Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cc97f66-8dc8-37a2-8f8a-793b70557150.roa
File:                     4cc97f66-8dc8-37a2-8f8a-793b70557150.roa (raw, json)
Hash identifier:          24O2Fk6F3LxNfC63I7FLIWArwjAPUsxtix2O9Wu3dxw=
Subject key identifier:   1C:D6:1A:A7:80:CD:A8:A5:01:FE:A4:5C:47:67:B5:AE:54:54:DF:7C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C36EDA9643D73128224B7E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cc97f66-8dc8-37a2-8f8a-793b70557150.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     6167
IP address blocks:        2600:1005:d140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ed:a9:64:3d:73:12:82:24:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=f9112a3b-ce40-423b-bee8-142365edfbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:9b:6c:c6:11:02:5c:cb:01:dd:39:45:12:
                    fb:2a:12:5a:9e:2e:08:2a:81:2e:d9:ca:7f:ca:c1:
                    0d:0f:d8:40:25:61:31:06:c5:96:4c:56:30:a1:6b:
                    34:87:ab:a9:89:9d:30:17:59:88:27:ab:0c:7d:1a:
                    7b:cb:24:03:3b:24:70:08:2f:7e:2c:d7:99:83:a4:
                    ce:e0:82:ae:a6:95:d3:7d:fb:2e:04:63:71:33:53:
                    f6:72:37:18:9e:5f:8f:18:15:b3:89:1a:8c:36:6c:
                    23:5d:cb:64:9e:27:2d:03:82:23:f1:d0:a0:f8:0e:
                    d1:97:21:c9:02:d4:db:22:5e:03:e3:29:07:c4:f5:
                    2e:06:c4:94:c7:33:8c:1f:44:5c:07:4f:e8:dc:96:
                    8f:95:7f:b6:82:96:2a:04:51:4d:83:84:dd:f2:94:
                    3a:e4:b6:85:2b:e2:06:95:1c:0a:3a:8d:7f:08:c7:
                    37:ee:48:0d:39:c9:1b:51:2f:d7:26:9d:46:e7:d1:
                    09:19:0d:98:24:a3:90:ea:20:34:1c:74:1e:bd:b4:
                    d3:bd:8a:0c:b6:32:64:a4:b5:70:c7:e9:ca:05:21:
                    7f:2c:54:24:b7:a0:cc:fc:95:f0:bf:35:30:60:76:
                    d2:50:ad:5b:36:f3:b2:e5:f8:0a:77:7b:84:ff:39:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D6:1A:A7:80:CD:A8:A5:01:FE:A4:5C:47:67:B5:AE:54:54:DF:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cc97f66-8dc8-37a2-8f8a-793b70557150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1005:d140::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:63:48:56:8f:5f:8f:3e:41:1e:ca:a4:20:92:62:7f:95:
         a5:9f:16:5c:ed:17:64:41:75:17:c2:62:29:80:cd:bd:84:1a:
         48:a1:c5:cc:b5:28:82:2e:d2:e7:b5:f2:56:73:64:11:f9:d8:
         0e:bc:14:19:56:f1:39:be:30:ed:66:b5:96:e3:b5:78:ee:ed:
         0b:a4:e9:a7:27:09:2d:f7:b7:9f:d9:36:06:e7:2d:22:70:cf:
         e3:fc:0d:84:b2:41:1f:0b:e5:96:ad:ea:ef:78:fd:24:8a:ec:
         d0:8b:3f:e5:78:a9:f6:d8:9a:70:8b:da:0a:ac:ff:38:bc:c0:
         5d:57:90:64:f5:b6:b2:79:8b:f5:c1:06:80:8c:b8:3c:60:70:
         f2:af:ac:8d:14:1b:28:43:e6:f9:11:19:d8:48:56:c5:e1:13:
         bd:3d:6a:c1:70:04:59:1e:61:72:27:59:06:5f:99:7f:85:9a:
         a7:78:9e:42:f7:51:8e:33:ad:6b:ae:ac:a8:ac:fc:a6:6d:3d:
         4b:2e:38:d4:fb:1e:6e:60:47:85:5f:cd:0a:d2:5b:5e:37:cf:
         b7:2f:5d:3b:49:aa:71:3d:6e:89:5d:9c:ea:62:0a:b5:12:3c:
         f9:ae:46:09:a1:28:e0:a2:df:83:02:54:f3:10:2a:b4:74:82:
         88:14:b5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:58 2025 by rpki-client