Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3573e085-d1af-3349-8afa-579d732b5c3e.roa
File:                     3573e085-d1af-3349-8afa-579d732b5c3e.roa (raw, json)
Hash identifier:          r772jODZuPXV2aZdWe1AhURro7d/5oysO5LtHDHuFBs=
Subject key identifier:   EC:E1:70:D0:60:FF:04:2A:7A:7C:B7:3C:9E:F7:72:32:14:3E:31:83
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EAA831629EB1D0698E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3573e085-d1af-3349-8afa-579d732b5c3e.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1005:a110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ea:a8:31:62:9e:b1:d0:69:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=7d9d4366-6dfb-4ff5-911c-2dec1ca112b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:4d:28:a7:c6:1f:d1:68:f8:28:5b:9d:cf:
                    5a:56:d0:95:a5:7d:63:8f:c0:63:04:0d:a0:96:2b:
                    82:b6:6a:7e:f4:58:5d:71:33:3b:ee:85:08:81:34:
                    60:a6:d5:84:b9:85:d9:ed:aa:62:96:6d:1d:c5:1d:
                    b5:a1:23:a7:8e:fd:58:99:8f:f7:e8:65:3c:8d:b4:
                    f9:af:f5:d8:ae:ee:7b:07:5b:26:5a:9f:1f:06:71:
                    82:35:0d:76:8a:7f:c3:7f:4d:e1:53:5a:f4:40:9b:
                    d6:ea:2e:bd:60:c9:7b:72:d5:ec:f7:df:03:ef:5a:
                    9f:0e:e6:87:b6:46:2b:31:a7:17:f1:07:ea:84:78:
                    7f:69:df:49:68:af:af:46:c2:2c:0d:88:04:a0:6b:
                    4b:1e:4a:71:dc:b6:a8:cf:4d:c5:e7:29:13:ac:a4:
                    7d:62:13:70:fe:5b:31:75:a6:e3:b6:1a:40:47:90:
                    17:85:70:21:36:13:8c:51:e0:9d:6c:38:e8:e6:c9:
                    a7:18:34:3f:23:c8:8c:34:ff:7e:ff:a7:58:d8:ea:
                    bf:76:a8:db:03:37:05:2c:2e:97:5f:d2:7e:d6:3c:
                    33:6f:4d:df:b6:8b:0e:d2:e1:0d:60:2a:7f:6d:2b:
                    1c:0f:27:8b:bf:89:6f:0f:fe:74:c2:cf:e7:41:21:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E1:70:D0:60:FF:04:2A:7A:7C:B7:3C:9E:F7:72:32:14:3E:31:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3573e085-d1af-3349-8afa-579d732b5c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:a110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:52:43:c9:f3:ac:26:65:69:ab:1c:b2:35:80:d8:37:a7:b9:
         71:bf:51:40:f9:6f:fb:1e:10:99:bc:26:e8:94:08:a7:4b:cc:
         58:ec:53:e6:5e:b6:07:02:f0:b7:a0:cb:75:a7:68:60:27:d4:
         9e:c3:be:4b:b3:99:27:9a:f7:12:d6:5a:97:86:94:c5:01:b2:
         0c:d0:9b:68:e4:25:10:3b:75:7a:55:35:2f:4a:2a:0c:00:f3:
         e8:eb:f7:d3:66:b0:cd:54:31:f5:5d:5d:ca:40:84:d9:43:37:
         db:79:da:97:d4:f8:ad:cd:ac:30:2a:21:8d:b8:42:1f:00:a3:
         94:58:8d:e6:76:1c:ac:b1:db:ba:b2:d1:29:b7:aa:d7:7e:6d:
         cf:1c:26:79:d4:28:de:57:a5:db:2a:b3:56:34:55:aa:1d:1a:
         ad:60:19:52:04:cf:a1:44:34:49:01:1b:3e:14:99:d4:b9:c7:
         ac:09:0b:d6:c9:fd:5f:0f:6e:ec:c1:cc:d2:fe:fa:97:03:43:
         ed:11:60:c7:f0:a1:4a:af:5b:21:d4:54:d1:29:49:e3:86:fb:
         d5:a8:3d:5f:cc:b2:1e:1f:bc:2a:8c:6f:68:9e:0b:15:1a:0e:
         65:c3:f3:05:f5:5e:1b:9e:52:22:37:18:bb:38:0c:eb:0b:2d:
         9e:9b:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:01:11 2025 by rpki-client