Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38cbcd8f-9955-39d6-9706-5a43875e0af6.roa
File:                     38cbcd8f-9955-39d6-9706-5a43875e0af6.roa (raw, json)
Hash identifier:          +Mib51AdT3miV4yus89TsZ/iFc+tyjnWC7R9Wnt/m+s=
Subject key identifier:   80:90:BA:14:81:AF:0B:D3:97:51:3A:05:1E:29:4A:44:66:44:F4:32
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36F04F0D094DD2A35BF880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38cbcd8f-9955-39d6-9706-5a43875e0af6.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1006:b130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:f0:4f:0d:09:4d:d2:a3:5b:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=315aef52-154b-4e7e-ac14-f7af56aa234b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:82:1c:63:79:8a:c3:b7:67:9b:d1:bc:44:
                    39:69:74:ae:67:a0:fc:4f:ec:b8:00:17:0d:81:13:
                    e3:eb:46:af:fd:6a:55:c7:c5:a1:3b:c6:44:5d:06:
                    ca:65:85:ac:e7:e6:e8:49:3b:91:72:35:a8:19:a6:
                    03:d6:c4:7c:48:57:5d:6b:56:cf:0b:a4:d1:98:1d:
                    bd:e9:47:cc:92:b9:12:04:4f:54:2b:6a:4a:33:a3:
                    f7:6d:9c:a0:cb:24:5b:ce:32:c3:8c:40:99:a2:9e:
                    a8:0e:93:58:69:24:87:1e:02:b5:70:d1:51:1e:53:
                    a1:c0:82:be:0c:4a:33:cc:23:fc:96:7a:35:af:88:
                    48:cb:68:49:27:a5:af:d5:b5:c5:50:1e:9f:96:b5:
                    d7:7f:00:cf:33:43:a5:71:aa:e0:c4:73:0a:af:01:
                    cf:fa:a7:ae:c7:5b:d7:c5:69:21:b0:2c:ec:2a:05:
                    78:66:b9:76:bd:15:89:7a:3f:98:b1:57:67:fb:84:
                    09:04:59:7a:01:2d:17:24:f3:ad:97:b0:48:17:81:
                    2d:08:17:db:13:f9:40:f6:87:2d:47:cb:09:be:4c:
                    71:0e:6f:ab:c7:62:50:84:5a:4a:e2:e1:f0:75:8e:
                    72:27:b6:65:cb:3d:b8:f2:39:43:4c:72:cc:ba:09:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:90:BA:14:81:AF:0B:D3:97:51:3A:05:1E:29:4A:44:66:44:F4:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/38cbcd8f-9955-39d6-9706-5a43875e0af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1006:b130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:19:b0:82:83:1a:c2:41:ff:b7:d6:ae:91:84:2c:7d:b5:25:
         61:df:8d:a9:1a:12:a6:d2:67:9e:8d:d2:55:d1:f1:a4:11:b1:
         f5:6e:b2:03:4e:3a:62:9c:50:26:48:c7:0f:36:1b:44:5f:35:
         e4:76:c8:93:43:f5:61:24:59:ae:eb:3d:07:6b:67:ef:2c:e3:
         65:f4:9d:18:bc:45:9a:b3:b7:46:04:e0:41:41:d5:dc:0a:95:
         4d:21:8f:7d:b6:71:47:ea:b6:49:0b:d4:33:a0:68:cb:76:ec:
         a8:7a:0e:e8:4f:5f:78:6f:c3:ab:2c:0d:49:4c:00:3a:b6:a6:
         2e:4a:fc:59:7e:55:81:d5:74:d0:40:df:12:2c:aa:38:0a:52:
         6f:c5:71:5c:dd:d5:10:85:1a:52:4d:d0:85:51:ce:fc:fe:ee:
         be:7b:c0:40:11:2e:b9:74:c0:33:fc:9b:ce:66:07:9e:40:ad:
         8a:47:78:1f:bb:6e:51:9f:89:be:c8:30:84:87:12:27:dc:15:
         eb:86:1d:8a:43:95:64:13:ee:d0:49:d1:39:e0:fb:c8:23:25:
         ee:4a:77:96:28:24:b5:3b:75:7c:19:cb:4f:ae:b7:d5:3c:b9:
         84:f9:9a:d1:c7:ff:6d:f8:8e:c0:93:16:ed:ec:2f:d9:57:66:
         9d:27:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:56 2025 by rpki-client