Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3803c4c7-cd41-3480-a11f-27afc5ed3d2a.roa
File:                     3803c4c7-cd41-3480-a11f-27afc5ed3d2a.roa (raw, json)
Hash identifier:          OFK9nmP22ZLs/CrzVok1Xz42aIPyhBp/DtYinxRS1zw=
Subject key identifier:   CD:F2:C1:B4:54:60:B2:93:52:2B:BE:5C:6E:C3:36:B0:36:CB:E9:EB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C371F67E9293F1B243CFC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3803c4c7-cd41-3480-a11f-27afc5ed3d2a.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1001:b000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:1f:67:e9:29:3f:1b:24:3c:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=e9e35f1e-c1d2-48d9-9830-aed2d0f51e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:e3:73:d9:fd:c3:a5:d6:e9:eb:bd:5c:25:
                    49:7a:54:6d:08:7f:4d:0d:50:8f:86:df:45:4f:4e:
                    fb:82:6e:53:3a:24:5d:fd:9d:c2:e2:a9:f8:27:22:
                    a8:82:a5:77:03:25:2f:9e:a3:70:22:02:04:eb:48:
                    ba:10:d8:22:90:f6:35:fb:9e:c4:57:1e:2c:35:76:
                    9a:86:a6:29:f8:b0:a8:e6:26:c6:b2:e6:a2:3b:f5:
                    5b:0c:eb:43:d6:67:5b:f1:41:0a:9f:f7:98:6c:b8:
                    c6:bf:5a:5e:25:6d:c7:6c:03:45:be:ac:49:49:e4:
                    70:ff:a3:4b:d9:88:02:c4:e2:1a:b6:0c:bb:0e:06:
                    4c:1b:19:c6:0f:31:ba:af:11:e8:85:c8:38:95:32:
                    ed:ac:a2:97:b3:32:be:3e:5b:db:24:e8:b4:99:e2:
                    e4:00:3f:60:08:96:54:79:ea:60:a8:2e:55:24:e1:
                    5e:f1:31:26:ba:42:0e:61:33:a0:69:f5:2a:52:b7:
                    7a:96:b8:48:46:f1:17:4b:50:70:b2:6a:cd:a9:78:
                    fb:d9:c8:6a:b5:9a:d0:63:9a:9e:c4:01:14:c4:e2:
                    5e:9c:20:2d:f3:83:b2:d3:cc:84:83:56:c2:02:51:
                    aa:e8:11:36:a4:03:4e:48:2c:e9:9f:fa:79:81:ff:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F2:C1:B4:54:60:B2:93:52:2B:BE:5C:6E:C3:36:B0:36:CB:E9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3803c4c7-cd41-3480-a11f-27afc5ed3d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1001:b000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:19:74:00:53:06:31:cf:b9:f1:6e:46:16:2d:35:8c:77:
         d7:d8:a9:4d:4c:70:19:26:e3:b5:5b:b7:61:6e:96:56:cf:58:
         99:c5:32:c1:58:99:d4:18:99:d4:5e:aa:d3:f8:0b:66:35:27:
         29:6a:6f:45:d1:a3:35:27:8a:3b:c1:6c:bf:d3:0a:9d:28:ea:
         18:68:f2:d1:93:9b:2a:ea:ad:0d:38:7f:f1:c0:9b:b3:85:67:
         db:03:28:f8:2c:1c:7c:61:de:e3:ae:cc:af:c9:6c:44:eb:3f:
         c0:52:c9:4d:a1:15:5c:1a:1f:73:d6:df:e6:f9:eb:b9:09:7e:
         76:0d:be:f2:4f:5c:13:f2:b7:a9:8e:16:f2:2d:17:06:ed:c6:
         d5:37:ff:2a:cc:91:e1:40:0a:7b:dc:3c:19:c9:b2:17:fd:e4:
         c0:61:5d:40:0e:ba:76:3a:3c:74:91:78:67:ab:05:2b:3f:54:
         27:78:90:99:ca:52:02:6b:9b:dc:50:8c:40:5b:56:c3:4c:fe:
         89:75:03:ed:15:6f:0c:4f:0d:b0:44:d3:81:22:0a:33:bd:72:
         2b:a1:e9:b5:80:ca:a4:aa:2d:ba:24:63:ba:d6:cc:8f:c8:e9:
         7c:73:ef:0f:ba:d3:d9:cf:a1:34:20:af:62:49:90:eb:a0:21:
         70:56:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:01 2025 by rpki-client