Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f4500e2-83a6-332d-adb5-40617a188d4e.roa
File:                     3f4500e2-83a6-332d-adb5-40617a188d4e.roa (raw, json)
Hash identifier:          nKEIUgl1So8LGsI68eVS5MpCop/EDa18x4nf29vmnbY=
Subject key identifier:   9D:34:F5:16:C7:38:A1:37:C4:94:2A:D0:A7:E2:9E:FC:03:42:A5:72
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A118793ECCEEBD9FF4D5D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f4500e2-83a6-332d-adb5-40617a188d4e.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1015:b1c0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:87:93:ec:ce:eb:d9:ff:4d:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=7dd467fb-fdac-4dac-9035-189a149b2e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:9e:84:55:5f:d9:ae:fe:03:be:c4:66:6e:
                    43:00:06:ae:ff:85:a9:a4:0a:e2:d5:82:29:47:08:
                    bb:83:e2:0d:a1:f9:dc:73:58:19:11:99:43:ba:29:
                    2f:0a:82:7d:41:5a:0a:87:31:24:da:0a:a5:8c:4d:
                    25:ef:d3:a2:8b:6b:5d:72:2a:c7:a5:01:e2:67:ac:
                    67:fa:96:f7:00:17:54:13:41:e1:d1:ce:54:20:d7:
                    80:16:1e:2f:7d:d7:1f:fb:08:4c:2a:5e:0a:7d:07:
                    21:fa:db:ab:fa:91:48:ff:ae:da:55:29:36:0d:5e:
                    27:bf:8d:78:cd:e7:22:e5:71:51:53:0b:e2:4c:fa:
                    b5:30:64:1d:f9:3c:e6:c4:4e:e4:75:94:3c:7e:b7:
                    74:3c:56:8b:c9:c3:de:af:a9:9b:f3:02:e6:fa:7f:
                    0f:c3:fb:1c:c5:6e:d2:70:1f:e6:7c:13:cd:3b:da:
                    7e:aa:67:fc:59:87:38:8d:d0:b3:ee:13:df:d7:04:
                    42:ef:5c:6a:d7:14:1e:6e:34:75:32:a4:b3:64:b6:
                    18:b5:34:bb:64:74:a6:8b:33:97:39:5b:d2:b4:93:
                    3f:76:5a:81:39:28:41:eb:2d:d0:c4:b8:1d:d9:a4:
                    44:5e:ca:c4:71:a2:f1:09:10:f8:93:a6:18:5d:8f:
                    b4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:34:F5:16:C7:38:A1:37:C4:94:2A:D0:A7:E2:9E:FC:03:42:A5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f4500e2-83a6-332d-adb5-40617a188d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1015:b1c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:5d:4e:03:b4:84:f2:fe:d2:e9:a3:83:0d:3c:e4:63:55:7c:
         1d:de:39:87:d0:13:8d:6a:eb:45:ba:4f:be:2f:bb:ec:fe:f9:
         d7:a2:88:1f:e9:41:ac:10:53:48:84:aa:e3:af:97:40:a1:7c:
         bc:29:2a:d7:8a:ff:95:46:6d:6a:9d:92:4c:16:3f:cd:2a:5f:
         6f:b7:2b:23:cf:cd:df:c7:87:45:cc:38:dc:a5:e7:65:4b:c0:
         7a:42:63:37:3d:21:e7:0c:84:c4:09:34:ad:89:b6:c8:b6:a2:
         d4:82:33:ab:86:9f:b1:68:49:d5:6b:dd:b6:d9:97:d5:71:81:
         03:ae:bb:dc:47:47:76:48:7c:fe:bc:50:6b:b7:ae:5f:d9:b5:
         42:dd:37:5e:5a:54:3d:d7:e0:ac:8b:23:f1:4e:66:db:41:28:
         66:56:72:e1:f7:c1:7e:25:e4:bd:20:bf:ee:f8:82:08:97:ab:
         8a:0c:b0:0f:ea:bb:e2:aa:53:9e:dc:74:5f:a5:f3:6c:9d:52:
         1b:0d:3d:0c:a4:7b:d9:b0:dd:38:95:27:ef:d8:fb:4a:c6:db:
         8d:37:b4:74:1b:6f:6d:21:f3:26:e0:f5:e3:4f:cf:7e:b6:27:
         f2:27:04:31:3a:5d:64:8c:b8:68:bc:d6:51:6c:8f:43:72:e9:
         a6:23:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:15 2025 by rpki-client