a:14:2f:d6:70:4e:b7:f3:26:
         1e:5b:7b:38:c7:ee:f4:2e:66:9a:8e:2a:69:a2:f1:41:cb:8c:
         df:c3:9b:e4:d3:a0:a3:d0:20:8d:c1:83:c8:78:28:ce:18:fb:
         67:6a:f6:a6:d5:b0:cd:d5:bf:fe:86:0b:b7:d4:b2:ea:1a:75:
         8b:46:9c:62:ed:eb:12:9e:ca:06:27:23:8d:1b:ce:46:b2:f3:
         5f:d1:9e:48:58:16:48:e7:9e:2c:46:89:8b:e8:d3:89:08:58:
         8d:99:d1:07:b7:7d:3f:60:1d:a6:36:2e:a2:35:b1:c8:7f:b3:
         cb:a4:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:21:11 2025 by rpki-client