Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a85bc02-c232-32a4-afa5-874e560f0fe1.roa
File:                     3a85bc02-c232-32a4-afa5-874e560f0fe1.roa (raw, json)
Hash identifier:          Nsc7QQJOZE7vjTSARxKrwDQrEvMCXUXHpMVD9ARmKlg=
Subject key identifier:   52:CD:E8:17:04:3E:3F:73:29:05:8B:D3:A4:5C:FE:A3:BE:09:61:CE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3725AAE65C6E2437A46F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a85bc02-c232-32a4-afa5-874e560f0fe1.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1004:a040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:25:aa:e6:5c:6e:24:37:a4:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=9e87c938-748e-4856-bf10-0336cc3b25bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:59:e9:28:7e:b8:df:05:5d:b4:45:4d:fd:f6:
                    ae:5a:e5:67:09:5e:da:7e:5a:6f:90:7c:09:6d:0a:
                    97:32:34:8d:fb:ef:ce:d8:9a:00:ab:b0:27:ce:b5:
                    f4:d6:b4:65:fb:86:57:48:26:f6:89:3b:70:62:b2:
                    90:fd:bc:6a:f7:1b:06:8b:de:c4:b4:04:e3:e1:99:
                    a5:7f:83:19:35:e6:55:be:2c:7f:fb:dd:74:4f:72:
                    f7:8e:38:71:97:94:73:a5:92:a1:1a:47:09:3c:10:
                    bf:58:09:01:41:3d:c5:46:55:36:f3:1c:f9:a9:1b:
                    ab:aa:34:e8:85:54:59:f5:5e:60:86:24:41:ff:e1:
                    ab:bc:99:68:6d:a4:d8:73:4c:c3:58:da:fa:2a:ae:
                    97:19:a1:00:87:75:b3:15:04:60:96:dd:8e:5c:84:
                    98:4c:97:c4:c1:49:b5:fc:c3:e3:84:10:f1:12:56:
                    46:7d:e7:48:4a:19:0d:73:16:f5:c8:02:ac:07:97:
                    31:54:98:38:11:ea:c1:a4:1c:0a:cf:c9:aa:3e:3b:
                    94:ef:51:22:a7:2a:31:9f:c1:7d:f0:19:39:6a:da:
                    48:78:60:34:e3:59:02:29:55:b4:ff:ed:2d:a4:18:
                    58:5d:17:4e:02:99:ce:c5:50:80:e2:b6:e0:96:87:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CD:E8:17:04:3E:3F:73:29:05:8B:D3:A4:5C:FE:A3:BE:09:61:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a85bc02-c232-32a4-afa5-874e560f0fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1004:a040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:59:b7:51:a2:c6:8d:71:74:4f:e6:0b:59:50:a3:00:bc:ce:
         ac:f4:4d:49:30:76:59:ff:fc:95:7e:2b:32:71:c4:2b:50:7c:
         9f:fb:dc:9e:7f:de:b6:9a:51:55:fe:3e:bb:23:a9:5c:b9:59:
         00:79:a1:0a:69:0e:54:7b:52:dc:64:96:65:41:7b:0b:01:77:
         35:b8:e2:a2:40:13:d0:fa:2c:09:bd:a8:4b:8c:b5:c7:27:fd:
         07:00:c0:f7:a1:5b:24:73:21:c9:28:f2:d0:b0:55:87:35:6f:
         de:cf:db:5c:62:48:2b:75:6d:15:0f:0c:10:e7:03:4c:44:8c:
         b3:30:3f:7e:9c:14:71:73:be:46:6d:c2:9c:33:cd:03:1d:5d:
         ae:88:f8:0c:e6:a7:83:95:f5:28:ed:51:d2:51:51:bc:c8:00:
         00:f4:bd:ce:18:bc:3e:83:84:40:9d:e7:02:53:72:12:b4:b4:
         3b:29:c5:24:08:7b:4c:5a:24:93:33:fb:c7:24:bf:c0:18:06:
         22:23:fb:d7:fd:24:da:7e:c1:ce:ff:8c:06:f0:a2:54:30:94:
         fe:31:da:ca:6f:af:45:75:85:45:64:f1:59:68:90:c6:9e:65:
         37:7a:ac:fe:53:f9:cc:b7:32:f9:9b:ba:dc:09:a4:03:a8:0a:
         91:97:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:06:40 2025 by rpki-client