Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a290a16-187d-38fb-8970-6b614faeccf1.roa
File:                     3a290a16-187d-38fb-8970-6b614faeccf1.roa (raw, json)
Hash identifier:          CUUoRJDnd0tUfu9bd6uopr35TbHvlAxhy90zxompfH0=
Subject key identifier:   A3:86:E9:B2:B7:F3:E3:1A:27:A4:F5:94:77:A7:81:96:E6:94:C6:1F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EA2355B83104CE2B75D8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a290a16-187d-38fb-8970-6b614faeccf1.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1005:9100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ea:23:55:b8:31:04:ce:2b:75:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=1b118107-79af-49c7-b39d-5f4df9e208ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:07:19:81:a5:70:87:0a:ab:ad:84:11:cc:d1:
                    c1:df:7f:ff:20:b7:51:72:61:d1:98:9b:c9:24:9c:
                    91:56:54:f4:86:43:0e:53:e9:82:f1:5f:ca:82:e6:
                    09:8d:7d:3d:88:a3:1f:67:66:4f:95:43:88:21:c0:
                    26:62:b9:78:e1:ee:fc:91:94:cf:6c:9f:8c:28:59:
                    ff:c4:16:31:cb:41:46:45:02:34:fc:89:36:cd:41:
                    77:98:fd:81:b7:f5:8c:a5:ee:7a:58:61:a0:fb:ad:
                    72:1a:57:12:54:6b:a3:d3:2e:7e:4a:a5:34:28:49:
                    3c:96:1d:a9:53:ff:17:b7:77:fe:11:54:b1:0a:c3:
                    eb:75:6e:0f:44:f2:d3:09:b0:5f:ba:b9:6d:fb:97:
                    09:fc:94:32:02:39:0c:5d:0c:fb:ef:f6:3a:cf:10:
                    87:91:ab:8a:d2:42:d4:3d:56:26:5b:fb:5f:22:b5:
                    b8:22:a7:f9:c8:f7:8e:5b:a5:f3:dd:de:27:d2:03:
                    d6:93:63:81:a7:4c:a6:7a:99:90:22:66:1d:43:23:
                    f5:62:d3:c0:8d:04:5b:20:b7:ee:53:51:a3:53:c9:
                    6a:56:d3:57:71:7e:48:8c:2b:91:d9:48:5b:32:26:
                    28:97:20:ba:50:70:82:33:10:f0:e4:5c:c6:ab:77:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:86:E9:B2:B7:F3:E3:1A:27:A4:F5:94:77:A7:81:96:E6:94:C6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a290a16-187d-38fb-8970-6b614faeccf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:9100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:91:8c:3f:d8:5c:95:5f:7a:cc:e6:db:e4:39:dc:2c:f2:
         12:7e:2a:a2:0c:ed:2f:53:f5:5e:53:6e:73:64:56:16:fc:68:
         e1:97:86:c7:87:20:f7:92:d1:17:87:d6:c9:0e:a2:f0:42:b0:
         6c:22:97:4b:95:04:ed:83:31:2e:ae:c0:3b:b2:68:be:12:75:
         c4:5e:38:72:56:07:62:ae:12:f7:44:bb:b7:6e:1e:3f:48:b7:
         7b:49:e7:c8:a4:c5:b3:f8:1c:64:51:a0:dd:49:c3:25:21:e5:
         01:01:f4:b4:0f:91:89:fe:16:4c:0a:7e:2e:37:16:df:38:e9:
         0a:8d:f5:a2:72:dd:71:b9:55:1f:51:f2:c2:d0:86:28:b7:8b:
         08:6e:19:e1:06:11:fd:bb:bd:38:09:32:da:b6:98:0c:c3:fd:
         fa:c9:54:f3:45:80:a8:03:5d:b2:bf:4d:e9:ae:1d:e0:12:c3:
         f4:77:eb:89:1c:77:f3:da:35:c6:ae:0a:3e:83:eb:b6:28:48:
         1e:af:59:d1:78:b4:56:75:30:a0:a3:d9:b6:22:dc:3a:56:8b:
         34:94:ce:47:c7:18:26:a8:99:86:97:c8:d5:f1:5a:73:e2:29:
         b0:ad:e9:47:6f:6d:24:0e:1e:a0:54:9b:ec:77:bb:9c:ab:1c:
         4d:d9:68:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:52:05 2025 by rpki-client