Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39b27990-4b45-3adb-a13b-2221f02e0042.roa
File:                     39b27990-4b45-3adb-a13b-2221f02e0042.roa (raw, json)
Hash identifier:          uHHe6od3+wVQ0VqJDG2VRxVMdCOd3WK/dNhj4+vw4+w=
Subject key identifier:   49:40:22:7E:74:60:D9:A6:A8:64:39:22:69:93:96:19:0C:47:08:91
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3728B4406AF69D32E2016C
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39b27990-4b45-3adb-a13b-2221f02e0042.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1004:b280::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:28:b4:40:6a:f6:9d:32:e2:01:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=c881b9e6-4841-4682-a117-2b5e7e16da19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5d:29:16:d8:4c:d3:72:04:60:95:7b:81:bf:
                    f1:ac:35:27:6c:69:21:52:e6:44:99:dd:08:ff:4e:
                    ca:47:bc:71:fd:ee:b5:6a:42:b1:3c:c5:74:b5:00:
                    21:5a:a5:cc:aa:74:e2:ce:93:51:a8:7c:d1:f9:f6:
                    19:7a:1b:cd:9b:a5:ff:c8:20:82:b3:1f:c8:ca:bc:
                    da:19:2a:f4:d0:c7:62:45:be:ca:bb:59:f9:25:44:
                    44:5d:52:5d:5f:f7:c6:40:0b:c4:4d:82:76:a3:43:
                    88:dc:6e:6e:a7:05:97:58:11:92:e4:5a:ff:e5:f8:
                    a5:b7:63:e9:90:36:2b:63:56:17:c5:d0:e1:fe:87:
                    51:da:d7:44:1a:08:2d:40:e0:60:8c:ab:48:48:ce:
                    e9:01:c7:3b:98:cb:5a:cb:47:85:a9:62:c8:fc:35:
                    cf:e6:34:a3:1d:9e:56:98:da:0b:46:05:72:81:09:
                    a9:d7:df:66:ff:d4:7c:d6:ab:fe:56:3d:5f:0f:52:
                    13:d2:76:60:21:20:be:5f:52:11:ed:34:2a:51:6e:
                    3b:c6:7d:22:b8:4a:ea:6c:4a:63:d7:0e:0f:b8:95:
                    30:4b:75:3c:0c:92:9b:1d:da:41:35:bf:51:eb:4e:
                    75:e7:c6:56:11:86:29:df:0b:5b:b9:91:cf:05:79:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:40:22:7E:74:60:D9:A6:A8:64:39:22:69:93:96:19:0C:47:08:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/39b27990-4b45-3adb-a13b-2221f02e0042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:b280::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:73:90:36:06:ea:8a:17:c0:b9:dc:da:d7:85:80:c7:80:eb:
         43:33:48:a2:48:9d:63:d8:b4:ea:46:ca:07:30:df:eb:8f:a5:
         b0:aa:a3:e1:53:a2:9a:75:e7:61:5e:b7:fa:e6:4b:85:1f:d8:
         df:d3:24:c7:c1:9c:1f:87:42:8e:5a:94:aa:09:00:11:97:21:
         f1:14:0c:de:67:54:99:f0:7b:da:99:ad:fb:dc:c2:41:36:0b:
         8f:a2:33:0d:84:76:76:27:b0:2f:14:eb:81:c7:32:5f:86:96:
         95:a4:fd:9b:dd:1f:e1:aa:9b:4e:ff:fc:b0:f9:00:32:50:d2:
         2c:63:57:14:0d:73:dd:bf:21:ce:86:41:e0:b2:48:54:0c:41:
         9d:af:92:6e:07:39:2b:87:55:69:2c:c0:37:5f:8c:bc:7c:02:
         5a:93:17:1f:7a:e9:85:58:7b:00:8f:83:e6:79:e5:b5:3b:22:
         a7:72:11:44:85:71:da:5b:b4:ec:05:2f:4d:e5:9d:df:a5:79:
         0b:1b:f0:ae:37:a7:6d:78:54:56:74:cd:7f:c4:0d:71:39:47:
         38:55:21:07:7f:e8:01:6d:01:18:5b:07:d3:2e:eb:cb:14:bb:
         e2:ea:7e:9d:2a:38:6c:d2:c1:fa:8c:5f:18:e4:6a:2c:4e:88:
         63:c3:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:02:10 2025 by rpki-client