Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41a6ef50-ab45-3c6a-b772-bb5472d8efb2.roa
File:                     41a6ef50-ab45-3c6a-b772-bb5472d8efb2.roa (raw, json)
Hash identifier:          9UOczP2lXZT6ilfJixpYsR1Nom3z2qx5L0B8hNsuuJc=
Subject key identifier:   F0:42:80:56:0B:5A:C8:74:55:3A:C7:C4:1E:91:B4:DD:37:10:FA:DB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B0A117D8B73CB7A8FDFEA6E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41a6ef50-ab45-3c6a-b772-bb5472d8efb2.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     6167
IP address blocks:        2600:1014:b1a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:7d:8b:73:cb:7a:8f:df:ea:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=465ce1dc-917f-4b8c-b9c0-7511f90fd68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:3b:86:72:fa:1b:1d:82:ec:0f:bb:60:6a:
                    ca:f1:78:5e:fa:d2:6d:81:cd:ae:e0:4c:75:89:28:
                    e5:ae:6a:b9:67:3b:1f:1d:c4:24:16:2a:fa:c1:75:
                    03:be:b8:46:1b:5e:df:22:ea:ac:2f:4d:98:83:a1:
                    4b:42:50:48:f6:23:26:87:42:46:62:ed:d6:de:fd:
                    67:db:94:1c:30:a2:20:4d:09:72:c2:9e:af:e0:cd:
                    95:be:e8:b3:d6:f6:bb:1f:57:0d:dd:e8:bc:9b:f1:
                    b4:e8:9b:db:63:c1:24:32:5f:12:d0:ac:d7:53:11:
                    22:89:eb:1b:0b:71:1d:a6:c4:d5:d4:e5:34:cf:a4:
                    fb:81:f8:8d:e2:73:96:3c:ea:f8:04:26:7d:d2:ff:
                    50:55:4d:ea:f1:9f:0f:06:eb:7d:9d:cc:d9:cd:b3:
                    ec:c2:a6:b8:af:20:d6:c5:80:30:f1:26:c3:52:9f:
                    71:07:18:4d:cc:a5:42:fd:7c:29:37:36:bb:39:f9:
                    60:0d:53:f5:72:3a:fb:7d:6e:4f:bc:ca:ac:fc:1a:
                    89:4f:26:81:3c:36:f7:03:0e:08:ad:5d:47:cd:ef:
                    73:50:95:73:57:82:4f:54:e0:c9:3b:d8:9d:9e:3c:
                    d3:7b:8b:d4:ae:6c:14:b2:9b:b3:47:8c:91:b6:4e:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:42:80:56:0B:5A:C8:74:55:3A:C7:C4:1E:91:B4:DD:37:10:FA:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41a6ef50-ab45-3c6a-b772-bb5472d8efb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1014:b1a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:55:c9:0b:47:f3:01:e6:37:c8:29:3c:49:88:77:36:76:5c:
         e1:96:a6:3b:ca:c5:af:6c:e9:b1:57:47:ae:21:e5:36:af:03:
         4f:b0:19:f7:34:f8:49:60:15:86:a9:d6:34:7d:75:e6:48:58:
         2f:9a:a1:c0:76:cb:90:4c:d2:9f:98:f5:ad:41:83:d8:33:f1:
         22:d2:be:9f:8a:df:56:52:71:a1:1f:1e:e0:be:c7:fc:97:43:
         a9:f7:46:92:79:fe:62:f1:3e:1b:11:4c:3d:21:96:68:bf:40:
         a3:b4:f8:ec:7c:e8:b9:9f:aa:41:91:bd:04:4d:e3:ca:60:c9:
         85:4e:ce:8b:c1:41:0c:23:9f:32:fd:af:51:0f:d8:9c:e7:33:
         1d:f3:b4:35:68:89:1e:b8:fb:bb:40:d1:9a:79:fa:e7:0a:38:
         a3:a2:7c:ff:62:47:d8:30:76:ad:39:2f:da:0d:45:31:10:71:
         e9:ee:1d:64:eb:73:09:c4:31:9d:ab:89:26:5a:36:5b:1b:65:
         53:ed:26:f7:fd:8c:f9:af:a1:32:6d:c4:83:28:f9:62:14:a1:
         b9:35:fc:1b:b9:d9:ca:04:df:f4:9c:df:fd:9e:21:a3:6f:7b:
         b0:e2:49:13:af:2e:7f:fa:1c:80:e5:e0:1f:04:6c:26:30:9e:
         77:4d:ee:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:04:23 2025 by rpki-client