Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/459ef2c3-853b-34cb-b26e-06e14deab950.roa
File:                     459ef2c3-853b-34cb-b26e-06e14deab950.roa (raw, json)
Hash identifier:          m1Orx40SbBXd33S7UP1nkStgNBsvM8vE9v6FFOTv3IY=
Subject key identifier:   7F:75:14:DC:13:4F:F1:37:A4:61:78:8E:8F:7E:4F:1F:1B:9B:12:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EC65CC689F86A9D96980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/459ef2c3-853b-34cb-b26e-06e14deab950.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1005:b160::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ec:65:cc:68:9f:86:a9:d9:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=bec3a1f3-9e06-4388-a137-c35480cb58dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:57:4f:b4:04:d9:9e:1e:37:0b:17:00:26:
                    82:c6:9b:44:63:42:43:bc:a1:83:90:71:27:2b:4e:
                    7b:5d:b1:60:82:a9:5b:27:5c:d8:20:a2:a4:3b:48:
                    f0:47:42:fe:70:6d:46:b2:0e:32:43:57:65:eb:72:
                    22:bb:f0:0e:0d:a0:cf:02:cb:45:ed:9c:fd:2e:79:
                    42:4b:43:c4:99:22:07:20:af:62:0c:37:56:6c:46:
                    7a:5a:d1:6a:1f:00:0e:f4:ac:ee:70:da:5d:2a:b1:
                    22:66:fd:40:80:73:70:64:c2:ce:b7:a4:02:ca:bf:
                    38:a3:15:38:13:d6:18:58:94:43:a5:32:e6:9f:ff:
                    97:a9:d4:76:cc:1b:c9:4f:1a:63:cf:c6:47:e6:97:
                    73:9f:f0:9f:20:50:a0:68:98:33:9d:8a:01:73:f3:
                    84:c6:08:7c:51:86:f3:5a:80:66:60:ff:aa:44:4e:
                    bc:59:f0:ce:80:75:47:18:35:87:5e:73:6e:00:68:
                    0c:a2:79:0c:51:e8:97:4c:d0:2a:82:16:34:73:df:
                    eb:98:34:8e:91:95:d7:a3:af:04:18:97:2d:ff:fb:
                    00:2c:fe:64:ae:06:05:a3:59:e0:a1:dd:bb:a3:97:
                    dc:e8:07:fa:56:44:c1:47:28:58:8a:40:94:0d:ba:
                    77:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:75:14:DC:13:4F:F1:37:A4:61:78:8E:8F:7E:4F:1F:1B:9B:12:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/459ef2c3-853b-34cb-b26e-06e14deab950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:b160::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:93:f9:9c:7f:dd:b2:51:10:7e:8c:86:d4:a6:a3:8a:61:b7:
         43:4c:40:a8:bd:aa:81:bc:d1:8d:bc:69:fa:e0:72:31:fe:c8:
         54:a6:fe:c9:ef:50:e1:a2:62:c8:c8:23:d2:a8:b5:35:27:e1:
         5a:5e:13:91:64:81:ed:3e:bf:2f:94:22:3b:61:7a:ed:f0:a0:
         6c:44:20:65:76:59:8f:b3:4d:14:d5:1f:2e:43:06:19:68:ca:
         64:5a:08:9e:1f:a2:c3:94:2d:21:5b:db:88:94:cc:51:9c:d3:
         ce:0c:31:a2:7f:e0:26:e7:e5:3b:c3:45:9a:f3:42:35:5e:a3:
         18:bc:23:5a:88:ed:69:2b:ea:88:10:7f:78:06:47:8e:51:67:
         6a:90:0d:32:c2:cc:11:81:28:64:c1:49:86:77:c3:67:7a:7b:
         6e:35:bf:51:8b:1e:19:a3:e6:f7:61:46:31:fd:4d:5c:1a:14:
         dc:d7:70:48:78:75:bb:a0:14:73:e2:1b:b8:aa:42:25:cd:98:
         96:c5:ac:5c:37:60:7f:6b:eb:05:28:25:d9:fa:1b:c1:07:ad:
         8f:98:b6:b9:8d:a8:b1:12:2c:8a:e8:de:84:81:88:19:ec:fa:
         2b:8f:0d:4f:d6:dc:0f:e7:12:71:dd:c3:30:1b:5d:2d:7e:da:
         ba:b8:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:22 2025 by rpki-client