Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4790fe6b-54ce-3fac-98e5-0211e34f7928.roa
File:                     4790fe6b-54ce-3fac-98e5-0211e34f7928.roa (raw, json)
Hash identifier:          CUC9Dj8tAM89mHxlevW2mn4oArwRGp9Cg13ZkGvISnM=
Subject key identifier:   81:84:1D:92:1A:9E:BF:BA:31:82:08:84:D8:39:78:E2:17:83:03:23
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B434C8ECF920D193C84459400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4790fe6b-54ce-3fac-98e5-0211e34f7928.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     6167
IP address blocks:        2600:1009:a100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:8e:cf:92:0d:19:3c:84:45:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=66bbd57d-3c14-47f2-81ee-7dec69b94d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:67:0c:b5:55:01:19:f8:3f:12:54:2a:f7:
                    96:4e:65:cc:76:7c:33:8b:8a:bd:76:8f:18:41:23:
                    a1:2f:9e:13:9e:cc:7c:3c:1b:25:56:41:8c:6b:75:
                    36:36:7b:e9:84:1f:d6:0d:b0:d1:0f:d1:83:62:b8:
                    7e:e8:13:99:ec:a1:36:59:b0:bb:2b:d1:24:5b:42:
                    69:64:13:87:40:bb:5f:32:5c:26:4c:42:fd:11:79:
                    9f:42:c8:db:36:55:d7:cd:8c:ab:b9:9e:d2:c8:6b:
                    8b:2e:03:be:6f:79:71:02:34:72:e0:56:da:8a:f0:
                    2e:88:23:ca:99:16:72:63:32:ab:c1:92:e1:6a:95:
                    0e:72:3c:63:46:d1:96:22:ff:86:b1:b1:25:6a:d6:
                    2d:2c:3d:77:1b:54:13:6f:bf:8c:d1:f6:d0:dd:f9:
                    b0:87:8b:a8:4e:f6:2d:4c:e6:23:9c:86:a3:ad:e1:
                    9e:5b:63:81:98:e0:b5:ec:8a:d3:8d:e5:09:b0:81:
                    47:48:97:66:4e:8d:3e:cd:4a:60:98:7e:2f:d2:74:
                    9c:d6:d2:92:9e:a2:1c:a3:45:11:81:f6:7a:4f:53:
                    1d:2d:da:a3:f4:20:41:bf:60:d6:dc:d9:dd:8e:fd:
                    69:aa:4d:09:06:35:fe:10:d1:a5:03:13:0b:dc:ca:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:84:1D:92:1A:9E:BF:BA:31:82:08:84:D8:39:78:E2:17:83:03:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4790fe6b-54ce-3fac-98e5-0211e34f7928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:08:64:a2:49:90:e7:67:a2:d4:89:57:d4:c1:80:11:66:07:
         ed:9f:d5:cf:0b:68:20:45:51:7d:87:4c:68:1a:ff:6a:e9:b8:
         08:f7:4d:6d:c3:59:0b:05:b8:6f:a5:e7:a8:89:d1:48:54:44:
         54:4e:c6:86:73:df:d1:c3:63:9c:e7:c8:ae:3b:dd:5c:ba:1b:
         a1:ef:e5:f1:26:dd:b1:67:b2:84:99:cd:25:f8:a1:47:99:81:
         9e:a5:66:5c:4c:4d:23:3f:4a:04:3e:99:65:99:56:b9:9c:1a:
         48:16:ad:a2:85:fd:35:5b:0a:32:86:74:c4:eb:f6:92:91:f1:
         81:85:b5:74:3f:0f:e6:ef:0b:4f:3c:ac:53:7b:d3:85:a5:40:
         0b:d9:de:26:e0:75:00:d0:79:8f:62:58:17:1f:d3:87:53:54:
         50:1e:9f:a1:3e:9e:3f:47:d1:23:30:3f:61:2d:02:7f:ca:c6:
         0a:e8:64:ed:28:6b:49:0a:7d:a6:74:bb:d7:0f:95:9b:00:52:
         e1:fa:27:f2:04:8a:01:7e:a3:77:4b:f1:e7:cc:d6:85:d0:8b:
         00:bf:85:92:bc:fb:81:a9:bc:44:57:6b:ca:b1:aa:2a:cd:bb:
         7a:33:a4:cc:b8:4b:2f:dd:eb:e4:e5:18:df:6c:b1:76:b7:be:
         9e:38:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:08:17 2025 by rpki-client