Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36b51806-7072-30b4-8927-eb097f3c2c3a.roa
File:                     36b51806-7072-30b4-8927-eb097f3c2c3a.roa (raw, json)
Hash identifier:          UeCF8TcefaEytR/ErDUpdXjpEw40tbkHGEpePsYK3To=
Subject key identifier:   40:A3:28:BE:35:C2:3D:EF:6E:C4:A6:46:BB:1C:6F:1D:AF:26:9E:30
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117A7F59747B52C65C7300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36b51806-7072-30b4-8927-eb097f3c2c3a.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1013:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:7a:7f:59:74:7b:52:c6:5c:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=3847440b-358f-4920-8777-64d75aafd297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:14:0c:cf:ed:97:95:5e:72:13:4c:44:1e:
                    fe:36:77:ca:61:64:4b:1a:ed:ad:88:0d:a3:18:5e:
                    73:b9:1f:37:46:d6:9f:bd:c3:6f:37:bf:6a:bd:f0:
                    f5:7e:23:ff:4f:53:16:2d:80:fa:3e:89:b0:76:f1:
                    c8:fe:df:a4:87:88:3a:9e:75:f5:6b:20:04:65:b6:
                    32:db:ce:38:63:74:0e:94:a7:8e:28:a3:9e:18:07:
                    f5:4b:5d:66:39:9a:21:f9:0e:05:18:d6:65:cf:a9:
                    57:e9:bf:7e:c6:c7:d8:a8:1a:ec:7f:39:f0:69:94:
                    47:f4:df:47:79:27:05:c5:d6:d9:74:ee:4f:6a:51:
                    92:d5:f5:69:88:c1:d0:44:06:96:a3:98:f5:0c:2f:
                    7d:cb:1b:56:d5:66:85:d5:d7:b2:0d:41:ad:14:6f:
                    8f:14:59:9d:de:f3:ea:c8:aa:42:37:9b:3f:09:cc:
                    75:98:5c:d4:9a:27:57:93:90:7f:80:74:80:cd:fc:
                    5a:1a:6b:65:fa:d5:0d:f8:bb:53:79:33:2e:6d:a1:
                    53:ef:de:98:f2:6d:44:20:d5:bb:25:ff:f0:a5:b7:
                    f5:7a:8f:1e:10:63:4b:11:48:cb:af:a2:2b:2f:8f:
                    b2:ba:8f:0d:ca:85:5b:5d:b2:37:02:0c:e0:b8:25:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A3:28:BE:35:C2:3D:EF:6E:C4:A6:46:BB:1C:6F:1D:AF:26:9E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36b51806-7072-30b4-8927-eb097f3c2c3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1013:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3b:9a:bc:64:6c:24:63:47:9f:f4:91:27:61:89:b9:f4:86:
         19:e9:48:10:9b:dc:0f:97:ec:15:2c:46:41:7b:99:7a:3d:ee:
         40:c5:77:78:f3:0a:91:4a:75:de:d0:de:5d:49:27:56:fc:6f:
         ae:f7:c2:9d:3c:29:56:2b:c0:99:4e:ca:7f:b5:85:18:31:a8:
         ae:83:06:a2:2c:55:80:ac:6f:cb:7b:29:df:b2:37:a9:2b:8f:
         8a:cf:d9:f1:b0:4d:16:2e:36:7e:2c:76:f2:90:5b:58:df:27:
         6b:89:ce:bb:0b:8a:03:45:7a:1f:76:db:1f:bf:83:e4:92:e8:
         ec:22:bc:32:df:18:84:91:1f:ec:e0:37:66:1c:a9:b7:3c:fd:
         ef:42:68:b5:50:76:78:5b:41:7c:70:8c:99:66:b0:ab:45:35:
         36:c9:27:d8:0b:23:e9:6d:cc:02:05:a6:db:bf:07:f8:d2:96:
         76:c9:03:b2:8b:d7:bf:8b:ee:ea:b2:90:0f:c6:74:30:a7:e2:
         08:bd:5c:b7:14:21:7f:42:d7:a8:3c:69:c3:27:b8:de:66:26:
         c7:af:b6:87:f6:9d:95:e8:fb:d7:b9:5b:29:2f:30:19:b5:61:
         7a:5f:b6:16:c2:ce:dc:86:ef:6c:39:23:f9:c7:ca:14:a9:4f:
         b5:7f:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:22:46 2025 by rpki-client